casca

52 ms·

511.
by casca 14y ago
In the ssh protocol, the server sends a banner first. For HTTPS, the client sends certificate data first. How is it possible to run these 2 services on the same port without changing the client?
512.
by casca 14y ago
This feature seems to be offering similar functionality to OpenVPN's tls-auth which requires an additional key before a connection is allowed. Another option to get similar functionality would be to use port knocking [1][2] but spiped gives
513.
Java zero-day exploit goes mainstream, 100+ sites serve malware(computerworld.com)
2 points by casca 14y ago|0 comments
514.
by casca 14y ago
This is good. OpenStack is genuinely open and having consistent ways of moving data and config in an out of any configuration is a great step forward. The question is why VMware - the biggest player in the corporate VM space - would do this
515.
by casca 14y ago
Trey bases his assessment on Apple's published "Top grossing" list. This is potentially problematic as it's not clear over what time period this is based or what other metrics Apple uses to put apps into this list. Apple, like the publisher
516.
by casca 14y ago
The difficulty with getting freemium right is in having a free product that's sufficiently useful to have people take the time to use it and a paid version that is worth paying for. Convincing someone to switch from paying $0 and $1 is hard
517.
by casca 14y ago
People tend to feel more strongly about things they dislike than things they like. When things work, they tend to drift past without being noticed. Think about the things that provoke reliable positive comment - they often are in scenarios
518.
Breakdown of Google's 2011 revenue (infographic)(i.imgur.com)
2 points by casca 14y ago|0 comments
519.
by casca 14y ago
Lock-outs are tricky to manage. I can flood 50 login requests and have the legitimate user quickly locked out. CAPTCHAs can help but they're annoying and it's cheap to pay people to solve them if necessary. Forcing a CAPTCHA for a new IP ad
520.
Big Porn v. Big Web Ruling Could Spell Trouble for ICANN(law.com)
1 points by casca 14y ago|0 comments
521.
by casca 14y ago
The question about password strength is meaningless without looking at the attack. A 4-digit PIN with a 3 attempt lock-out (and no further information) is more secure than a 10 character password encrypted with MD5. There will be people who
522.
Ovizart - web-based PCAP analysis tool(honeynet.org)
2 points by casca 14y ago|0 comments
523.
by casca 14y ago
There's rightfully a fair amount of noise being made about this as many on HN can imagine themselves in a similar situation. But there may be another lesson to take here. For me, the key phrase in this article is the first one: "Faced with
524.
by casca 14y ago
There is a fine balance to be achieved here. If you've read more of Derek's (excellent) posts, you'll know that his complete hands-off style led to the company almost collapsing. Delegating like this is a great step, but a leader's responsi
525.
by casca 14y ago
There is still reasons that debit transactions should attract a charge. There is definitely still fraud risk as well as comms/infrastructure/support. 5-7% is high, but 0% is also unrealistic.
526.
by casca 14y ago
So does that mean that Diaspora dream of replacing Facebook is dead? A Facebook login option and .io domain points strongly in that direction.
527.
by casca 14y ago
TL;DR: HTTP and HTTPS protection: Avast, Kaspersky, McAfee and Trend HTTP only protection: ESET, Norton, AVG, Avira No protection: F-Secure, Microsoft Security Essentials, Norman, Panda, CA Total Defence
528.
Consumer Anti-Virus and Critical Microsoft Vulnerabilities(nsslabs.com)
1 points by casca 14y ago|1 comments
529.
Microsoft to buy Adobe? Shares jump.(us.mobile.reuters.com)
2 points by casca 14y ago|2 comments
530.
by casca 14y ago
TL;DR: underscores is a GPL Wordpress theme that makes a good base for building your own Wordpress theme.
531.
by casca 14y ago
So true, djb is a legend in the field. To give an example, he wrote qmail as a replacement for sendmail and the last stable release was in 1998. There have been no identified security vulnerabilities in that time. If you want to learn how t
532.
by casca 14y ago
Link to the actual announcement: http://blog.chromium.org/2012/08/announcing-pwnium-2.html If I had a "Full Chrome exploit: Chrome / Win7 local OS user account persistence using only bugs in Chrome itself", I could sell it for far more th
533.
by casca 14y ago
How is this different to the many other services that tell you how much house you can get for your money? A pretty UI and being YC-backed does not a "disruptor" make.
534.
by casca 14y ago
TL;DR - fiber is good, Google is installing fiber in Kansas City. Nothing new here.
535.
by casca 14y ago
It's usually possible to move phone numbers between providers within the same country. In the past, phone number prefixes were used by telcos to route the calls meaning that it was very difficult to change your provider and keep your number
536.
by casca 14y ago
TL;DR - another post about tos-dr.info. 6 days ago, 602 points: http://news.ycombinator.com/item?id=4350907 1 day ago, 129 points: http://news.ycombinator.com/item?id=4373610
537.
by casca 14y ago
Twilio is the 800lb gorilla in this space in terms of buzz, but it's fantastic to see that there's strong competition offering a wider set of countries and better pricing. We're using Twilio because they meet our requirements and the great
538.
by casca 14y ago
The reason that Colin can get away with the picodollar model is that the type of people who use tarsnap would get annoyed if they were charged for 1gb if they were using 100mb. _For those customers_, there is a clear correlation between th
539.
NYPD and Microsoft track people real-time through NYC(crainsnewyork.com)
1 points by casca 14y ago|0 comments
540.
Tool to recover files from FileVault 2 (Apple's full-disk encryption)(lightbluetouchpaper.org)
4 points by casca 14y ago|1 comments

More ›