bluesign

41 ms·

1. 421.▲
   by bluesign 8y ago

   It is not contradictory but it can be confusing when many parties involved. You have some software to get key for serial from RNG, when you get 64 bit and put it to serial field, you feel it is ok. This is probably what happened in this cas
2. 422.▲
   by bluesign 8y ago

   I don't have much knowledge about certificates, except from what I read on this mail list. But are there are other CAs active (in mozilla's root trust), using 64bit serial?
3. 423.▲
   by bluesign 8y ago

   I think DarkMatter is right on 64 bit entropy discussion, requirements are clearly wrong unfortunately. - it says you should use 64-bit entropy as output from a CSPRNG - it says Serial number is a signed number If you use 64bit serial, you
4. 424.▲
   by bluesign 8y ago

   Ok after a bit digging: - German police signed a service agreement (probably with Motorola) as the model of bodycam is Motorola Si500. [0][1] - Motorola is one of the service providers working with Amazon. [2] "Motorola offers a digita
5. 425.▲
   by bluesign 8y ago

   It doesn't matter if it is 'layers' or 'apps' basically the problem begins when you have more than one layer/app at a time. So I guess for a long time we will stuck with one app a time, and some kind of manual
6. 426.▲
   by bluesign 8y ago

   I think it depends on how much your country advanced in freedom, basic rights etc Democracy and democratic process itself is required but not enough.
7. 427.▲
   by bluesign 8y ago

   Yeah it is standard permission but the situation is more like this. - Facebook had some messages API for developers ( which apps can act as messenger client ), some kind of allowing 3rd party messenger applications, those had all access to
8. 428.▲
   by bluesign 8y ago

   tbh I don't know any special access bumble got, from outside tinder and bumble doesn't look much different on facebook usage.
9. 429.▲
   by bluesign 8y ago

   Actually in the document published, it is pretty clear. Reciprocity part is explaining clearly. (especially strategic competitors) The key point is 'equitable value exchange'. If I am building a social network, leaching user/
10. 430.▲
    by bluesign 8y ago

    I think vine situation is a bit different then this examples. First of all, let's see the facts. - Sharing user's friendship data with all applications was wrong decision. There were a lot of bad actors. - So Facebook decided to
11. 431.▲
    by bluesign 8y ago

    yeah with this same logic, if I give some google/facebook/etc ads to promote my application, I am ethically in the same boat with facebook. The difference is they are not using their dominance, like for example, putting something
12. 432.▲
    by bluesign 8y ago

    yeah but in the documents, it is just market research data, if I want to acquire one application, and let's say use appannie[0] to check how popular it is, what is different essentially? [0] https://www.appannie.com/
13. 433.▲
    by bluesign 8y ago

    "Facebook used data provided by the Israeli analytics firm Onavo to determine which other mobile apps were being downloaded and used by the public. It then used this knowledge to decide which apps to acquire or otherwise treat as a thr
14. 434.▲
    by bluesign 8y ago

    here you go: ( for /usr/local/lib/libxmlrpc++.8.39.dylib) libxmlrpc_packetsocket.8.39.dylib: /usr/local/lib/libxmlrpc_packetsocket.8.39.dylib (compatibility version 0.0.0, current version 0.0.0)
15. 435.▲
    by bluesign 8y ago

    I think it is more than that, libxmlrpc++.8.39.dylib missing in my case I guess
16. 436.▲
    by bluesign 8y ago

    Looks cool but I am not sure how I feel about silent updates and possibility of running arbitrary code on my computer. (probably with admin priviledges) [0] edit: also eula is strange as this is licensed with MIT license (according to GitHu
17. 437.▲
    by bluesign 8y ago

    If your mobile os sandboxing fails, you are toast in any scenario. I think every authenticator app is toast as long as mobile sandbox is comprised.
18. 438.▲
    by bluesign 8y ago

    I am guessing from the log posted [0] this can be some kernel memory leak. can be related to AppleJPEGDriver-memleak [1] [0] https://news.ycombinator.com/item?id=17998178 [1] https://github.com/bazad/Ap
19. 439.▲
    by bluesign 8y ago

    The problem is not the RNG here. Problem is the trust to the guy in front of Excel, and this process is not verifiable.
20. 440.▲
    by bluesign 8y ago

    Disagreement lies in there, fb says devices access as much as fb app access, NYT claims otherwise but probably wrong
21. 441.▲
    by bluesign 8y ago

    NYT says: ‘Some device makers could retrieve personal information even from users’ friends who believed they had barred any sharing, The New York Times found.’ FB says: ‘Contrary to claims by the New York Times, friends’ information, like p
22. 442.▲
    by bluesign 8y ago

    Because they are using the same ssh-agent also for accessing host keys (for sshd) PS: Also one agent process for all users on machine vs each user running a ssh-agent process
23. 443.▲
    by bluesign 9y ago

    I find it funny how the article concludes basically almost everyone is responsible. And probably nobody will be hold responsible for this other than hacker. Thats why noone in this chain will have any incentive to fix this ever occuring aga
24. 444.▲
    by bluesign 9y ago

    I guess this is related to bad implementation of using SIP for connecting call. I had similar experience with local telecom provider in Turkey, which is routing international calls over cheap SIP providers. Basically they are calling a SIP
25. 445.▲
    by bluesign 9y ago

    Probably they are monitoring spam. As in it not end to end encrypted, they sure have access to messages.
26. 446.▲
    by bluesign 9y ago

    Actually for any given paragraph, probabilty of hash(paragraph+hash) = hash is pretty high.
27. 447.▲
    by bluesign 9y ago

    In the context of automation (and click farms) if you are not testing the touch screen obviously, I think better approach can be by man in the middle attack with touchscreen and board. Or even emulate screen interface totally. I dont know i
28. 448.▲
    by bluesign 9y ago

    You should consider the scenarios with multiple contributors and single maintainer, where the maintainer is bottle neck. I am not against the forks, but we also have examples like openwrt/lede split. My perspective on this is only agai
29. 449.▲
    by bluesign 9y ago

    This attitude is forcing to ‘fork it’ approach, which is causing a lot of duplicated effort in practise, instead if you feeling like ‘not worth to maintain (can be by any reason, personal, lack of time, burnout), stepping down as maintainer
30. 450.▲
    by bluesign 9y ago

    I think it is technically impossible at least improbable to make such encoding scheme, unless your encoding becomes the content itself.