dhx

56 ms·

421.
by dhx 14y ago
There is no need to guess—look at the screenshots and screencasts at: http://www.palantir.com
422.
by dhx 14y ago
Bug tracking software has played with the idea of bug bounties for many years now. However I challenge you to provide a link to a public bug tracker where these bug bounty features are successfully used. For further reading, there exists pl
423.
by dhx 14y ago
Blaise Mouttet has written numerous papers and online comments which challenge the claims put forward by memristor proponents[1][2]. Debate surrounds whether the device created by HP is a memristor or simply a varistor[3][etc]. The heated d
424.
by dhx 14y ago
The following comment will likely be deemed controversial—but also critical to understanding how the open source community operates with respect to security issues. Recognise that a lot of hype and circus has built up around around the fiel
425.
by dhx 14y ago
After reading through the paper[1] it appears that the only security afforded is an ability to detect energy fluctuations caused by a MITM attacker? A public channel is then assumed to exist to allow both parties to broadcast the monitored
426.
by dhx 14y ago
Bugs fixed in this minor bugfix release: http://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&... The exciting release announcement: http://gcc.gnu.org/ml/gcc/2012-06/msg00198.html And more relevant to those that missed the gcc
427.
by dhx 14y ago
An interesting feature is dynamic updating of dependent variable properties: This example shows a variable property safely using a variable: :root { var-main-color: #c06; var-accent-background: linear-gradient(to top, var(mai
428.
by dhx 14y ago
TLDR: X.509 certificate collision attack where the uptime of the signing server appears to have been guessed successfully to an accuracy of 1 millisecond (!) Some further technical details: Dump of the full certificate chain: http://blog.d
429.
by dhx 14y ago
I think it is more a case of the public information security field moving from a small, highly technical niche of hackers (example list[1]) to a mainstream career path that openly trains and employs thousands of people that may not have a
430.
by dhx 14y ago
It is worth noting that the 8.3 short name of the hidden file was HUB001.DAT[1]. This is because VFAT allows the specification of both a short name (8.3) and long name (LFN) for each file/directory. You can find 8.3 '.' entry names by searc
431.
by dhx 14y ago
The Common Criteria Evaluation and Validation Scheme (CCEVS) is a form of software accreditation that focuses on software security. You can view the results for the Windows 7 accreditation at [1]. The website also has comprehensive document
432.
by dhx 14y ago
This vulnerability could also assist with local privilege escalation. If an attacker managers to use a vulnerability in a web application to execute code as a web user account, they can likely access the MySQL server instance via the loopba
433.
by dhx 14y ago
―Attackers should never, ever be able to connect directly to your MySQL database directly. mySQLgame[1] demonstrates that domain logic can be successfully implemented within a publicly accessible database[2]. It would be better to reword yo
434.
by dhx 14y ago
How well did the algorithms detect insightful analysis, deep understanding beyond the immediate subject matter, factual correctness, salience and an ability to write to a specific audience? When reading articles on the Internet I look out f
435.
by dhx 14y ago
NetBus[1] (1998), Back Orifice 2000[2] (1999) and Sub7[3] (1999) demonstrate that feature packed malware is not a novel concept. Kids were pranking each other with webcam-hijacking, audio-recording, port-redirecting, password-sniffing, auto
436.
by dhx 14y ago
Troy Hunt analysed the passwords of the Sony and Gawker compromises and shared the results in July 2011[1]. The analysis is worth reading and contains pretty plots that can be digested in a glance. His other blog posts at [2] relating to pa
437.
by dhx 14y ago
https://news.ycombinator.com/item?id=4053076
438.
by dhx 14y ago
Also place the following in the top horizontal menu on each page: Buy a subscription
439.
by dhx 14y ago
Matthew’s earlier article “Why UEFI secure boot is difficult for Linux” is worth reading: http://mjg59.dreamwidth.org/9844.html
440.
by dhx 14y ago
Release announcement: https://fedoraproject.org/wiki/F17_release_announcement Download: https://fedoraproject.org/en/get-fedora-options Changes for Desktop Users: https://docs.fedoraproject.org/en-US/Fedora/17/html/Release_... Changes
441.
by dhx 14y ago
I see no mention of tamper-resistance/self-destruct features? Power glitch detection, mechanisms to detect decapping/stripping, wire mesh shielding, protection against ultra-violet laser stimulation of transistors, ... are all important. Fo
442.
by dhx 14y ago
Off-site Google engineers working to integrate Google products into customer networks?
443.
by dhx 14y ago
―The food bank sometimes receives items with virtually no nutritional value -- "candy and crap" says Aason, which are sometimes tossed, and sometimes used as "filler items." It's not stuff that they want, but the junk food is part and parce
444.
by dhx 14y ago
You missed the point of my comment — donors contemning the less fortunate by throwing them scraps. It was not an argument about the minimum technical specifications of donated goods. Nor was it an argument about donated goods needing to be
445.
by dhx 14y ago
Would you: * sleep on a heavily soiled mattress made of highly flammable material * dress your baby in highly flammable second-hand sleepwear * consume unsanitary meat that has been sitting out in the heat for too long * feed your family a
446.
by dhx 14y ago
Two scenarios: 1. Performing dodgy repair jobs on your own equipment for your own personal use. 2. Performing dodgy repair jobs for unsuspecting people that don't know the difference between a resistor and capacitor and are trusting your sk
447.
by dhx 14y ago
When Mr. van den Akker put the iron back together, two parts were left over — no matter, he said, they were probably not that important. He plugged the frayed cord into a socket. A green light went on. Rusty water poured out. F
448.
by dhx 14y ago
Computer Science vs. Software Engineering Computer Science courses must maintain a strong focus on theory. An entire CS course can be conducted using Knuth's TAOCP, paper and pens only. The reason being that Computer Science is a highly s
449.
by dhx 15y ago
You can try it today: https://en.wikipedia.org/wiki/Freenet#Distributed_storage_an... Trust is still needed for a variety of reasons including the prevention of a DoS attack on global storage capacity (injecting 10Tb/s of junk into the pe
450.
by dhx 15y ago
https://en.wikipedia.org/wiki/Heterarchy

More ›