Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
Sephr
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
38 ms
·
421.
▲
by
Sephr
8y ago
Its allowed on some SF sidewalks (e.g. near the Embarcadero) at slow speeds and all sidewalks if you are under a certain age. It can be operated as slowly and safely as a wheelchair and the SF cops won't give you any trouble if you go
422.
▲
Uniscoot Hovercycles (electric unicycle)
(uniscoot.com)
1 points
by
Sephr
8y ago
|
5 comments
423.
▲
by
Sephr
8y ago
You don't have to ask for permission to fork open source projects. You are free to port the project to JS as long as you follow the applicable licenses: https://github.com/timvisee/ffsend/blob/master/
424.
▲
by
Sephr
8y ago
I created a UTF-7 JSON hijacking method back in 2010 that enabled full hijack of entire JSON data streams in Firefox and Safari: https://www.reddit.com/r/programming/comments/b7ebd/json_sni... Originally
425.
▲
by
Sephr
8y ago
Personally, at my company we just use a private link redirecter at go.company-name.example. We use a modified version of the open source Zerodrop webapp[1]. This solution doesn't require a browser extension with elevated permissions th
426.
▲
by
Sephr
8y ago
> Even if it's just $20. $20 doesn't get you an EV certificate anywhere. We're talking about non-trivial hundreds of dollars per year, which is completely unsustainable for an open source driver for example.
427.
▲
by
Sephr
8y ago
I'm not arguing against reputation requirements, I'm arguing for consistency. EV certificates are literally a reputation requirement backdoor. If EV-signed apps had to deal with the same SmartScreen reputation requirements as non-
428.
▲
by
Sephr
8y ago
K-Software does not sell EV certificates for $85/yr. They start at $349/yr. The parent comment's issue is that EV certificates are essentially required due to the poorly-designed SmartScreen reputation filter. The $85/yr
429.
▲
by
Sephr
8y ago
There's a backdoor that lets your bypass the SmartScreen reputation requirement: pay more money for an EV cert[1]. I don't agree with this industry practice. Reputation requirements either shouldn't have backdoors or shouldn&
430.
▲
by
Sephr
8y ago
It looks like it's time for an "Un-paywall Medium" Chrome extension. https://twitter.com/sephr/status/1101176562274037760 I imagine that most causal desktop users would rather install an extension i
431.
▲
by
Sephr
8y ago
Snapping a rough/imprecise path onto a road system is not novel. The same type of algorithms are already used by all major mapping apps during rerouting and to correct for GPS inaccuracy during route transit. Sigma also has this featur
432.
▲
by
Sephr
8y ago
Riseup previously received an NSL and stopped updating their canary for a few months (only to resume later with new wording). The NSL was most likely related to getting access to WikiLeaks' Riseup email address and to get r/w acce
433.
▲
by
Sephr
8y ago
Here is my interpretation of Cloudflare's statements (and lack thereof) in their transparency report: "We received 0-249 National Security Letters" = "We are subject to one or more National Security Letters with associat
434.
▲
by
Sephr
8y ago
Anyone, including yourself can do that.
435.
▲
by
Sephr
8y ago
Here's a link to the research paper itself: https://www.nature.com/articles/s41598-018-37359-z.pdf
436.
▲
Google is discontinuing their free weather API
(research.eligrey.com)
57 points
by
Sephr
8y ago
|
17 comments
437.
▲
by
Sephr
8y ago
The official torrent links are also distributed over insecure HTTP and are also trivially easy to MitM attack.
438.
▲
by
Sephr
8y ago
Using HTTP for apt may seem bad, but you should really pay attention to Ubuntu itself: https://github.com/canonical-websites/www.ubuntu.com/issues/... Ubuntu ISOs aren't served securely and are trivially
439.
▲
by
Sephr
8y ago
This is pretty close to what you're looking for, except with a single 87W USB-C PD port and 4 12W USB-A ports: https://www.amazon.com/gp/product/B07DGTFQTD/
440.
▲
by
Sephr
8y ago
LocationSmart advertised themselves to bounty hunters[1]. This kind of unethical/illegal location sharing from other location brokers like Zumigo is unsurprising. 1. https://twitter.com/sephr/status/1082711937
441.
▲
by
Sephr
8y ago
That website has recently plagiarized an article I helped write, so good riddens.
442.
▲
by
Sephr
8y ago
"Will be" or "are"?
443.
▲
by
Sephr
8y ago
It seems like any MailChimp mailing list emails containing the word "crypto" set off automated systems which result in account bans. This is an extremely poor anti-spam "hueristic" (if it even deserves to be called that)
444.
▲
by
Sephr
8y ago
1Mbps uplink would cause a severe hindrance for any remote work involving a team and heavy collaboration tools or videoconferencing.
445.
▲
by
Sephr
8y ago
There are many door access control systems vulnerable to this same kind of attack. I'm currently working on open source red team tools for exploiting this. The best way to protect yourself from these type of attacks is to have a Farada
446.
▲
by
Sephr
8y ago
From that first Wikipedia page I discovered this interesting video demonstrating hydraulic artificial muscles: https://youtu.be/a6mRhuR_g-E?t=56
447.
▲
by
Sephr
8y ago
I thought bioengineered algae oil (e.g. http://algawise.com/ ) was supposed to help us save the planet, seeing as it's both healthier and more sustainable than palm oil.
448.
▲
by
Sephr
8y ago
People don't age backwards, so the question doesn't need to be asked again.
449.
▲
by
Sephr
8y ago
You don't need anything, just the user's affirmative confirmation in response to the prompt, "Are you 18 or older?"
450.
▲
Unfixed spoofing vulnerability in Google Inbox mobile apps
(go.eligrey.com)
2 points
by
Sephr
8y ago
|
0 comments
More ›