amckenna

11 ms·

61.
by amckenna 12y ago
That is an interesting idea. Putting one of these plants on a dairy farm for instance could cut down on waste significantly. The machine would take the animal byproducts and provide water and electricity that could in turn be used to power
62.
by amckenna 12y ago
That is an interesting idea. Putting one of these plants on a dairy farm for instance could cut down on waste significantly. The machine would take the animal byproducts and provide water and electricity that could in turn be used to power
63.
by amckenna 12y ago
I have backed a half dozen Kickstarters and Indigogos that were hardware based (consumer electronics) and chose to manufacture in China. Seeing the time and money they spend in order to fly someone over to China to troubleshoot and issue wi
64.
by amckenna 12y ago
The most straightforward way of enforcing the exclusive sale model I can think of is to use reputation and reviews similar to how the online drug sales sites work. Create a financial incentive for the seller to build a positive reputation a
65.
by amckenna 12y ago
I am not ignoring the issue, I am advocating the more secure system configuration. I know that it is expensive, and it can introduce additional performance requirements. When choosing to implement proper password hashing or not there is a t
66.
by amckenna 12y ago
I don't think it is a significant UX benefit to reveal to a user that their username is correct but their password is incorrect. How many times has an incorrect username been what's blocking you from logging into an application? J
67.
by amckenna 12y ago
It's defense in depth. Why tell a probable attacker that they have the correct username if you can hide it from them. The less you give them the better. Most users will know if they got their username incorrect, it's right there i
68.
by amckenna 12y ago
I assess the vulnerability of applications for a living and I have been told over and over again by dev groups and ops that they can't upgrade their systems because it is too expensive. That's fine, but you need to understand you
69.
by amckenna 12y ago
They are correct, it is important to show a generic message on the login. The login is the first place an attacker will look for user enumeration. Just because you may be able to find user enumeration somewhere else doesn't mean you sh
70.
by amckenna 12y ago
If you server cannot hash incoming authentication attempts properly with bcrypt or scrypt, then the solution is to upgrade the server, not weaken your authentication to compensate.
71.
by amckenna 12y ago
A lot of people are bashing the car's appearance, but I think people forget that putting the first driverless cars on the road is as much a PR challenge as it is a technological challenge. Truly autonomous driverless cars is a huge shi
72.
by amckenna 12y ago
It's probably not wise that they release malicious binaries or details about foreign hacking infrastructure to the general public. That doesn't leave the with much direct evidence they can release at this point. Remember, it is an
73.
by amckenna 12y ago
A line at the end of the article caught my eye: "Hackers claim to have taken at least 100 terabytes of Sony data, or about 10 times of the amount stored in the Library of Congress." Which struck me as very small. So I did some d
74.
by amckenna 12y ago
You took MDMA while on an SSRI? You really should research a drug's mechanism of action and how multiple drugs may interact before taking them together. Im not a medical professional, I just want to give you a quick overview so you don
75.
by amckenna 12y ago
I wonder how the attack would fair against other Lattice-based schemes such as NTRU, which was recently open sourced. https://en.wikipedia.org/wiki/NTRU https://github.com/NTRUOpenSourceProject/ntr
76.
by amckenna 12y ago
For those who saw the launch but are looking for a video of the splashdown: Longer NASA coverage (5:23) - https://www.youtube.com/watch?v=tdmZAvwznOU More concise coverage by the AP (0:54) - https://www.youtube.c
77.
by amckenna 12y ago
I purchased it. I am hesitant to recommend a particular device because I am not a medical professional and there are inherent risks involved in using any of the devices. I would encourage you to check out www.reddit.com/r/tdcs and
78.
by amckenna 12y ago
Thank you for the links Gwern! You're right, the placement is the same as previous studies. Though from what I remember those were testing for the alleviation of depression, so it's nice to see there are other positive effects wit
79.
by amckenna 12y ago
I wish they would release the placement they used for the testing. I would be interested in trying this out at home with my tDCS device. My guess is they are using one of the following placements: Accelerated Learning (DARPA) F10/Left
80.
by amckenna 12y ago
I was interested in the same question but there hasn't been any research as far as I have found. There are anecdotal accounts in various tDCS communities such as /r/tdcs
81.
by amckenna 12y ago
Yup! That's exactly why there has been so much work on this from the likes of Google. Video and images represent a "dark media" in terms of indexing and search. It is very difficult without robust tagging (which is time inten
82.
by amckenna 12y ago
In the article it says the prosecutors dropped the evidence found from the resulting home search. "Finally, Seidel said prosecutors would drop all evidence found during the search of the home — including, authorities have said, a .45-
83.
by amckenna 12y ago
Even at its full range of 10 miles it would have a tough time hitting a commercial plane. 10 miles is 52,800 feet so the warship would have to be very close to the plane to hit it (almost under it), and within visual range for sure, meaning
84.
by amckenna 12y ago
There are many details left out that could reasonably pin the attacks on the Chinese. While communication back to the source may be obfuscated and hard to pin on any particular actors the exploits, shellcode, and malware they use can possib
85.
by amckenna 12y ago
It is possible they chose not to encrypt things with public/private keys (asymmetric crypto) because generally that is slow and computationally intensive, as compared to using symmetric crypto. If the goal was to be as stealthy as poss
86.
by amckenna 12y ago
Check out the whitepaper they published along with the article. It goes into more detail about the attacks. It appears they have a record of the traffic from the hotels' networks, probably from an IDS or something similar. Some relevan
87.
by amckenna 12y ago
For those that are interested in a more technical analysis of the malware, infection vectors, and C&C infrastructure check out the whitepaper linked at the top. It goes into significantly more detail than the main article. Below is a li
88.
by amckenna 12y ago
Last time I looked into it you don't pay for room, board, food, cold weather gear, or the flight down/back. So in reality your take home pay and savings are fairly high.
89.
by amckenna 12y ago
Well with contactless payments a unique CVV is generated by the card for every transaction. The attacker would have to steal the card info, CVV, and use it to purchase something before the victim uses their card again or the card will autom
90.
by amckenna 12y ago
Yup! Basically the problem boils down to: "An attacker can derive information about the correctness of parts the PIN from the AP´s responses. > If the attacker receives an EAP-NACK message after sending M4, he knows that the 1st ha

More ›