Buge

14 ms·

91.
by Buge 7y ago
Even Microsoft created a video criticizing gmail privacy: https://www.youtube.com/watch?v=9x4_dozWkq0
92.
by Buge 7y ago
That doesn't tell us how he was assigned to that group. It might have been a dice roll. Or maybe he chose to be in that group.
93.
by Buge 7y ago
To me "would of" and "would've" are pronounced exactly the same. If I said "would ev" that would sound weird. It would sound very similar to "whatev": https://www.urbandictionary.com&#
94.
by Buge 7y ago
I've always heard that cold boot attacks like that require the ram to be frozen before the computer turns off (or the ram is removed).
95.
by Buge 7y ago
This specific implementation doesn't brick it. It just locks the screen (or you could make it shutdown).
96.
by Buge 7y ago
Are there many talks about a single person's vim config? That seems like a poor topic to me, and I'm not sure how many people would consider it a good idea.
97.
by Buge 7y ago
See news articles about it from the time, and a petition telling Google to stop: https://usatoday30.usatoday.com/tech/news/2004-03-31-google_... https://web.archive.org/web/20040604175545&#x2F
98.
by Buge 7y ago
1. Forcing people to use registry edit hacks is not an acceptable UI. There's no guarantee that those registry hacks won't stop working tomorrow. There needs to a real documented way to do it. I have Windows 10 Pro. I used to disa
99.
by Buge 7y ago
> the CIA surely has sufficient internal incentives to fix privately disclosed vulnerabilities. Do they? Also various people could have different definitions of "sufficient". They might previously have had 3 people spending hal
100.
by Buge 7y ago
I wonder if Tesla gives different service for Model S vs Model 3.
101.
by Buge 7y ago
It could also aid the CIA in making a more secure virtual fencing solution. It's similar to the debate about full disclosure vs coordinated disclosure. Some companies pay for bug bounties. Additionally it could convince the CIA to dist
102.
by Buge 7y ago
I don't think drawing a random tarot card will help me write a better postmortem. If I started doing so my colleagues would probably start to doubt my judgement. Maybe skimming through all the tarot cards in order to pick relevant ones
103.
by Buge 7y ago
I said "might be", and someone might estimate a word to have 10 bits of entropy. And you previously said dictionary words, not random dictionary words, so a human choosing those words might choose words that relate to each other.
104.
by Buge 7y ago
But the 10 dictionary words might be less secure than 16 random characters. xkcd estimates a word has 11 bits of entropy.
105.
by Buge 7y ago
Possibly attending but not graduating (Bill Gates and Mark Zuckerberg come to mind).
106.
by Buge 7y ago
>Otherwise they could have just liquidated the Bitcoin to legal tender before donating thereby relieving the recipient institutions of the challenges associated with it. Pine's money is likely in a not-fully-legal status. That'
107.
by Buge 7y ago
Where is that citation from? Are you quoting from somewhere? I can't find it in the article.
108.
by Buge 7y ago
It's possible to criticize one part of the article (calling people amateurs) without criticizing other parts of the article.
109.
by Buge 7y ago
Ruining access to a 0day sounds like a good thing to me. I don't want people to have access to 0days. Some people dislike the term "responsible disclosure" and believe it's not a moral imperative: https://hn.a
110.
by Buge 7y ago
Yes, but the overturn wasn't based on urls, or scraping, or disclosure, or security, or damages, it was based on him being charged in the wrong state. The court system still thinks everything else about the case was fine.
111.
by Buge 7y ago
> it got closed to his egregious usage. Hopefully it wasn't just closed to him, but closed to everyone else too. > Is this considered normal or ethical behavior for a security researcher? weev did something similar (scraped 100k
112.
by Buge 7y ago
What was ruined? And who ruined it?
113.
by Buge 7y ago
> The paper also suggests a potential change to regulation—making individuals within a company responsible for what goes wrong within that company’s IT systems. “When you personally are liable, and you can be made bankrupt or sent to pri
114.
by Buge 7y ago
>filters 90% of the bullshit. Why would Apple want to filter out people from integrating with sign in with Apple? I can see they want to filter out junk from the App Store, because junk on the App Store (like junk on Something Awful) red
115.
by Buge 7y ago
If something has a default password, default private key, or trusts a default public key, and that isn't clearly documented, that seems like a backdoor to me. It would be an undocumented way of Huawei or random hackers taking over your
116.
by Buge 7y ago
> simply being L5-L8 The article says he applied to many companies, and they all turned him down because he was too suspicious.
117.
by Buge 7y ago
> Now the blog posting is inaccurate here as well, it is not the application which needs to make an interpretative dance of some kind. We actually are doing it in the kernel, Yeah, I was thinking the article looked inaccurate there. Than
118.
by Buge 7y ago
How is that relevant? Why would working for a military contractor with guards and guns mean you should use an image from thispersondoesnotexist.com instead of an anime picture? Especially when your 100 friends also use an image from thisper
119.
by Buge 7y ago
So you're saying there are hundreds of people who all create accounts at the same time, all use the same type of profile picture, all join together to be admins of political groups, and then all spend all day spamming links to thebl.co
120.
by Buge 7y ago
SSE can deliver out of order? Is that within a single EventSource or across multiple. I thought that within a single EventSource all messages were in order.

More ›