RL_Quine

20 ms·

181.
by RL_Quine 5y ago
Why use gpg at all? SSH supports FIDO.
182.
by RL_Quine 5y ago
If it's anything like the patching in some common bluetooth controllers, the patching area was filled up a long time ago with new features and they don't want to respin the base silicon.
183.
by RL_Quine 5y ago
> Log into Facebook to use this tool. Not sure I'd even list that as a reasonable alternative.
184.
by RL_Quine 5y ago
Certspotter is basically just crawling for matches, it doesn't retain them.
185.
by RL_Quine 5y ago
It's impractical due to the size of the data. You're talking hundreds of millions, or billions of certificates.
186.
by RL_Quine 5y ago
https://crt.sh/
187.
by RL_Quine 5y ago
NPM has a market force towards people spamming uselessly small libraries, and the result has been obviously extremely poor software. I can't imagine how terrible it would be is you made direct, open financial incentives to do so.
188.
by RL_Quine 5y ago
This basically popped into existence 30 days ago with a discord instance and not a whole lot else. https://twitter.com/mxcl 'ceo @teaxyz_' https://www.binance.com/en/blog/ecosystem/
189.
by RL_Quine 5y ago
Your security staff have access to literally everything in your company, visibility into all communication and trust with physical devices. If they're not the highest paid of your engineering staff you screwed up. Glad I don't hav
190.
by RL_Quine 5y ago
That's terrible for a security position. No wonder they aren't motivated.
191.
by RL_Quine 5y ago
Yeah, this blog post is shoveling it. They were popped, they aren't internally consistent in their dismissal of it.
192.
by RL_Quine 5y ago
I have never seen a company based in the US distribute such absolutely terrible software unabashedly, no. I recently looked at the software which came with a laser cutter, which included a cracked copy of a CNC controller software, some ran
193.
by RL_Quine 5y ago
I don't think it is positive to shy away from calling something unsafe because somebody might be offended by it.
194.
by RL_Quine 5y ago
Probably given the sender is always the same for those, the work to recover the text is probably literally just the key space of the code. Like, 1M hashes in a lookup table for a normal bank 2FA code. Recoverable in microseconds.
195.
by RL_Quine 5y ago
By and large, every piece of software that comes from China like this is the same. Barely functional when it comes from a random FTP server in a rarball you got from a link in an email, works best on a pirated copy of Windows XP, and half t
196.
by RL_Quine 5y ago
Except for it being unmaintained.
197.
by RL_Quine 5y ago
The exception is U2F, which binds the key to the domain name to prevent pass through attacks.
198.
by RL_Quine 5y ago
3 months.
199.
by RL_Quine 5y ago
Yeah- been there. They at least now tell you that, rather than the support playing dumb and telling you they have no idea what's going on.
200.
by RL_Quine 5y ago
Everybody was instantly logged out, which doesn’t make sense if their backend just went down, as the app normally works fine offline.
201.
by RL_Quine 5y ago
If they're not checking everything , any sort of non-general modification of traffic will obviously go completely unnoticed. The bad exit flag really is only ever going to catch the most obvious, ham fisted bad behaviour.
202.
by RL_Quine 5y ago
The behaviour of not always using the same exit means that you, over time, will almost assuredly use a malicious exit should more than zero exist. It's reckless to suggest that anybody should be using this system, your situation is alm
203.
by RL_Quine 5y ago
That version almost certainly has exploitable CVEs. You can't just not update a browser.
204.
by RL_Quine 5y ago
It is variable length but not a string.
205.
by RL_Quine 5y ago
This is pure idiocy, they don't even have slightly the same operating frequencies.
206.
by RL_Quine 5y ago
No.
207.
by RL_Quine 5y ago
The "the code was ugly" thing is an often repeated statement but doesn't really reflect the reality of what was released. The source code is very tightly integrated, but it avoids many of the common issues you would see in so
208.
by RL_Quine 5y ago
By definition as root you can, irrespective of if they are files or not. You have complete access to the memory, networking, and code execution state of the machine.
209.
by RL_Quine 5y ago
The S19 Pro is down to 29 J/TH system efficiency, not far off beating the Intel design by 50%.
210.
by RL_Quine 5y ago
What's described here is deeply noncompetitive, even if it was released today. From the pictures of the PCBs in that article I suspect it is the combination of both being incredibly expensive to produce and miserably inefficient.

More ›