Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
bluesign
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
45 ms
·
481.
▲
by
bluesign
9y ago
Sorry but it doesn't make sense: You are getting a percentage, 15% - how you will know how much BTC I have, only thing I am giving you is one empty address, no?
482.
▲
by
bluesign
9y ago
"Thus we created mechanism of extracting the information we need from the wallet to verify the password, but without actually sending the full wallet. " how this part works, can you explain?
483.
▲
by
bluesign
9y ago
doesn't simple frequency hopping with the OTP in the fob and the car solve this problem?
484.
▲
by
bluesign
9y ago
I think use case for blockchain will be private key derived from a key stored in secured enclave. Which is not the ideal case of course.
485.
▲
by
bluesign
9y ago
Sorry but this doesnt prove facebook doing it, unless only app on the phone is messenger.
486.
▲
by
bluesign
9y ago
This is totally normal practice. Also most likely ArcSight used by pentagon can be totally different beast then ArcSight used by private companies. Also most likely ArcSight doesnt cover most of US cyberwarfare arsenal.
487.
▲
by
bluesign
9y ago
Sharing with Virustotal is not same as sharing it with ‘anyone’ i suppose, possibility of downloading files is not acceptable.
488.
▲
by
bluesign
9y ago
Only works if you target specific user with known email address. Other than that I dont see any possible use.
489.
▲
by
bluesign
9y ago
Clickbait, yes. But it is kinda like ‘Hungarian bank robber arrested for opening the bank safe with hair pin’ Gives the message to the target audience perfectly.
490.
▲
by
bluesign
9y ago
So to be security, - must have investment, - profit expectation, - this profit must come from efforts of others (management) - limited or none voting right So what is preventing digital currencies classified at securities?
491.
▲
by
bluesign
9y ago
I was just thinking minister of justice receiving a lot of purple envelopes :)
492.
▲
by
bluesign
9y ago
Because he disappeared before people looking for his identity. It is hard to keep your identity when people are looking for you.
493.
▲
by
bluesign
9y ago
For web development it can be OKish, but for the rest it is almost impossible. Even for web development, there are a lot of obstacles on the way.
494.
▲
by
bluesign
9y ago
Nope you should change endpoint to charles/mitmproxy, then reverse proxy to https endpoint. So basically for app endpoint will be charles/mitmproxy machine, then from there, you will make https request to real API server
495.
▲
by
bluesign
9y ago
yeah but this step is usually done for you, you can always google ‘appname’ ipa and reach latest version’s IPA. Obfuscated control flow is like hell especially in c++ (ex: pokemon etc) but as I said I am comparing average android vs IOS. On
496.
▲
by
bluesign
9y ago
I am not blogging but in a free time I will try to write up a small gist.
497.
▲
by
bluesign
9y ago
Actually it is opposite, mobile platform is more secure. But... Security depends on ‘sense of security’, when people think platform is more secure, they tend to ignore/skip a lot of parts on security. Developer tend to skip edge cases
498.
▲
by
bluesign
9y ago
From my experience, for certificate pinning, fastest option is to search for existing certificate/fingerprint, and try to replace it with charles’/mitmproxie’s Edit: oh another trick usually works is to change transport to HTTP fr
499.
▲
by
bluesign
9y ago
I am also doing a lot of reverse enginering work for fun and profit. I agree with most parts, except android. While reversing Android apps, usually they are obfuscated ( I think it is included in the standard build process ), but when you a
500.
▲
by
bluesign
9y ago
Actually with good regulations, there is not much need for public ownership (although it is the ideal in theory)
501.
▲
by
bluesign
9y ago
Tbh I dont think there is a practical solution for patent trolls. Patents are basically assets, and they are transferable. Making then non-transferable is not a solution at all. Basically law firms can represent patent owners. System needs
502.
▲
by
bluesign
9y ago
Why not make barrier of entry easy for other/new ISPs by forcing them to share infrastructure for a fee, and then allow them to tier/price as much as they want?
503.
▲
by
bluesign
9y ago
Best use case of this I guess, is some kind of flight mode for web apps. Before going in to metro or flight, you click a button, and for example HN caches front page for you.
504.
▲
by
bluesign
9y ago
Consistency and logic comes with a price. But i guess both approches have cons and pros.
505.
▲
by
bluesign
9y ago
it is just bid, empty space is not guaranteed. So there is no ecological effect.
506.
▲
by
bluesign
9y ago
It is fair actually, you are bidding for the empty spaces. If flight is not full, empty places are assigned to people with the order of their bidding. From game theory perspective best option is bidding something like 1$ etc. (considering p
507.
▲
by
bluesign
9y ago
I think it means if you launch Word normally it is not running with administrative privileges. you have to launch from Task Manager to run Word with administrative privileges. (which researcher claims can also be automated)
508.
▲
by
bluesign
9y ago
First of all this is a great service, and congratulations on the launch. But... After checking I am a bit disappointed: - Istanbul: $235.00 Not including "Fast Track Immigration/Customs" for 2 passengers you can get local fa
509.
▲
by
bluesign
9y ago
Tanzania bans ‘a’ newspaper for 2 years
510.
▲
by
bluesign
9y ago
Or you can use raspberry pi and tcpser http://www.insentricity.com/a.cl/215/putting-your-retro-comp...
More ›