danjoc

83 ms·

811.
by danjoc 11y ago
Thank you for restating the point of my comment. Apple is not paying tax on the $190B. So it would seem the numbers from the article are skewed in favor of the 1%, as Apple is one of the largest members of that exclusive club.
812.
by danjoc 11y ago
>Facebook-grade responsiveness When did Facebook become the pinnacle of security response? The last thing I read about them was pretty horrible. Much worse than the Microsoft response here. http://exfiltrated.com/research
813.
by danjoc 11y ago
Meanwhile, Apple alone has > $190b sheltered offshore. I suspect these numbers are skewed in the 1%'s favor.
814.
by danjoc 11y ago
>This demo secretly makes requests to STUN servers that can log your request. These requests do not show up in developer consoles and cannot be blocked by browser plugins (AdBlock, Ghostery, etc.). That's a bit of an overstatement.
815.
by danjoc 11y ago
Hi phil-opp, I'm following your blog. I'm wondering if you might have any tips for a ARM port. Thank you for sharing your work with us!
816.
by danjoc 11y ago
Classic door in the face technique.[1] Ask the impossible to get concessions you would otherwise be refused. [1] https://en.wikipedia.org/wiki/Door-in-the-face_technique I disagree with the conclusion that the DOJ needs
817.
by danjoc 11y ago
>If WhatsApp is so evil that they've backdoored their product, it is ... stupid to leave that backdoor in their source code. Reproducible builds[1] are the solution to that problem. Everyone doesn't have to build the source if
818.
by danjoc 11y ago
>The reverse-engineering of the actual shipped binary (for instance, the ARM code lifted to LLVM) seems like a safer analysis target. Reverse engineering binaries is only permitted under the DMCA for the purpose of interoperability, AFAI
819.
by danjoc 11y ago
There's no strawman here. Security is a process, not a product. Cut out a few steps to make a "better scheme" and compromise the entire process. Anyway, good luck with those root exploits. I'm moving now to blacklist npm
820.
by danjoc 11y ago
>From where do you get the public key to verify the GPG signature against? PGP key servers: hkps.pool.sks-keyservers.net wwwkeys.pgp.net pgp.mit.edu There are plenty more. You upload a public key, they relay them around. Read all about i
821.
by danjoc 11y ago
>The point of that article is that it isn't. It only adds integrity if you trust the signer. Simply put, that article is wrong. Trust is not a binary. It's greyscale. While no one ever achieved perfect security, pretty good sec
822.
by danjoc 11y ago
>GPG isn't the holy grail. I don't believe anyone ever said it was. It's a far better approach than using shasums for package integrity though. >Proxying via a local dependency is a good practice, but that can be set up
823.
by danjoc 11y ago
>The stance was without an agreed upon way of trusting public keys, you don't get any additional protection beyond shasum. Isn't that true? No, that is not true. It is demonstrably wrong and was demonstrated this week. https:&
824.
by danjoc 11y ago
This really doesn't seem to address the core issues with NPM. Packages need to be signed with GPG. Full stop. If anyone is running unsigned executable code blindly, they've already failed. You might as well be running .exe files e
825.
by danjoc 11y ago
>A: Both iOS and android have fully capable web browsers, I'm not sure what's missing here ? Specifically he mentions his WebRTC video streaming app "just works" on Android Chrome and Firefox. http://canius
826.
by danjoc 11y ago
"Some academics have advocated that law enforcement use software vulnerabilities to wiretap targets. That, they said, is preferable to building in a back door to enable access, which they said would broadly damage security." Door
827.
by danjoc 11y ago
I was under the initial impression he made more than me, based on the amount of money he spent on house/cars/furnishings when arriving in this country. In my opinion, he should be making quite a bit less. I have significantly more
828.
by danjoc 11y ago
I wonder if a bulk data download is available. Some NLP and data analysis could produce some incredible results here.
829.
by danjoc 11y ago
Or to compare salaries with those one works with. I just found out how much my colleague makes.
830.
by danjoc 11y ago
While "cloud" may be a big part of the future of computing, I think the relationship painted between that and the end of Moore's law is tenuous at best. I believe a more plausible link exists between the end of Moore's l
831.
by danjoc 11y ago
>I'd add to this that millennials are getting married later than any previous generation People deep in debt don't usually attract a lot of mates.
832.
by danjoc 11y ago
It's so good, it guesses the correct continent less than 50% of the time. I bet it even gets the correct planet 100% of the time :)
833.
by danjoc 11y ago
FBI: "We're going dark! What can we do?!" NSA: "Leave it to us." Soon... "Point your DNS to us to unblock webvids non-Americans!"
834.
by danjoc 11y ago
It is easier to understand if the same task is rephrased. "Apple ordered by Chinese government to disable lock on phone seized from undercover CIA agent." The act is the same. Being a multinational company, the result is no differ
835.
by danjoc 11y ago
I like to think it's about the 3rd amendment. The backdoor is a digital soldier. Frankly though, I hope Apple loses this one. I'd like to see it spur them into developing a device that they do not have the ability to compromise, b
836.
by danjoc 11y ago
I just wanted to add, there are six empty homes for every homeless person in the US. http://themindunleashed.org/2014/02/18600000-vacant-homes-un... And that Detroit is/has bulldozed 20 or more square miles o
837.
by danjoc 11y ago
I am considering it. I already removed this site from my bookmark bar and landing page. If I had to list my top three reasons: HN has the "anything that's interesting" policy, which means I see a lot of stuff that only serves
838.
by danjoc 11y ago
It is not a misdemeanor to be caught without your unexpired passport, citizen. https://www.us-immigration.com/blog/dont-let-that-green-card...
839.
by danjoc 11y ago
>Permanently? That suggests My spouse has a permanent residency card in the USA. It has an expiration date of 10 years. Perhaps you could call the immigration office and explain the meaning of the word to them as well? :)
840.
by danjoc 11y ago
First TBL accepts DRM, now he eschews HTTPS because it changes the URI protocol and breaks the old http link? Who are you and what did you do with the inventor of the WWW? Redirects are an easy solution to deprecated http links. And I still

More ›