dkopi

12 ms·

61.
by dkopi 10y ago
Good thing malware doesn't have administrative privileges.
62.
by dkopi 10y ago
> Which works out great for the top few percent of workers It works out for any worker. It's not just about quitting Microsoft to Join google, It's also about quitting Mcdonald's to join Subway, or quitting Amazon to work
63.
by dkopi 10y ago
The biggest protection a worker has is his ability to quit and find another employer. All other "protections" usually end up costing you someway or another. Mandatory vacation days are converted to lower salaries. Maternity leave
64.
by dkopi 10y ago
While that was a fairly aggressive way of commenting, I'll still answer for the sake of other people reading this. Here's an example of how social workers in Israel were let down by the Histadrut - Israel's organization of tr
65.
by dkopi 10y ago
"When you grew up in a country where unions are healthy and working both for the employees and for the business" That's rarely the case with unions however. They usually work for the interests of a select few. They harm the b
66.
by dkopi 10y ago
Assuming they have a zero day vulnerability in acrobat (or other PDF readers), they wouldn't risk losing it by uploading a file with an exploit, using their own name, and in a wide distribution. When the GCHQ wants to hack you, it won&
67.
by dkopi 10y ago
Exceptions are a really valuable programming tool , but you can live without them. The cost of not having exceptions is usually giving every function in your code the option to return an error value. It takes some time getting used to, but
68.
by dkopi 10y ago
While true - ICMP is a ubiquitous protocol used all over the internet, but computers and network devices a like. It also often gets overlooked, so while "you can tunnel inside almost any protocol", it is very common for malware to
69.
by dkopi 10y ago
ICMP ECHO has an additional payload field thay we often ignore. Some malware is known to use the ICMP payload as a C&C channel, or to tunnel out stolen information: https://en.wikipedia.org/wiki/ICMP_tunnel
70.
by dkopi 10y ago
ICMP is a valuable diagnostics and control tool. Blocking it doesn't come without a cost.
71.
by dkopi 10y ago
Any type of traffic can be used to tunnel other types of traffic. You can tunnel over DNS as well: https://zeltser.com/c2-dns-tunneling/
72.
by dkopi 10y ago
Different people creating different tools
73.
by dkopi 10y ago
TLDR: A lot of companies block ICMP for security reasons. OP thinks you shouldn't and provides links explaining why. That said, if ICMP is still blocked, you might be able to use httping, dnsping and smtpping as tools that provide simi
74.
by dkopi 10y ago
> If you were really "better than almost everybody else" you'd be hired to work on hard problems that even someone actually better than almost everybody else would find challenging. That's assuming a lot. It's as
75.
by dkopi 10y ago
That's less of an assembly issue and more of a compiler/calling convention issue. Assembly allows you to pass parameters on the stack or in registers. Calling conventions simply define a protocol for doing this consistently.
76.
by dkopi 10y ago
Interesting use case. I'm really enjoying this discussion. I'm guessing this could be solved if 3rd Party apps register to handle "news.ycombinator.com" links. I don't think there's any enforcement by apple or
77.
by dkopi 10y ago
There was a great link someone commented on the post itself, describing how to implement a "login via email link" on mobile. https://auth0.com/blog/2015/12/04/how-to-implement-slack-lik... I ha
78.
by dkopi 10y ago
I was talking about changing the signature/checksum to match the new code. Corecoder pointed out that sometimes you just need to patch the checksum checking code, and not the checksum itself.
79.
by dkopi 10y ago
Usually. Just make sure the new machine code is the same size as the old. That said, if the code is signed and there's a signature check - the check will fail if you modify the code. If the signature is a simple crc/checksum, you
80.
by dkopi 10y ago
Very valid points, some of them are already addressed in the post. Password managers do solve A problem, but I'm not sure they solve THE problem. They're great when you have a browser extension, but leaving the app, entering anoth
81.
No more username/passwords: Just use a 3rd party for authentication(medium.com)
4 points by dkopi 10y ago|0 comments
82.
Email Sign-In Links(hashnode.com)
8 points by dkopi 10y ago|7 comments
83.
by dkopi 10y ago
The real winner with anti-ridesharing legislation isn't public transport. It's car ownership. Uber doesn't let you avoid taking the bus/train. It lets you rely on public transport 95% of the time, and use ride sharing th
84.
by dkopi 10y ago
Probably a good time to move to sha256 instead of sha1. https://sites.google.com/site/itstheshappening/
85.
by dkopi 10y ago
Love the a % 2 != 0 ? 4 : 2; optimization. This used to be one of my favorite interview questions for low-level positions - conditional assignment without branches.
86.
by dkopi 10y ago
Consider using an HTML5 canvas (with a 2D rendering context) instead of DOM manipulation. It makes programming very similar to QBasic's LINE, CIRCLE, PAINT.
87.
by dkopi 10y ago
QBasic was a truly incredible way to start programming. Today I'd probably recommend python with pygame, and especially the book inventing computer games with python: https://inventwithpython.com/
88.
by dkopi 10y ago
"We obtained complete data from 196 US-American individuals who participated in an online study via Amazon Mechanical Turk, a service where researchers can post jobs (such as responding to a questionnaire) which can be completed by use
89.
by dkopi 10y ago
I always thought the main purpose of ping pong tables was to make it easy for HR to find the employees that should be let off first in case of cut backs.
90.
by dkopi 10y ago
Perhaps Austin needs a lot of zoning laws and bureaucracy to prevent more people from moving there. Worked really well for SF.

More ›