FDSGSG

48 ms·

481.
by FDSGSG 6y ago
This article is well sourced, no?
482.
by FDSGSG 6y ago
Not very terrifying. Odds are someone with access to ancient validation links would also be able to perform new validations.
483.
by FDSGSG 6y ago
What's the point of having a CA perform phishing checks anyway? Especially since the phishers can just use letsencrypt.
484.
by FDSGSG 6y ago
The timeline is incorrect.
485.
by FDSGSG 6y ago
You have a weird definition of "inappropriate".
486.
by FDSGSG 6y ago
Of course it does, unless you were replying to the wrong comment in the first place. What was it you did not see any evidence of?
487.
by FDSGSG 6y ago
He wasn't. Why lie about this? https://community.signalusers.org/u/DuckSoft/summary
488.
by FDSGSG 6y ago
I think jsiepkes addressed this quite well in a sibling comment: >Shouldn't Signal then also warn or refuse to work on Android versions with known vulnerabilities? Or if there are apps installed on the device with the accessibility
489.
by FDSGSG 6y ago
You don't see why making such a pull request would be inappropriate? Do you understand what pull requests are for? Does this look like an attempt at productive contribution to you? https://github.com/signalapp/Sign
490.
by FDSGSG 6y ago
>is that a warning is better than lulling people into a false sense of security. But in the end any such warning is meaningless as it can't possibly be acted upon. >Again, your phone may not be compromised but your IME could stil
491.
by FDSGSG 6y ago
>Bundle an Open source IME to be used when in incognito mode Is there a good open source IME? I thought Apple/Google/Microsoft haven't been able to ship a decent one and most people use Baidu's. > 2. Warn users whe
492.
by FDSGSG 6y ago
What should Signal do about "the IME vulnerability"? They can't possibly defend against compromised phones. Why call it "the IME vulnerability" anyway? This isn't about a vulnerability, we're discussing co
493.
by FDSGSG 6y ago
>If their issues are closed (and Signal does not seem interested in discussing this) Signal merely asked that they post on community.signalusers.org instead of Github. >they feel like this is actively putting peoples lives in danger T
494.
by FDSGSG 6y ago
They even talk about their own inappropriate behaviour in this statement: >2021-02-06 12:00 @DuckSoft sended a pull request that adds the PoC to Signal TLS proxy's repository. It has since been deleted and both @DuckSoft and @studen
495.
by FDSGSG 6y ago
It's a LARP, not about a strong focus on security. These people do not normally sign their comments.
496.
by FDSGSG 6y ago
PGP means it's serious!
497.
by FDSGSG 6y ago
I run data collection scripts on 64 different darknet sites. Markets that accept both BTC and XMR get hardly any XMR deposits, WHM is a major market that makes up essentially all the XMR traffic but is growing much slower than BTC-accepting
498.
by FDSGSG 6y ago
Her previous tweet "Try and block me now pmarca" makes it much harder to dismiss this as just an unfortunate mistake in attribution. In context it very much appears like as if she was looking for anything she could spin to portray
499.
by FDSGSG 6y ago
And Libertas ended up shutting down because their exotic tech choices drove away all the users. At least 90% of darknet trade happens using Bitcoin.
500.
by FDSGSG 6y ago
Sure, Monero is technically better. But actual usage is what matters, and Monero doesn't have that. There's one DNM pushing Monero, nobody on cybercrime forums is using it. Ransomware operators have tried it, but usually shifted b
501.
by FDSGSG 6y ago
Bitcoin is an excellent currency for all sorts of illegal transactions. Buying or selling drugs online? Odds are you're using in bitcoin. Running a ransomware extortion scheme? Odds are you're using bitcoin for payments. Running a
502.
by FDSGSG 6y ago
At least in London and Dubai the first category is getting murdered by members only clubs and restaurants like Amazonico, Coya and Zuma. These restaurants just deliver a far superior product if #1 is the experience you're after.
503.
by FDSGSG 6y ago
The FTP server bug is a really boring LPE, it really couldn't matter less.
504.
by FDSGSG 6y ago
But how is a boring LPE related to election security?
505.
by FDSGSG 6y ago
Even 4chan would be veeeeery different without moderation.
506.
by FDSGSG 6y ago
No spam filtering? Presumably no DDoS protection either? Sounds exciting!
507.
by FDSGSG 6y ago
>the concern arises both from who that repo belongs to (many haven't rebuilt that trust) What's the concern? One of the largest Linux contributors is going to start pushing malware in their repos? If you don't trust MS, wh
508.
by FDSGSG 6y ago
If you're using Linux there's code by Microsoft being executed on your machine, MS is one of the largest contributors to the Linux kernel. This is a really bizarre thing to object to. >Now suddenly data flows between my compute
509.
by FDSGSG 6y ago
>Pornhub already add that functionality What do you mean? Pornhub accepts like 20 different cryptocurrencies, doge just happens to be on that list. Hardly evidence of adoption.
510.
by FDSGSG 6y ago
>The problem is adding a third party repo to their distro Why is that a problem? Lets not pretend that the article you linked actually provides a legitimate answer to this question.

More ›