dimino

29 ms·

241.
by dimino 10y ago
It helps illustrate how what you said isn't clear or true.
242.
by dimino 10y ago
Well yeah, actually that's how threat models are built -- you can't protect users from themselves, if a user wants to store all their passwords in a greeting card website, in the little "special message to your loved one&quot
243.
by dimino 10y ago
I didn't write it, you're going to have to take that up with the author, on what his intended use case was for his website. Sounds like he did what you said, anyway.
244.
by dimino 10y ago
Yes, actually, regardless of how people use it. You can't stop people from using the wrong tools.
245.
by dimino 10y ago
Yes, meteors have hit cars windshields, a Google will reveal.
246.
by dimino 10y ago
It's a toy, regardless of what the developer says.
247.
by dimino 10y ago
I'm suggesting it's not worth talking about seriously for a toy like in the submission.
248.
by dimino 10y ago
That's so unbelievably false it makes me sad that you, a respected member of the security community, are touting it like a clear and present danger to anyone reading this site. You stop. Edit: I'm being absolutist because it&#
249.
by dimino 10y ago
Get you killed? Don't be so melodramatic. This implementation is a bad idea to use because of the aforementioned security smell. Another implementation would have to solve the problem of how to ensure message security while still bein
250.
by dimino 10y ago
Goggles. They may fog up, however.
251.
by dimino 10y ago
I feel incredibly lucky that I don't suffer from any of these symptoms, as I sit, and have sat, in front of my computer for ~14 of my available waking hours each day for the past... 10 years? 8 hours a day at work, and I then come home
252.
by dimino 10y ago
OpenSSL considers this a "high" severity issue.
253.
by dimino 10y ago
This is overblown, the biggest thing they did this to was Reader, and that was hardly an "ecosystem" app without any way to use a stand-in replacement within minutes.
254.
by dimino 10y ago
Do you have to get permission when you do things to the planet as a whole? Who would grant that permission? For example, what if I wanted to modify the atmosphere for an experiment I'm running, who do I talk to about that?
255.
by dimino 10y ago
It makes sense to me that we are no longer talking about a mugging, because if we were, then what I said would have been true. The fact that this argument had to shift to a kidnapping in order to continue should be testament enough to the
256.
by dimino 10y ago
Just to be clear, the parent of my comment is absolutely not true. You are told the adult equivalent of "just ignore them" when faced with a mugging (do what they say, give them what they want, your wallet isn't worth your
257.
by dimino 10y ago
Basically, as I understand it based on a few talks given by Aaron, Box will bend over backwards to make sure Box fits in your org, including adding new features. Drive comes with Google's famous customer support. Box is handholding
258.
by dimino 10y ago
I remember a nifty little python app called 'fuck', where you'd typo something, then type "fuck", and it'd take a guess at correcting it for you. Was pretty cool!
259.
by dimino 10y ago
You remind me of their commercials; not that such a thing is bad, it just always seemed to me that some percentage of the people attending these schools must be having a positive experience. Unfortunately, I think you're in the minor
260.
by dimino 10y ago
That's not their role, though. Someone has to be actively tracking and apprehending hacker groups operating within the US. Sure, they can find and help fix holes, but the US needs a government organization tracking cyber threats, an
261.
by dimino 10y ago
They absolutely can and they have, warrant canaries are pseudolegal nonsense. Judges do not tolerate such things.
262.
by dimino 10y ago
Warrant canaries make zero sense, the court would simply require you keep your warrant canary as part of its order.
263.
by dimino 10y ago
It's a true statement, not a false one. If someone was able to release an intentionally vulnerable version of OpenSSH/1Password, people who updated would be "instantly* (your word) vulnerable.
264.
by dimino 10y ago
To extend this point further, editors aren't simply unaware of Betteridge's Law. A lot of the time, headlines like this are written specifically to evoke the "No" response, and to entice the reader into asking the que
265.
by dimino 10y ago
To be clear, I don't owe you or anyone anything with regards to this conversation. I am not obligated to conform to any particular conversational strategy, and if my intention was to simply claim something was incorrect without elabor
266.
by dimino 10y ago
Who wrote the standalone native application? To be more direct, I'm suggesting the standalone native application may not completely correctly implement the encryption algorithms. I have no evidence of this, but the concept still conce
267.
by dimino 10y ago
> Dropbox was not encrypting passwords they were hashing them. Incorrect.
268.
by dimino 10y ago
I think this is one of those ideas that sounds very solid, but might be less so. Who hasn't said, "I wish my laundry were done and folded by someone else?!" The problem might just be that the problem is so much easier to
269.
by dimino 10y ago
And who, exactly, encrypts them for you? Dropbox was also encrypting your passwords, FWIW.
270.
by dimino 10y ago
It absolutely blows my mind that people are okay with giving their passwords (encrypted or not, see this very breach for why that's not always enough) to a 3rd party, but are not okay reusing a password somewhere. If 1Password ever got

More ›