dsl

55 ms·

571.
by dsl 9y ago
How do we apply that special responsibility to open source software? Say, Metasploit. I'm proficient with both commercial and open source tools, and in most cases the open source ones are more powerful. Not saying enabling isn't a
572.
by dsl 9y ago
This is usually referred to as fourth party intelligence. Say Russia compromises a high ranking ISIS member. The United States could compromise the infrastructure used by the Russians, and collect all the same intelligence. Not only have th
573.
by dsl 9y ago
We need to avoid the slippery slope of blaming the tools. There are open source and commercial solutions that implement much of the same functionality. If you blame the tools Hacking Team or NSO or whomever, disappears into the oblivion, an
574.
by dsl 9y ago
The fact hemp is illegal is silly, but it isn't as amazing as all the potheads would have you believe. Hemp is legal to grow elsewhere in the world, and importing it into the US has been legal since the 90s. Yet the worldwide demand fo
575.
by dsl 9y ago
From the SHA3 Round 1 results: "NIST expects SHA-3 to offer improved performance over the SHA-2 family of hash algorithms at a given security strength" You want hashes to be fast, and KDFs to be slow.
576.
by dsl 9y ago
NitroKey ( https://www.nitrokey.com/ ) is the non-crappy version of YubiKey.
577.
by dsl 9y ago
I might be a bit biased working in offensive security, but 90% of the PowerShell I see in use is malicious. Unfortunately Microsoft has let the genie out of the bottle, and most of the advancements in PowerShell security are centered around
578.
by dsl 9y ago
Two different incidents: - State sponsored email hacking - A kid on 4chan faked a document
579.
by dsl 9y ago
Which isn't as terrible as it sounds, France has a law that does not allow campaigning or reporting on candidates for 24 (or 48?) hours before an election. The law is intended to give people time to reflect and think for themselves wit
580.
by dsl 9y ago
> breaking RSA isn't a really big IBM purchase order away from happening You seem to also be completely discounting the possibility of implementation flaws or unpublished advancements against RSA that simply require a ton of hardwar
581.
by dsl 9y ago
Think about any software updates you do (Windows Update, apt, yum, etc). All these systems rely on distributing a cryptographic ally signed manifest of what each files hash should be. If you can forge the hash of a file, or the signature on
582.
by dsl 9y ago
Having each TLD application owned by a separate LLC allows the otherwise non-transferable application to be transferred if someone wants to buy .coffee from you.
583.
by dsl 9y ago
Never co-host real applications and user controlled sites on the same root domain. You're just asking for a neverending stream of problems. (This is why everything ends up on googleusercontent.com and friends instead of google.com)
584.
by dsl 10y ago
I don't understand how you think anything is easier than typing 'fuck' and have it identify and correct your mistake for you?
585.
by dsl 10y ago
Can you explain to me what 'paying off employees equity grants' is? They are just giving them shares, right? That shouldn't count against P&Ls because it's not cash.
586.
by dsl 10y ago
I have a bunch of experience in this area. Domains are almost always acquired by a brand protection company like MarkMonitor or CSC. The domain is then transferred to the brand company or a shell company they own. A few years ago I sold a d
587.
by dsl 10y ago
Interestingly enough, it looks like Oath.com is owned by Gary Millin, a very prominent domainer. They probably should have waited to announce the rebranding until after they negotiated for the name...
588.
by dsl 10y ago
Because using your own CA is not deniable. You aren't allowed to move forward with any solution that may lead to attribution.
589.
by dsl 10y ago
Prior to the Symantec aquisition, VeriSign used to pitch just this thing as a product. AFAIK the usage was limited to DoD and a few mundane things. The IC wasn't interested because it was easier for them to just steal certificates or w
590.
by dsl 10y ago
Everything sent via USPS is already scanned and put into a surveillance system (Google for "mail cover"). This product is likely a result of the data collected from the surveillance project, not the other way around.
591.
Samsung Leaking Customer Information(medium.com)
2 points by dsl 10y ago|0 comments
592.
by dsl 10y ago
How are you running this serverless? Is it a thin application in front of AWS or Google BigQuery?
593.
by dsl 10y ago
They will just move to CloudFlare, where they (and all the other bad guys on the internet) get a free pass.
594.
by dsl 10y ago
> The only way a sender can tell for sure their e-mail was delivered is to have tracking links Thats not true. Both spammers and legitimate email delivery services have hundreds if not thousands of accounts at the major email providers t
595.
by dsl 10y ago
> When you connect your Gmail to Signal, it infers who your strongest relationships are Guess how it does that... they say on their own page it scrapes email addresses.
596.
by dsl 10y ago
> provide evidence that they find compelling A link to their tweet about the status page not working because the building was burning down around it seems compelling.
597.
by dsl 10y ago
That is effectively what happens, they just stupidly backed that file from S3. http://status.aws.amazon.com/data.json
598.
by dsl 10y ago
VC: "How did you get introduced to me?" You: "That signal app..." VC: "So [introducer] gave away my personal contact info to a random company?"
599.
by dsl 10y ago
I just assumed if they wanted him to move to VA is was likely for the pending build out of GovCloud east. Edit: I found a map with the C2S region on it, and it does appear to be in the VA/MD area.
600.
by dsl 10y ago
AWS maintains an entire region named GovCloud explicitly to isolate sensitive workloads and meet compliance requirements. The "security clearance" is basically just a background check to make sure you aren't a spy.

More ›