adricnet

9 ms·

31.
by adricnet 11y ago
Bokken is great but I only really use it on REMnux because it's difficult to install due to dependencies and relation to other products there.
32.
by adricnet 11y ago
This brief writeup from Puppet Labs seems to answer most of the questions I had about the nature and usefulness of the technology released. https://puppetlabs.com/blog/nsa-release-system-integrity-man...
33.
by adricnet 11y ago
Ah, the document at that link is a) labelled confidential and b) scanned and OCR'd with some problems visible on the first page. If this is officially public I would like to read it, please provide a legible copy. If this a leaked docu
34.
by adricnet 11y ago
Thousands of mobile app developers feel this pain now, from that particular library. Not updating these applications is not acceptable to most organizations / device operators. Just in case anyone thought the parent was sarcasm or theo
35.
by adricnet 11y ago
This is actually sometimes the case, though please double-check your analyses before committing to outliers or "betting the farm". Since it does happen and can work for some people / some places it certainly complicates the s
36.
by adricnet 11y ago
Chromebooks are not fragile by laptop standards, but are nothing like XO. You could try out one of these with a Bluetooth keyboard? They are somewhat sturdier than other tablets and have some OLPC-inspired software, plus whatever else for A
37.
by adricnet 11y ago
Wow. I did volunteer some with OLPC early on, but no to all of that. I'm talking about the water proof, sandproof, nearly indestructible laptop with the always viewable screen over there on my shelf with awesome user serviceability tha
38.
by adricnet 11y ago
I agree that was worth reading, but it seemed a touch harsh. There seems to be some disconnect between review objectives of 'is this a great product with growth potential' versus 'is this perfect for everyone' ... but ma
39.
by adricnet 11y ago
I backed the Kickstarter. Looks like a really neat device with interesting capabilities and Debian :) https://www.kickstarter.com/projects/1598272670/chip-the-wor...
40.
by adricnet 11y ago
This is a really interesting argument you've advanced. The chart you describe is illustrative and the changes wrought on it certainly disturbing. Unfortunately, I think you have over-simplified a complex issue to a dichotomy (encrypt e
41.
by adricnet 11y ago
Thank you for posting and discussing on HN. More discussion and more viewpoints can only help as we all struggle with these political and technical issues.
42.
by adricnet 12y ago
You trust wires? To me this sounds like the debate over WEP. I think it is still not commonly understood how secure wires are. I think that the WEP protocol and successors do a good job of fulfilling the desire for "wired equivalent pr
43.
by adricnet 12y ago
Side stepping your first point, apologies. The requirements of an individual organization are not something we can always change. There are other technologies to detect and resist injection in communications beside encrypting the whole netw
44.
by adricnet 12y ago
I'm not making a broad recommendation, expect maybe to slow down a bit :) It sounds like you have lots of usecases for applications that need protection against injection , MITM, or eavesdropping. It's great that you understand th
45.
by adricnet 12y ago
Not saying anything really about EFF's efforts or publication, however the topic is common now ... Please don't senselessly "encrypt all the things". May I encourage some requirements gathering and threat modelling? Who
46.
by adricnet 12y ago
HackerOne manages bug bounty campaigns / community vulnerability research for orgs and companies. This campaign is sponsored by FaceBook and Microsoft, according to this page: https://hackerone.com/internet-bug-bounty
47.
by adricnet 12y ago
Well, I put in for two and I imagine some others did as well. hth, adric
48.
by adricnet 12y ago
Objection: argumentative. And yes, if the claim didn't match with my observations I would expect that they have or be prepared to provide proof in some reaonable form. "Extraordinary claims .." and all that.
49.
by adricnet 12y ago
That's certainly an interesting read... and one I can't really argue with the anecdata of from my own experiences. So I'll add one: After it was too late by that author's reckoning, the parent of Radio Shack tried anothe
50.
by adricnet 12y ago
Well, as big a fan of the BLO[1] as I am, I think your energy might be better spent elsewhere. Lamilly[2] was successfully crowdfunded, manufactured, and is shipping soon. She's already a world traveler and will surely have more career
51.
by adricnet 12y ago
Random's tutorials are very good, though at the moment I'm making more headway with Lena's (linked above on tuts4you). This is probably because I'm still new to assembly language and Olly/idb. The canonical intro bo
52.
by adricnet 12y ago
I don't understand the niche for this product, especially against their own Fire TV (which FD I have and like a fair bit). From the catalog page details, besides the portability of the stick model (use USB with some TVs so no need for
53.
by adricnet 12y ago
Thanks for sharing. This echoes some of my thoughts before some recent changes I made and is a good read for everyone to provoke some thinking about goals, work/life balance, and of course, money.
54.
by adricnet 12y ago
Well, I understand your reaction, but it may help to point our that there are three different algorithms involved here and that to ensure content completeness and ensure security concerns (CIA, NR, etc) you want them all, and all done corre
55.
by adricnet 12y ago
The are actively responding to a possible intrusion and are therefore not motivated to give away specific details of the attacker's techniques to either the attacker or other hostile parties. The MD5's you want are specific to the
56.
by adricnet 12y ago
Errors and Omissions insurance might help with this.
57.
by adricnet 12y ago
Surely everyone on HN already has an informed opinion on that topic but perhaps Wired's readers provoke further thinking and understanding in a larger group?
58.
by adricnet 12y ago
Perhaps someone could run a directory of these sites there is no point in using? Then we can all be happier.
59.
by adricnet 12y ago
Could we get a more accurate headline please? At least s/attack/dump/ ? There was no attack reported. The Google blog post noted in a comment has much better information, it seems: http://googleonlinesecurity.blogs
60.
by adricnet 12y ago
Gizmodo's live blog here has been working well for me: http://live.gizmodo.com/our-new-iphone-liveblog-starts-right...

More ›