Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
MajesticHobo2
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
6 ms
·
31.
▲
by
MajesticHobo2
2y ago
Can you point me to some documentation or proof of concept for this? Would definitely like to change my workflow if this is the case.
32.
▲
by
MajesticHobo2
2y ago
Related/funny: three years ago, someone found exactly such a bug because it was exploited against a Minecraft server they were running in screen (probably without the perpetrator understanding the root cause): https://lists.
33.
▲
by
MajesticHobo2
3y ago
> Is the syntactically correct dummy value the same each time? If so, how does that lead to new coverage? Per my understanding, the dummy value is constant but is only used once (to create the first valid TLV). Everything after that is a
34.
▲
Anti-Digit Dialing League
(addl.phreaknet.org)
2 points
by
MajesticHobo2
4y ago
|
0 comments
35.
▲
by
MajesticHobo2
5y ago
Since a WireGuard peer only responds to cryptographically authenticated packets and UDP is connectionless — you don't get confirmation at the transport layer by way of a handshake or anything — WireGuard ports are invisible to you unle
36.
▲
by
MajesticHobo2
5y ago
They also hire firms for regular security assessments (I did one of them) and publish the reports: https://support.1password.com/security-assessments/
37.
▲
by
MajesticHobo2
5y ago
> Signal is very proud that once a long time ago the state came to them asking for user data and signal could only tell them they had no data to provide. Have you looked at https://signal.org/bigbrother/ recently? T
38.
▲
by
MajesticHobo2
5y ago
Do you not stay logged in to HN?
39.
▲
by
MajesticHobo2
5y ago
Phishing is still an issue that could be prevented with security keys. That said, I don't see most HN accounts being very interesting to phishers.
40.
▲
by
MajesticHobo2
5y ago
You can listen to tapes from his teenage years in the late 50s, where he's singing in almost that exact early 70s croon. But his voice throughout most of the 60s was very different and, for the most part, intentionally so.
41.
▲
by
MajesticHobo2
5y ago
You're trusting the client whether or not it can talk on the network. A malicious update that starts generating predictable passwords for websites doesn't need a network connection.
42.
▲
by
MajesticHobo2
5y ago
This is true of any password manager.
43.
▲
by
MajesticHobo2
6y ago
In addition to that, "Cultural Marxism" doesn't just refer to Marxism. It's an antisemitic canard used pretty much exclusively by the far right.
44.
▲
by
MajesticHobo2
6y ago
Services hosted outside the US offer less protection against US intelligence agencies, not more.
45.
▲
by
MajesticHobo2
6y ago
> Also would a CORS "Access-Control-Allow-Origin: localhost" prevent the connections being established? WebSocket isn't bound by CORS, AFAIK.
46.
▲
by
MajesticHobo2
7y ago
While I found the talk more compelling, it's also worth mentioning Moxie's 2016 article, "Reflections: The ecosystem is moving", for several of the key points: https://signal.org/blog/the-ecosystem-i
47.
▲
by
MajesticHobo2
8y ago
Are you just going to ignore the fact that the official Twitter account for Gab actively promotes white supremacist talking points? It only takes about 30 seconds of scrolling through their feed to see this.