Sephr

72 ms·

511.
by Sephr 8y ago
The best genetically engineered algae is over 90% oil by weight.
512.
by Sephr 8y ago
The culprit in question tried to do the same thing to a Voice Search Chrome extension in the past[1]. [1] https://twitter.com/sephr/status/1014240895095300096
513.
by Sephr 8y ago
> Such as […] bug bounties According to the OP, F-Secure paid them a bug bounty.
514.
by Sephr 8y ago
Fortunately you can still use Vulkan on iOS and Mac OS through MoltenVK[1], a Vulkan implemention in Metal. [1] https://github.com/KhronosGroup/MoltenVK
515.
by Sephr 8y ago
async/await has been a thing in JavaScript since 2010⁽¹⁾. 1. https://eligrey.com/blog/pausing-javascript-with-async-js/
516.
Zerodrop: Stealth URL toolkit for bypassing censorship filters(dangerous.link)
2 points by Sephr 8y ago|0 comments
517.
Zerodrop: Open-source stealth URL toolkit for bypassing censorship filters(eligrey.com)
3 points by Sephr 8y ago|0 comments
518.
by Sephr 8y ago
What does "bypassed privacy settings of Apple’s Safari browser" mean? Ignoring the DNT header? Setting third party cookies? Something about ITP? This article has practically no details about the actual accusation.
519.
by Sephr 8y ago
I found LocationSmart's pricing info: https://www.locationsmart.com/cms/resources/locationsmartpri...
520.
by Sephr 8y ago
Thanks, your write-up is very informative! I think the HN staff should change the URL to your post.
521.
by Sephr 8y ago
> and provide any additional context Any context at all would be appreciated. The Krebs article mentions almost no context whatsoever about the bug except that you found an unauthenticated API. Can you give some details about the API? •
522.
by Sephr 8y ago
Obviously I'm only referring to public IP addresses. Let's Encrypt can't attest anything about local IPs.
523.
by Sephr 8y ago
The solution is for Let's Encrypt or a similar CA to start issuing certificates for direct IP addresses.
524.
by Sephr 8y ago
ARIN already provides public APIs for this without the need for WHOIS.
525.
by Sephr 8y ago
A good talk on this subject is NSA Operation Orchestra: Annual Status Report[1]. 1. https://youtu.be/fwcl17Q0bpk
526.
by Sephr 8y ago
It used to be end to end encrypted secure p2p video/audio/text chat. That was removed, so there is every reason to hate it. Skype used to actually be secure.
527.
Google Inbox spoofing vulnerability(eligrey.com)
4 points by Sephr 8y ago|1 comments
528.
by Sephr 9y ago
Do you use ML on street view imagery of addresses to attempt to detect if an address is abandoned (and subsequently, more likely to be used to recieve fraudulent orders)?
529.
by Sephr 9y ago
Unencrypted SNI is still the global standard for TLS, and it is supported by most commerical tracking software. Tracking complexity has not been increased in practice.
530.
by Sephr 9y ago
"It's not too hard to imagine…" isn't exactly the same as saying "It's true that…". I don't have hard evidence, but it's not hard to imagine VirnetX being manipulated behind the scenes by the US
531.
by Sephr 9y ago
OFTN OSWG started work on a tag-based filesystem called TPFS[1] back in 2011. The Haskell source code might be useful to anyone interested in developing platforms that use tag-based filesystems. [1]: https://github.com/oftn-
532.
by Sephr 9y ago
I was working on exactly this many years ago at the OFTN OSWG with an open source project called Hum. I stopped development after Apple got sued for secure p2p video chat with the original version of FaceTime, seeing as Hum was also going t
533.
by Sephr 9y ago
OFTN Inc. | Android & Electron Developers | Go & JavaScript (ES8) Developers | Part Time and Full Time | Remote | Hourly We are building an application for Android and Windows that allows users to send audio with low-latency over a
534.
by Sephr 9y ago
What kind of malware did you run into?
535.
by Sephr 9y ago
I wonder if security vulnerabilities will be found in the resultant eventual legally-required filter software…
536.
by Sephr 9y ago
> AMD replies privately Their replies are only private if the discloser keeps them private. The discloser is free to publish their correspondences with AMD which may include a timeline. Regardless, this entire publication can happen with
537.
by Sephr 9y ago
> until AMD authorizes publication AMD doesn't have the power to prevent publication of research from third party researchers that haven't entered in an agreement with them. This definitely isn't insider trading.
538.
by Sephr 9y ago
https://twitter.com/dguido/status/973628511515750400
539.
by Sephr 9y ago
Dan Guido is backing up their claims.
540.
by Sephr 9y ago
Nothing at all, and CAA doesn't help solve the problem either unfortunately. Even when it comes to CAs that voluntarily adopted CAA, their implementations have silently failed on occasion. See https://www.net.in.tum.de/

More ›