DrewHintz

10 ms·

31.
by DrewHintz 13y ago
In March 2013, the Director of National Intelligence specifically told Senator Ron Wyden that the NSA does not wittingly collect any type of data on millions of Americans: http://www.youtube.com/watch?v=QwiUVUJmGjs&feature=youtu...
32.
by DrewHintz 14y ago
> ceoportal Sounds about right.
33.
by DrewHintz 14y ago
[Edit: Looks like I currently have no invites left. As I get more, I'll give them out and update this post.] I think I have a few invites to give out. Let me know if you'd like one. P.S. I'm Resistance using the name drew
34.
by DrewHintz 14y ago
It looks like it will be available for purchase on November 13. You can sign up to be notified when it is for sale here: https://play.google.com/store/devices/details?id=nexus_4_8gb...
35.
by DrewHintz 14y ago
Hi Rudhir, Drew from the Google Security team here. Actually, the authentication cookies that are set on mail.google.com aren't sent when you visit google.com, so the scenario you described wouldn't work. Those secure cookies are only sent
36.
by DrewHintz 15y ago
Google is finally going to support the NES: http://www.youtube.com/watch?v=rznYifPHxDg
37.
by DrewHintz 15y ago
Kan mentions that Exec is real-time compared to other existing services, such as TaskRabbit. I've used TaskRabbit several times and found TaskRabbit to be plenty fast enough, probably similar to the real-time described in the article.
38.
Splunk files for an IPO(sec.gov)
4 points by DrewHintz 15y ago|0 comments
39.
by DrewHintz 15y ago
Does anyone have a photo of the Sony employee uniform?
40.
by DrewHintz 15y ago
Unfortunately the faded small letters probably did not make your captcha more difficult to crack. It's relatively simple to remove all grey pixels from the image before OCRing it. However having your own custom captcha probably helped quite
41.
by DrewHintz 15y ago
What would the system use for its corpus of images and text descriptions? The corpus would have to be significantly larger than what any given attacker could manually identify. Once an attacker has manually identified an image+text combinat
42.
How not to design a CAPTCHA(plus.google.com)
310 points by DrewHintz 15y ago|88 comments
43.
by DrewHintz 15y ago
I doubt that encrypting the wallet on the HD would have helped much. It sounds like allinvain's computer was compromised. The attacker could have copied the decryption key when it was used legitimately by allinvain.
44.
by DrewHintz 15y ago
I just got hacked - any help is welcome! allinvain June 13, 2011, 08:47:05 pm Hi everyone. I am totally devastated today. I just woke up to see a very large chunk of my bitcoin balance gone to the following address: 1KPTdMb6p7H3YCwsyFqrEmKG
45.
by DrewHintz 15y ago
> A couple of seconds later squarewear knows I transferred the BTC and all is done. How do they get confirmation in a couple of seconds? I thought you had to wait for a new block to be generated/mined in order to have a confirmation?
46.
by DrewHintz 15y ago
"My Job As A Pre-Lunch Startup CEO Was To Buy Sandwiches" FTFY
47.
by DrewHintz 16y ago
A friend shot a similar video a bit closer to Mono Lake: http://www.youtube.com/watch?v=Ir2ISR-XjD4 The clouds disappear half-way through.
48.
by DrewHintz 16y ago
The simulator in the BB SDK reloads the BB OS every time you run an app. This lead to a 60+ second delay every time I updated the app and wanted to run or debug it. I gave up and thankfully someone else wrote the app: http://code.google.co
49.
by DrewHintz 16y ago
> Don't have a pen to write down your code In the Android app you can long-press the generated code to open a context menu to copy the code into the clipboard. I'm not sure if the iPhone can support something similar, but I'll ask the d
50.
by DrewHintz 16y ago
You can still use applications, such as email clients built-in to Android, to access your account. Typically you'll need to use an application-specific password as described here: http://www.google.com/support/accounts/bin/static.py?page=g
51.
by DrewHintz 16y ago
It's being rolled out over the next few days. Hopefully it will be enabled for you soon. http://googleblog.blogspot.com/2011/02/advanced-sign-in-secu...
52.
by DrewHintz 16y ago
The algorithm is RFC4226+TOTP: http://code.google.com/p/google-authenticator/ If you have a TOTP device that lets you set the key, then you can use that instead of your phone.
53.
by DrewHintz 16y ago
Thanks for the feedback. I'll see if we can enable it to use Google Googles as well.
54.
by DrewHintz 16y ago
Checking the color of <a> gives similar information. It's all client-side so you can do 40k+ URIs per second. Here's code I wrote to display the "digg this" button only to digg users: http://int2e.com/blog/improved-digg-integration
55.
by DrewHintz 16y ago
Two friends I went to UT undergrad with have started startups: - http://www.buildasign.com - a very successful company that sells custom signs - http://factorcode.org - While the startup portion didn't turn out to be commercially viable
56.
by DrewHintz 16y ago
At UT there are a few great upper-division software engineering classes, both in EE and CS. In particular one software engineering class I took has small teams act as a startup. You find a need, go through the process of figuring out what t
57.
Offer HN: Security Help
3 points by DrewHintz 16y ago|0 comments
58.
by DrewHintz 16y ago
> Are keyloggers and the like blown out of proportion Keyloggers and password reuse are a real-world security issue. Two-factor authentication provides an extra level of protection against them. > being locked out of your account/do
59.
by DrewHintz 16y ago
"Standard Edition customers will be able to access it in the months ahead" (disclaimer: I work on the project.)
60.
by DrewHintz 16y ago
A screaming-fast PC changed my life. I now play 3D games all day long.

More ›