dguido

41 ms·

391.
by dguido 14y ago
Come for SummerCon http://www.summercon.org
392.
by dguido 14y ago
Cool, the whole system of projects you guys are working on look exciting. Glad that Ruby is finally getting its act together a little bit.
393.
by dguido 14y ago
I think what people seem to be saying is that China is one of the only countries so blatantly using it for economic espionage against private corporations. This is fundamentally different than what other countries are rumored to be doing.
394.
by dguido 14y ago
Postmodern wrote a gem to do this entirely on your own, no giving away access to your Github repositories necessary. Check out bundle-audit: https://github.com/postmodern/bundler-audit
395.
by dguido 14y ago
Hey Shanghai, what's the feeling on the ground about Mandiant's APT1 report from yesterday? http://www.mandiant.com/apt1
396.
by dguido 14y ago
Criminal groups are generally referred to by Mandiant as "CDT" for "Card Data Theft." The overwhelming majority of APT groups that actively target private corporations, individuals, the media and Mandiant's commercial customers are in China
397.
by dguido 14y ago
Shared infrastructure, use of same non-public backdoor, same tactics taken once on the box, same watering hole used, hop point includes connections from both Facebook and Apple... Come on man. Read the Mandiant report on APT1 if you want to
398.
by dguido 14y ago
If you are running Java in your browser, you were exposed. There, done. The internet is a nasty place, get used it.
399.
I’m Mudge Zatko, Darpa program manager. AMAA(reddit.com)
3 points by dguido 14y ago|0 comments
400.
by dguido 14y ago
If you want the straight-to-the-point version, postmodern wrote up a bit more technical version here: http://ronin-ruby.github.com/blog/2013/01/28/new-rails-poc.h...
401.
AI Review of the Top Privacy Policies(privacyparrot.com)
1 points by dguido 14y ago|0 comments
402.
by dguido 14y ago
I was wondering when Github was going to start supporting HSTS and 2-Factor Auth. I'm betting that it gets bumped in priority after this event. Nothing like an incident to move along security requirements! http://dev.chromium.org/sts htt
403.
by dguido 14y ago
The author of the tool commented in this thread on Reddit: http://www.reddit.com/r/netsec/comments/15ydem/inception_is_...
404.
by dguido 14y ago
Do you have any idea the kind of crazy non-sense that gets a warrant issued in "regular" courts? I'm happier leaving complicated decisions about intelligence to a group of experts who specialize in the field.
405.
by dguido 14y ago
Ah, exactly! I posted this same question yesterday. https://news.ycombinator.com/item?id=4976441
406.
by dguido 14y ago
Isn't having your request to obtain information reviewed by the FISA court judge kind of like having a warrant issued for it? I also thought that part of the point of the FISA court was that it contains the spread of classified information
407.
by dguido 14y ago
1. Is Vala type-safe? Ie, can I exploit stack overflows in this? 2. Does it support S/MIME or PGP? 3. Can I configure it to view and respond only in plaintext? 3a. When not in plaintext mode, what this guy asked: https://news.ycombinator.c
408.
by dguido 14y ago
Nice try, new grad.
409.
by dguido 14y ago
It seems odd that DNT is a controlled at the browser-level and turning it on instructs every site to "not track me" (whatever that means). There are some sites that I want to be tracked by and DNT is an all-or-nothing control. This seems re
410.
by dguido 14y ago
Who is this person and why are they qualified to write this library? AFAIK, Stanford is generally accepted to have the most reliable JS crypto library, though all of them are broken as all hell and not usable in anything but toy application
411.
by dguido 14y ago
Disagree. The reason that Gmail for iOS and Gmail in general suck is the total lack of support for cryptography within the application (S/MIME, PGP, or other solutions). As a friend of mine said, "Gmail -- a private conversation between you
412.
by dguido 14y ago
You know, people keep repeating this assumption that the NSA stores every post that people make online. Maybe someone should do a quick back of the envelope calculation to see how feasible that actually is? My guess is that it's nowhere nea
413.
by dguido 14y ago
Really happy you guys decided to finally implement two-factor auth! I had suggested this after the compromise you guys had a while back: http://news.ycombinator.com/item?id=4067190 I wassss kind of rooting for DUO Security ( http://www.du
414.
by dguido 14y ago
"Oh, this will never happen to me!" -everyone before they get hacked
415.
How To Be A Successful (African) American in Silicon Valley(techcrunch.com)
115 points by dguido 14y ago|53 comments
416.
by dguido 14y ago
http://imgur.com/a/cIQbk
417.
How Squarespace, Fog Creek and others stayed online this week(computerworld.com)
2 points by dguido 14y ago|0 comments
418.
by dguido 14y ago
Why are predator drone flights on the agenda for the EFF? I thought they were about "your right's online"? Did they stop working on those issues? Problem solved, let's move on to drone flights? If I cared about these issues, I would donate
419.
Ending the Love Affair with ExploitShield | Trail of Bits(blog.trailofbits.com)
2 points by dguido 14y ago|0 comments
420.
by dguido 14y ago
Their CEO is offensive, their user interface is awful, they screw with DNS, they're typically on the wrong side of supporting internet regulation in the US, they try to upsell you on everything... In complete contrast to GoDaddy, I really l

More ›