Buge

32 ms·

301.
by Buge 8y ago
Huh? I haven't heard of the device itself storing any significant amount of data. And if it does, it would likely be somewhat difficult for the police to figure out how to get it. On the other hand, it's widely documented that Ama
302.
by Buge 8y ago
But will anyone be harmed by these screenshots? They're encrypted.
303.
by Buge 8y ago
Just because there's "next to nothing" doesn't mean there's actually nothing. The speech recognition sometimes has false positives on the wake word. Also there's the tiny chance that the victim yelled out Alexa
304.
by Buge 8y ago
Token Binding protects against more than just endpoint compromise. It protects against users who copy and paste their cookies somewhere (possibly due to phishing, or due to just debugging why a request is failing). It protects against webse
305.
by Buge 8y ago
You don't need to do a giant grep. You could put all links in a database, which contains pointers to where the links are used. Then if you want to delete a link, you can delete all those places. This seems equal or less effort than mak
306.
by Buge 8y ago
Firefox is also opt-out.
307.
by Buge 8y ago
I think it's been this way for the last year or so. I definitely remember links becoming mangled when clicked sometimes in the past.
308.
by Buge 8y ago
You can use GPL code in your company's servers. You cannot use GPL code in client binaries that you sell. You cannot use AGPL code in either.
309.
by Buge 8y ago
Is this a precedent that FB has set? It seems like a problem with any website with an account system.
310.
by Buge 8y ago
When I hover over links, or right click and click "copy link address" in a google search result page, I get the real link, not a shortened link.
311.
by Buge 8y ago
The developer put them in because the developer needs money to live. I don't think the economic reality of needing money to live is a slap in the face. One alternative would be to only have the pro version, not the free version. But th
312.
by Buge 8y ago
Maybe the card processor bans marijuana, so this is workaround for that rule.
313.
by Buge 8y ago
I've received many phishing emails claiming that my account has been hacked. So that is a case of someone "pointing out an attack" who is actually causing the attack. Even technologically knowledgeable people fall for phishin
314.
by Buge 8y ago
I thought the issue would have something to do with the warranty. Like apple might have a policy that says we cover manufacturing problems within some time period, but we don't cover water damage. In that case a correct determination o
315.
by Buge 8y ago
If facebook offered a single $1m bug bounty, it would have likely gone to some other vulnerability besides this. I would guess facebook gets a fair number of bug bounty reports of equal or greater severity than this one. Also in the past on
316.
by Buge 8y ago
How is this relevant? Hackers can steal recovery question answers regardless of whether web token vulnerabilities exist. And web token vulnerabilities can exist regardless of recovery question strategies.
317.
by Buge 8y ago
The first article has the date at the top: "October 12, 2018". They might intend to repeatedly update the second one, which might be a reason not to put a published date on it.
318.
by Buge 8y ago
There are still benefits of 2fa even if codes are stored in your password manager. It protects against most keyloggers. It probably makes phishing a little less likely (because most websites cache 2fa, so you'll be a little more suspic
319.
by Buge 8y ago
2FA is usually to protect you against your password being stolen. If that's the only threat model, then it's fine to allow 2FA to be disabled without a new 2FA code, as long as it's from a device that has entered a 2FA code a
320.
by Buge 8y ago
Doesn't the statement "That means we cannot confirm which users were impacted by this bug" indicate it was adopted before the hole was discovered?
321.
by Buge 8y ago
He said he paid $6k, and that he considers the money well spent. It seems weird that he would pay $100k and then claim to have paid $6k.
322.
by Buge 8y ago
>Why "minimum amount of code changes"? I would have thought the goal of minification would be to make the code as small as possible even if it requires a lot of changes. You're agreeing. Minification makes things as small
323.
by Buge 8y ago
He solved the fact that the general public didn't know how the malware spread.
324.
by Buge 8y ago
It depends on what "it" refers to. If "it" refers to no one except Durachinsky knowing how it spread, then yes, "it" was solved by the FBI a long time ago. If "it" refers to no one outside the FBI and
325.
by Buge 8y ago
> And entering Canada, the law is not actually suspended at the border and its vicinity So police in Canada can demand your unlocked phone at any point, not just at the border?
326.
by Buge 8y ago
wgx seemed to be saying that.
327.
by Buge 8y ago
Didn't Microsoft do something similar by stopping support for Windows XP, but providing support longer for people who pay special support contracts? Of course Microsoft also released some free security updates beyond the date too.
328.
by Buge 8y ago
Why? I think the main thing stopping it is safe browsing, which is the same thing stopping all other phishing sites from getting too big.
329.
by Buge 8y ago
That image appears to be using the new Chrome UI in the top level, and the old Chrome UI in the fake window.
330.
by Buge 8y ago
If you have 1GB of data, and want to change a small portion of it, that would require you to read the whole thing, then modify it, then write the whole thing back to disk. A database only requires a small amount of reading and writing.

More ›