Thorrez

54 ms·

931.
by Thorrez 3y ago
> Please don't comment about the voting on comments. It never does any good, and it makes boring reading. https://news.ycombinator.com/newsguidelines.html
932.
by Thorrez 3y ago
>There are no scientific merits for being an antivaxer though. Read pages 4,5,6 of this vaccine insert[1]. It seemingly says a large percent of infants have adverse reactions to vaccines (up to 85% for some vaccines and symptoms). An ant
933.
by Thorrez 3y ago
I thought you can only use deadly force if you fear for your life. A cop approaching you, or even physically grabbing you and moving you to a new location won't kill you.
934.
by Thorrez 3y ago
What does that mean?
935.
by Thorrez 3y ago
If the seller threatens to "steal it again".
936.
by Thorrez 3y ago
Does the Netherlands have a law against knowingly buying stolen property?
937.
by Thorrez 3y ago
If a car has its brakes on, it'll be extremely hard to accelerate. The brakes create more movement resistance than air resistance does.
938.
by Thorrez 3y ago
This thread is about how closely to follow a moving car. The worry is if the moving car suddenly switches to being stopped. Will you be able to also switch to being stopped before hitting it?
939.
by Thorrez 3y ago
> then down through the Caribbean, where the sailboat will dispatch humanitarian aid, working alongside local NGOs. The sailboat will also restock its coffee and cacao supply on its journey through the Caribbean. That supply is then brou
940.
by Thorrez 3y ago
Iphones don't support JS in PDFs, but yet an integer overflow in image decompression code led to a zero-click imessage exploit.[1] So lack of explicit code support doesn't mean you can trust without worrying. Bugs can be anywhere.
941.
by Thorrez 3y ago
They wouldn't notice if you buy a ticket to one city but get on a flight to a different city?
942.
by Thorrez 3y ago
Those specific numbers were about a plug-in hybrid. So with gas power.
943.
by Thorrez 3y ago
Does OECD include third world?
944.
by Thorrez 3y ago
Why is everyone saying ellipsis instead of eclipse?
945.
by Thorrez 3y ago
> "[hallucinating] a DJ software skin" to claim as a business expense I don't think he's claiming a hallucinated skin as a business expense. Rather he's saying the Turbotax UI has some slider in it, and he halluc
946.
by Thorrez 3y ago
Well, the string can be trusted to not have a working XSS attack, because it's been sanitized.
947.
by Thorrez 3y ago
I don't think Chisel has a goal of evading AV detection.
948.
by Thorrez 3y ago
Does it need live stream or would recording to the camera be sufficient? Can it do both at the same time?
949.
by Thorrez 3y ago
I don't think that's the case here. I think it's just tunneling the data, not the full TCP packets.
950.
by Thorrez 3y ago
I don't think it's tunneling the full TCP packets. I think it's extracting the data stream from the incoming TCP stream, tunneling that data, and creating a new TCP stream to the destination on the other end of the tunnel. So
951.
by Thorrez 3y ago
What benefit would a self-updating mechanism provide?
952.
by Thorrez 3y ago
>a fuzzer, which had to be disabled for the exploit to succeed. According to this comment, the fuzzer wouldn't have detected it. It wasn't necessary to disable the fuzzer: > https://news.ycombinator.com/item?i
953.
by Thorrez 3y ago
prctl, not prcntl
954.
by Thorrez 3y ago
What would not tracking mean? Is tracking whether someone is logged in or not tracking? Should a DNT header from the browser prevent the site from letting people log in? Some browsers send the header automatically. Should anyone using one o
955.
by Thorrez 3y ago
That sounds repayable though. If I did a tcpdump of the attacker attacking my system, I could replay that attack against someone other system. For it to not be replayable, there needs to be some challenge issued by the backdoored sshd. Of c
956.
by Thorrez 3y ago
According to[1], the backdoor introduces a much larger slowdown, without backdoor: 0m0.299s, with backdoor: 0m0.807s. I'm not sure exactly why the slowdown is so large. [1] https://www.openwall.com/lists/oss-securi
957.
by Thorrez 3y ago
The tweet says "unreplayable". Can someone explain how it's not replayable? Does the backdoored sshd issue some challenge that the attacker is required to sign?
958.
by Thorrez 3y ago
>- If the issue was ipv6 configuration breaking automated cert renewals for ipv4, wouldn't they have hit this like.. a long time ago? Did I miss something her AIUI, they switched to their current setup 90 days prior to the outage. T
959.
by Thorrez 3y ago
Well if you assume everyone has already been exploited, disclosing quickly vs slowly won't prevent that. Also, if something is being actively exploited, usually there's no or very little embargo.
960.
by Thorrez 3y ago
Is lawful interception possible with Whatsapp? I thought it had actual E2E encryption.

More ›