Buge

50 ms·

481.
by Buge 9y ago
No. HTTPS doesn't provide non-repudiation. HTTPS does not sign the content. It MACs the content.
482.
by Buge 9y ago
You could put it in the bitcoin blockchain. Or if you don't need that level of complexity and cost, you could put it on twitter, which doesn't allow editing tweets (but does allow deleting).
483.
by Buge 9y ago
The problem with that though is that people will think you've manipulated your copy. I've had people accuse me of this when I save pages with screenshots. You need to have a trusted third party make and store the copies. Sometimes
484.
by Buge 9y ago
>Unlike the giants, the ad tech firms have no direct relationship with consumers. They say Google’s and Facebook’s response pressures publishers to seek consent on behalf of dozens of ad tech firms that people have never heard of. This i
485.
by Buge 9y ago
>They might have to give you choice to turn those things off, but nobody can force them to give you the same experience. Isn't that basically what GDPR says? You have to be able to opt out of anything, without breaking things except
486.
by Buge 9y ago
The difference is whether you're talking about numeric growth or percentage growth. Idaho is #1 in percentage growth but not in the top 10 in numeric growth. California is #3 in numeric growth, but not in the top 10 in percentage growt
487.
by Buge 9y ago
Does freedom of speech extend to newspapers? Newspapers are corporations.
488.
by Buge 9y ago
The cost of hiring security engineers and testing for security bugs is constant with regard to number of users. Whether you have 1000 users or 1 billion users, your service has the same security if you spend the same amount on testing an en
489.
by Buge 9y ago
The right to freedom of speech means Google can say what they want when they want about the vulnerability, giving them the right to set a deadline. There are certainly companies doing much worse than setting 90 day deadlines. For example VU
490.
by Buge 9y ago
Not everyone agrees with you. Some people promote full disclosure. >Full disclosure is the policy of publishing information on vulnerabilities without restriction as early as possible, making the information accessible to the general pub
491.
by Buge 9y ago
>Only if you define easier as 'badly designed process'. I'd be interested to know what a good process is. >That is unfortunate, but why do you believe this will always be the case? I don't believe most (if any) onl
492.
by Buge 9y ago
Whenever you make the recovery process easier, you make it easier for attackers to "recover" victims' accounts. Switching from pseudo-AI to humans isn't necessarily better. I had an attacker successfully social engineer
493.
by Buge 9y ago
There's probably still some line. Just China hasn't reached Apple's line yet.
494.
by Buge 9y ago
>Opposing the Kremlin in Russia is meaningless. You'll just get stomped out. Isn't there some line where if a country does something bad enough you will refuse to do business with them? That doesn't seem meaningless to me.
495.
by Buge 9y ago
As it becomes more profitable for VCs to invest in startups, they invest more and in more startups. Now that there are more startups and they have more money, they need to hire more software engineers, and have more resources to do so. So s
496.
by Buge 9y ago
>No, the tool works like a brainwallet. Are you saying that is a good thing? It's well known that brainwallet is a footgun. https://en.bitcoin.it/wiki/Brainwallet >An early old-style brainwallet was created
497.
by Buge 9y ago
Public git repositories are not behind a sign in page. You can see the content of a public get repository with a simple GET request to the webserver. That was not the case here.
498.
by Buge 9y ago
So Upguard found a vulnerability in AggregateIQ's systems and downloaded a ton of data and are posting a series of blog posts with analysis of the data to determine AggregateIQ's practices? Are they not worried about getting hit w
499.
by Buge 9y ago
That's what Pincoin did >The company first ran the Pincoin ICO, promising constant returns to investors >Investors have been told that they would enjoy a profit rate of 48 percent a month from their initial investment, and recoup
500.
by Buge 9y ago
The article says even the latest version of iOS is vulnerable. Apple hasn't patched it yet. But if you have a strong enough password it won't work against you. The exploit only lets them try to guess your password more quickly. It
501.
Google Play Bans Binary Options Trading(play.google.com)
3 points by Buge 9y ago|0 comments
502.
by Buge 9y ago
I have ~1000 online accounts. I can't remember every site that I've signed up for or not, and whether or not they've been deleted. Many websites allow multiple accounts to have the same email address.
503.
by Buge 9y ago
I agree that's the answer. Unfortunately many services out there (including Netflix apparently) don't do that.
504.
by Buge 9y ago
> Some would say that Netflix should verify the email address on sign up, but there's no obvious attack that this mitigates. Someone could carry out this exact attack but without dots. The attacker creates an account, associates it
505.
by Buge 9y ago
Plusses are an optional part of a standard[1]. The main email standard does not require a+b@c.com to be treated the same as a@c.com [2]. [1] https://tools.ietf.org/html/rfc5233 [2] https://tools.ietf.org&#x2
506.
by Buge 9y ago
>It's easy to accidentally type "bob.foo" instead of "bobfoo" If someone made that typo (for a gmail address) everything would be fine, because both emails would go to the same correct person. There needs to be s
507.
by Buge 9y ago
That same problem can happen even without dots. People can simply mistype their email and have it be your email. That happens if even if neither of you have dots in your email.
508.
by Buge 9y ago
>Where is the security flaw here? Some would say it’s Netflix’s fault; that Netflix should verify the email address on sign up, or that Netflix should disallow the registration of james.hfisher@gmail.com when a Netflix account already ex
509.
by Buge 9y ago
MIT's official campus guide brags about the hacks as a way to try to attract students[1]. They are advertising the police car on the dome as a positive thing. I don't see any reason to think they would be upset about him going in
510.
by Buge 9y ago
That just says that Firefox is going to use 1.1.1.1 . But this Freedom to Tinker article is saying Mozilla helps operate 1.1.1.1 and that Mozilla has partial ownership. >Mozilla and Cloudflare are deploying their own DNS recursive resolv

More ›