Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
bbbbb5
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
17 ms
·
121.
▲
by
bbbbb5
4y ago
It's a conspiracy theory because Nacchio was actually guilty of insider trading regardless of what the NSA may have done. From the court decision which you didn't bother to read: >Even if the classified information were present
122.
▲
by
bbbbb5
4y ago
The government proved insider trading. >I'm not going to claim to be an american law expert, but when the agencies can just say "nope" to evidence against them in said court of law, it becomes hard to claim strong legal pr
123.
▲
by
bbbbb5
4y ago
>I could see a world where ‘see if it violates your own policies’ is a code for extortion with plausible deniability. That's not the world we live in. If you reply with "Blow me", the FBI will do nothing.
124.
▲
by
bbbbb5
4y ago
> A single developer associated Laslo is the first chair of the board, not just "a single developer".
125.
▲
by
bbbbb5
4y ago
> It's not nothing, and it's weird to be strident about it To an outsider, hearing people talk about how LastPass used Very Bad ECB mode makes it sound like a fuckup with immediate and dramatic effect on the security of their p
126.
▲
by
bbbbb5
4y ago
That's exactly what I'm saying :) If the attacker doesn't have the valid password, the knowledge that two different sites share the same password isn't exactly game-changing. And if the attacker does have the password, t
127.
▲
by
bbbbb5
4y ago
I don't think this is a significant advantage, the cost of an incorrect password attempt is essentially zero. Trying "every password they have on every website" for an individual will still be a very small set of passwords to
128.
▲
by
bbbbb5
4y ago
>Am I misunderstanding something here? No, not at all. The point is that while ECB is a silly choice, it does not make it easier for the attacker to crack your vault. It does allow the attacker to see if you're reusing passwords, bu
129.
▲
by
bbbbb5
4y ago
Attacker doesn't need to control the login form to use it as an oracle to confirm password reuse.
130.
▲
by
bbbbb5
4y ago
No paywall https://www.vwvortex.com/threads/my-ride-series-japanese-v12...
131.
▲
by
bbbbb5
4y ago
These vaults conveniently come with unencrypted URLs of the login forms associated with each password. An attacker who discovers the plaintext of one password can trivially attempt to reuse that against all of the forms. Incorrect password
132.
▲
by
bbbbb5
4y ago
Given that any login form can be used to rapidly confirm password reuse it's hard to see how ECB introduces new issues here.
133.
▲
by
bbbbb5
4y ago
>This allows an attacker to detect repeating plain text segments, e.g. reused passwords. This is hardly a problem, any login form will also allow an attacker to do this.
134.
▲
by
bbbbb5
4y ago
>Wtf wtf wtf. This would be considered wildly insecure even by the standards of the 80s For this particular use-case? Hardly. Since an attacker can easily use any login form of their choice as an oracle for password reuse, ECB mode can&#
135.
▲
by
bbbbb5
4y ago
>I have to wear fingerless gloves so that I can use my smartphone to receive orders from DoorDash, Uber, and Grubhub Hasn't this been a solved problem since like ... 2007? https://www.nytimes.com/wirecutter/revi
136.
▲
by
bbbbb5
4y ago
Yes, but how exactly is the LastPass implementation faulty? In your other comment you claim to know that it is.
137.
▲
by
bbbbb5
4y ago
Do you actually know anything about this subject, or are you just speculating?
138.
▲
by
bbbbb5
4y ago
You came looking for a fight, don't act so surprised when you get one. Go verbally attack random people on the street, see if you don't come home with a bloody nose. If your comment hadn't been so obviously in bad faith, you&
139.
▲
by
bbbbb5
4y ago
Pretty sure most people with block heaters have these, they run off the same power source https://pic.beely.crasman.cloud/BVC-228/BVC228_11.jpg Almost all ICE cars I've seen sold in Nordic countries during the pas
140.
▲
by
bbbbb5
4y ago
>Wow. That would be "nearly every modern gas vehicle in north America". >Seriously. Running a cold petrol engine under low load in freezing conditions only for heating i just simply a bad idea. Never understood how this is e
141.
▲
by
bbbbb5
4y ago
Cryptocurrency can easily be exchanged for a whole lot of goods and services.
142.
▲
by
bbbbb5
4y ago
Average Londoner earns something like 40k GBP/yr. If they have to pay the congestion charge every day, that'll eat up 12.5% of their annual income. But I agree, it'd be nice if the charge was 100GBP per day and I was the only
143.
▲
by
bbbbb5
4y ago
Those signs exist in the US, not in the UK.
144.
▲
by
bbbbb5
4y ago
Mercedes sells a S-class with a 2L i4 engine, I don't think this is really going to be an issue.