amlozano

10 ms·

61.
by amlozano 7y ago
You are right. I still think we should call "Password Hashing Algorithms". "One-way password storage" maybe. Or something. Just get rid of the word hashing. Edit: NIST uses "one-way key derivation function" in
62.
by amlozano 7y ago
We often use 'hash' as a sort-hand way of saying 'Key Derivation Function' when talking about secrets like passwords. https://en.wikipedia.org/wiki/Key_derivation_function These functions usually u
63.
by amlozano 7y ago
About a year and a half ago it was a very common vulnerability to find when doing web application assessments. Especially if uploading Excel spreadsheets was somehow involved. Its less common now that most major parsers are turning this fea
64.
by amlozano 7y ago
Have you tried Conan[1] by chance? I've only used it for small projects, but it was pretty nice. https://conan.io/
65.
by amlozano 7y ago
Another thing to bear in mind is that people who commit espionage are often coerced into doing it by blackmail or threats. This is one of the primary reasons for background checks beyond simple criminal background checks: you want to make s
66.
by amlozano 7y ago
HttpOnly doesn't really do much to stop an attacker that already has XSS. The attacker just makes the XSS perform the interactions they want directly instead of bothering to steal the cookie. James Kettle wrote a good blog post that ar
67.
by amlozano 7y ago
+1 for the Embody, I love mine. Try to get it on sale or something though, its stupid overpriced.
68.
by amlozano 7y ago
When you buy a new pair these days, pressing that button causes the headphones to say "Configure the action button in the Bose Connect App"
69.
by amlozano 7y ago
Yeah, but if you download the app again today you will see a new prompt that forces you to agree to waive your right to class action and agree to arbitration over privacy policy violations. No option to cancel or opt out of course. Nice tim
70.
by amlozano 8y ago
Modern desktops have had RNGs built into their chips since Ivy Bridge. Beyond that, they have plenty of decent sources for random numbers such as network traffic. Similarly, mobile devices can use sensor noise to create random numbers prett
71.
by amlozano 8y ago
Sometimes the cashiers forget to hand you movie tickets or the consumer forgets that they need to pick up an item from the electronics cage. Once they caught that I didn't get the movie tickets I had paid for, felt really nice.
72.
by amlozano 8y ago
You have to explicitly turn on a setting to have it run the corrected command without confirmation.
73.
Multiple Heap Buffer Overflows in the Windows DNS Client(bishopfox.com)
10 points by amlozano 9y ago|0 comments
74.
by amlozano 9y ago
They tried speed cameras with warning signs on the highways in Phoenix, Arizona. They also had mobile vans with automatic cameras to catch people that weren't paying attention. The population mostly refused to pay the tickets and used
75.
A guide to eliminating procrastination [video](youtube.com)
2 points by amlozano 10y ago|0 comments
76.
by amlozano 10y ago
Because despite all the hate, GitLab is still pretty awesome to have.
77.
by amlozano 10y ago
"...if we have zero information concerning the value of x, than we are also clueless in what concerns the value of, say, x^2" But that is not true, we have -some- information concerning the value of x, namely that the value of x i
78.
by amlozano 10y ago
I feel Latex can is the best tool that can both of these jobs simultaneously.
79.
by amlozano 10y ago
I'd really like to see this study re-done with multiple fine sizes. My intuition is that monetary repercussion is valued smaller than the social repercussion. There might even be a optimal fine level to make profit off the tardy parent
80.
by amlozano 10y ago
I have. Here is an 2012 article describing a presentation at Blackhat. http://www.bbc.com/news/technology-18997580
81.
by amlozano 10y ago
I can't wait until retail stores start trying to charge more for signature edition. Pay more for less!
82.
by amlozano 10y ago
Its also pretty pointless when the Mafiaa do manage to get a site taken down new ones crop up almost immediately. What.cd was taken down recently and now has 2 or 3 viable replacements.
83.
by amlozano 10y ago
The people that go after these sites are more interested in prosecuting the site operators than the users. I think they want to make running a private torrent site such a risky endeavour that no one wants to take the risk. That said the be
84.
by amlozano 10y ago
This was a huge problem for me at Gatech's online master of computer science program (omscs). I ended up having a small windows partition just to take the exams. Also note windows 10 isn't explicitly on that list. There were probl
85.
by amlozano 10y ago
Yup. You can get a camera that is good enough with a built in mic for like $20 these days.
86.
by amlozano 10y ago
If you consider the purpose is to monitor the entire computer to see if you have notes pulled up, you can see why they have this requirement. I thought the entire premise of proctorU and proctorTrack (which gatech is now using instead of pr
87.
by amlozano 10y ago
Information security minded software engineer seeking new oppurtunities. Location: Phoenix, AZ Remote: Yes Willing to relocate: Yes Technologies: Python, C, C++, Java, Django, PostgreSQL, CUDA Resume: https://github.com/amlo
88.
by amlozano 10y ago
Having experience with all of them, Discord is the easiest one to get going with. For non-technical people especially. Having a browser app is a huge boon, you can get people into the chatroom without them having to download anything. Havin
89.
by amlozano 10y ago
Slavery isn't absent in civ 5, its just abstracted away.
90.
by amlozano 10y ago
Not quite. In civ 5. If your happiness gets pretty bad you cities will start spawning rebel units. Revolts can happen and entire cities might even switch sides to a different civ with a preferred ideology. Its pretty rare for a human playe

More ›