dsl

52 ms·

541.
by dsl 9y ago
I did this on a popular bug bounty platform. Wrote a tool to look for the top 10 most common issues with mobile apps and auto submit bugs. Fuzzing is where you are going to find most memory corruption bugs these days, bounties or not.
542.
by dsl 9y ago
Yes. The only way this could be done safely is if you are required to establish a TCP connection, and then "upgrade" it to UDP. There are too many pointy sticks that developers could impale themselves on, with the side effect of c
543.
by dsl 9y ago
> ...and have the option to borrow against or sell their shares if desperate for cash. Do you want to fast track privatization of all public infrastructure for pennies on the dollar? Because that is how you get it.
544.
by dsl 9y ago
It sounds like they are bad at hiring. If you are interviewing dozens of PhDs and only found one worthy of hiring, maybe your process is flawed. If you are hell bent on the algorithms and data structures interview model, you just might not
545.
by dsl 9y ago
For iOS the GPS chip itself is only turned on when 1) a foreground application is using location 2) a navigation app is using location and you task switch (that blue bar you get at the top) 3) for background location, when the device reasso
546.
by dsl 9y ago
3/4 of the Perl scripts I have audited have had bad input sanitation in front of open() or exec(). I'll take SQLi over RCE any day.
547.
by dsl 9y ago
> 3. Outbid the black market for iOS exploits That will never work. Zerodium and others are just middlemen that sell to the US/CA/UK/AU/NZ government. They aren't selling these exploits to random companies or und
548.
by dsl 9y ago
> If I go to Google or Facebook and ask them to, say, turn off some key security features on their site so I can find more bugs they're gong to tell me to go take a hike. It isn't that uncommon in bug bounty programs to get spe
549.
by dsl 9y ago
It is really interesting how similar the Russian space shuttle is in design to the American space shuttle. Kinda like how all of China's latest generation fighter jets look suspiciously similar to their American counterparts... https:
550.
by dsl 9y ago
That is exactly the problem. It is easy for programmers to start with a 3D sphere and start randomly projecting things on to it. However the earth itself is an ellipsoid that bulges around the equator, so again you have a projection problem
551.
by dsl 9y ago
There are lots of different map projections[1] and coordinate systems[2]. As the old joke goes, "the best thing about standards is there are so many to choose from!" 1. https://en.wikipedia.org/wiki/Map_projec
552.
by dsl 9y ago
Military aircraft and missiles use celestial navigation in GPS denied areas. All you need is one or two cameras pointed up and a bit of software. The Trident system did it back in the 70s, it's not really that hard.
553.
by dsl 9y ago
If I were going to do this: Take one of the more powerful DJI quads like the Phantom Pro, connect some high strength fishing line to it, run the drone up 200-300 feet until you couldn't hear it anymore, then tie the contraband on to th
554.
by dsl 9y ago
It is unfortunate that CloudFlare shared enough PoC code to weaponize this. Edit: for the downvoters, this isn't just my opinion, please read https://en.wikipedia.org/wiki/Responsible_disclosure
555.
by dsl 9y ago
If you really want this now, shoot me an email (in profile) and i'll hook you up.
556.
by dsl 9y ago
Google went years without knowing their backhaul had been compromised. If you think your cooperation stands in the way of the NSA using you for bulk collection, I've got a bridge to sell you.
557.
by dsl 9y ago
Trump exclusively relies on second hand info. Lets not hold him accountable either.
558.
by dsl 9y ago
Akamai Edge Compute is what they are asking for. As someone who tried building this for the unwashed masses, wait until you have something along the lines of Google Spanner. Developers see amazing gains from edge compute because ZOMG LATENC
559.
by dsl 9y ago
Does anyone know why enforcement hasn't been stepped up at the Market St. BART/MUNI stations? Powell is literally the core of our tourism market (Yes, Pier 39, which everyone gets to from Powell or Embarcadero), and all of the dow
560.
by dsl 9y ago
The policies that would solve the supply/demand problem are things people don't want. The cities aren't priding themselves on unaffordable housing, it's the NIMBYs that are the problem. A 10 story building blocking MY vi
561.
by dsl 9y ago
Because the middle of the country has zero tolerance for homeless once they start to become a burden, and bus them to the west coast. Nevada finally settled a SF lawsuit a year or two ago because they shut down a metal health facility and g
562.
by dsl 9y ago
I can't seem to edit my post anymore, but the machine in question was a tiny little VM used as an SSH jump host. The specs were minimal. It was the only machine that wasn't firewalled to hell and back, which is why I did the Nyanc
563.
by dsl 9y ago
You have to be very careful when running this on the telnet port. I had a server set to spew a full color ANSI Nyancat at you when you telneted in. When the Mirai botnet was in full swing, I was pushing 5+ Mbps of Nyancat down to peoples in
564.
by dsl 9y ago
> if your bash script grows beyond about ten lines, it's time to consider rewriting it in a cleaner language Just because you don't feel comfortable writing long scripts doesn't mean you should discourage others. There are
565.
by dsl 9y ago
Yup. It's the Windows Shared Source Kit, which is already mostly public. Many of the big security firms and government agencies already have licences to the full source code anyway. The only thing this really gains anyone is it possibl
566.
by dsl 9y ago
I'm curious how you handled the justification for the IP space to pull this off. ;)
567.
by dsl 9y ago
Thank you, that makes much more sense to me. Otherwise it is on par with a developer complaining about their workload running on equivalent AMD processors vs Intel. It sounds like Netflix could use someone like you.
568.
by dsl 9y ago
Pretend most of HN has no idea what you are talking about, especially which n is "THE n".
569.
by dsl 9y ago
I believe his condition is neurological. I'll definitely pass on your link though!
570.
by dsl 9y ago
If anyone from the Glass team happens to read this: A very good friend of mine has an uncorrectable problem that basically gives him double vision all the time. I got Glass for him as a gift, and it changed his life. Emails, text messages,

More ›