agnokapathetic

9 ms·

61.
by agnokapathetic 7y ago
Do you edit 12 megapixel photos on a 12 megapixel monitor?
62.
by agnokapathetic 7y ago
Golang Nuts is a public mailing list, sadly there are not a lot of mailing list archives these days. https://www.mail-archive.com/golang-nuts@googlegroups.com/ms...
63.
by agnokapathetic 7y ago
Yes. They were about to have their enterprise lunch eaten by GitLab
64.
by agnokapathetic 7y ago
This is great, still recognizable, flexible and somewhat fresh. Compare to Slack’s logo rebrand: https://news.ycombinator.com/item?id=18923719
65.
by agnokapathetic 8y ago
and 100KB/s is the max ingest rate?
66.
by agnokapathetic 8y ago
“Imagine if instead of treating a conference as a passive chance to see a broad range of hacking demos, we all treated it as a chance to study up on the latest techniques. Something between workshop and lecture series...” - Dave Aitel http
67.
by agnokapathetic 8y ago
For those out of the loop like me, the Apache 2.0 license exceptions they are addding are: > As an exception, if, as a result of your compiling your source code, portions of this Software are embedded into an Object form of such source
68.
by agnokapathetic 8y ago
I’m a YouTube premium subscriber and I never watch any “original content”. I simply enjoy zero advertisements. Paradoxically the target demographic willing to pay to be ad free is probably worth far more to advertisers than those who don’t—
69.
by agnokapathetic 8y ago
Don't need ground truth for crowd-sourced annotation just need agreement between n-different users. 1 randomly present captcha to few known-safe/low risk users 2. Compare answers with answers from higher risk user's Captcha
70.
by agnokapathetic 8y ago
OMEMO just implements the Double Ratchet Algorithm that Perin and Marlinspike created for Signal as an XMPP extension. [1] https://en.wikipedia.org/wiki/OMEMO [2] https://en.wikipedia.org/wiki/Doub
71.
by agnokapathetic 8y ago
The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities by Mark Dow et al. https://www.amazon.com/dp/0321444426/ ( https://www.amazon.com/dp/0321444426&#x2
72.
by agnokapathetic 8y ago
https://www.mlflow.org is open source.
73.
by agnokapathetic 8y ago
Emphasis on "negotiated". The entire negotiation and key agreement stack is a larger codebase than all of Wireguard.
74.
by agnokapathetic 9y ago
After RSnake introduced slowloris in 2009, it’s been something of a minor miracle that L7 attacks have stayed as rare as they have until now. Don’t understand why SYN Floods have been the preferred way to DDoS until recently-they’ve been ob
75.
by agnokapathetic 9y ago
What could possibly go wrong?
76.
by agnokapathetic 9y ago
Not only unreported but weaponized by the US Government.
77.
by agnokapathetic 10y ago
TL;DR for DRACOs what it is: they made a poison which will kill a cell when two-parts of the poison touch each other in a certain way (think bubble gum in mission impossible). They've designed the parts of the poison so it should onl
78.
by agnokapathetic 10y ago
except pivot into a higher-privileged management network full of juicy--and typically totally unpatched--Out-of-Band management equipment (consoles, IPMI, industrial gear)
79.
by agnokapathetic 11y ago
I've been using https://github.com/Olical/react-faux-dom with d3 without issue. The project lists the following caveats: It's great for... - Static D3 components or other such libraries (things like
80.
by agnokapathetic 11y ago
- Write prose. I find my verbal fluency (and my inner monologue) become far more dull when I haven't written anything in a while - Keep alcohol consumption to a minimum, even a single glass of wine impacts memory formation and recall.
81.
by agnokapathetic 11y ago
I created an Nmap script to find this on your own networks: https://gist.github.com/jwpari/3369a537b422ecfa23f5 Use with: nmap -T5 -p 9200 -Pn --script=+elasticsearch-cve-2015-1427 10.0.0.0/8
82.
by agnokapathetic 11y ago
Another thing to keep in mind is that a lot of these lists are compliance-driven. - Hosts which process credit cards (PCI) - Hosts which reconcile the general ledger (SOX) - Hosts with medical data (HIPAA) - Hosts with student
83.
by agnokapathetic 12y ago
CobolOnCogs [1] was purely a joke, this is an actual framework (also a joke, but with actual functioning code [2]). [1]: http://www.coboloncogs.org/INDEX.HTM [2]: https://github.com/azac/cobol-on-wheelc
84.
Verizon Injecting X-UIDH Tracking Header on All Requests(twitter.com)
16 points by agnokapathetic 12y ago|1 comments
85.
by agnokapathetic 12y ago
The technical reason is that while the iPhone 5s has the Secure Enclave co-Processor (SEP), it does not have an Apple Pay Secure Element (SE). The SEP is a ARM TrustZone-like separate processor running a stripped down L4 derived microkernel
86.
by agnokapathetic 12y ago
While this works fine for most single-role customer facing applications (the kind most startups are building), as a security engineer most Single Page Apps (SPAs) which handle authentication like this (client side) have horrible authorizati
87.
by agnokapathetic 13y ago
For ECC djb and Tanja Lange have put together a great list of how possible it was to tamper with each of the ECC primitives listed: http://safecurves.cr.yp.to/rigid.html
88.
by agnokapathetic 13y ago
A quick way to check if a server supports the heartbeat extension (won't tell you if it's patched or not) echo | openssl s_client -tlsextdebug -connect host:443 | grep heartbeat TLS server extension "heartbeat"
89.
by agnokapathetic 13y ago
Be careful with: --default-names do not prepend 'g' to the binary On OS X (a BSD derivative with BSD-grep), --default-names will put GNU grep in your path. A lot of things in OS X depend on BSD sed/awk/grep. Omitt
90.
by agnokapathetic 13y ago
It would appear so! Why then is Verizon Enterprise Solutions getting called in to "save the day" with Healthcare.gov?

More ›