evilDagmar

8 ms·

31.
by evilDagmar 3y ago
> There is _zero_ reason for you to _use_ exposed credentials if you find them. It adds nothing to the "security research" you may be doing. Bullshit. For one thing, he wasn't doing "security research" he was tr
32.
by evilDagmar 3y ago
...except it was not the source code. Apparently right there in the application in cleartext. If what the investigator intended didn't matter, then what the vendor intended doesn't matter, either. He literally opened the applica
33.
by evilDagmar 3y ago
Sadly this is why one must notify vendors anonymously, and tell them up front they have 30/60/90 days to fix it before the information will be made public. This vendor was abysmally irresponsible by storing static credentials in t
34.
by evilDagmar 3y ago
This is shameful fear-mongering. It's not even any kind of "secret" that websites you visit will know you were there. It's literally the first bullet point in the list. Will Google now also be expected to mention that
35.
by evilDagmar 4y ago
There's been a number of instances where people did precisely that--they just sent a bunch of taskrabbits out to buy large numbers of tickets in lots of different locations. Very time-consuming, but still profitable.
36.
by evilDagmar 4y ago
I've always found it more useful to just discard user input that doesn't come in the format you're asking for, and bail on the entire operation. Like, if the user might be attempting something fishy, there's no reason
37.
by evilDagmar 4y ago
There's just a whole library of CVEs for people who attempt to escape things being sent to SQL. Use parameterized queries already.
38.
by evilDagmar 4y ago
Whatcha wanna bet that the deal they have with the local gov't promised they'd bring X number of jobs to the area, which is a target they can only meet by hiring some people, firing a bunch of them, and then hiring more, since eve
39.
by evilDagmar 4y ago
There's also ample historical evidence that even more people are willing to believe the most ludicrous things said about other people without any proof whatsoever, so long as Satanism/demonology and/or sex are sprinkled into
40.
by evilDagmar 4y ago
You've been reading too many pearl-clutching articles. There's quite a bit that Crowley wrote that was clearly just to separate people who would believe whatever they were told or read from critical thinkers who could be expected
41.
by evilDagmar 4y ago
Don't engage in outrage inflation. The original point was about a 17-year old, and if you've got to condemn that from 80 years ago, you have to condemn pretty much everyone who lived during the middle ages because by that age mos
42.
by evilDagmar 5y ago
I click no because if your website is so tied to the existence of cookies that it can't display properly without them, I want to enjoy your failure .
43.
by evilDagmar 5y ago
Yeah good luck getting a company to give you VPN access to their network without demanding you've been keeping your operating system patched. BYOD without such policies is a great way to make the network support staff quit and maybe s
44.
by evilDagmar 5y ago
No, it should only be the district's device while the district student's login is being used. There's still very much a legally-enforceable expectation of privacy for the other possible users of the machine. That the user is
45.
by evilDagmar 5y ago
Oh no, there's no way the school system didn't know they were installing monitoring software. It would be fairly reasonable for them to require that in the context of students logging in to access and use school resources (i.e. l
46.
by evilDagmar 5y ago
> Chromebooks are designed from the ground up to be locked-down dystopian spyware once you "log in" to them with a specific Google account. Nonsense. They were designed to implement required policies when someone logs into a m
47.
by evilDagmar 5y ago
The real question isn't whether or not GoGuardian is installed--because the Chromebook is going to be subject to the school's policies while the student is logged in, assumedly doing classwork. The real question is whether or not
48.
by evilDagmar 5y ago
Except they were buying them for their own use and protecting against supply chain interruptions, not buying them to sell them to other consumers at artificially-inflated rates.
49.
by evilDagmar 5y ago
Nope. That's entirely untrue when the bots are buying all the remaining product. That is where it becomes harmful to both consumers and producers and is no longer "free market" because consumers are now being harmed by be
50.
by evilDagmar 5y ago
They're actually scarce because of the wonderful debacle the whole supply chain has become in the past two years. This short-term scarcity is being exploited by bad actors who are seizing upon an opportunity to attempt buy up all the
51.
by evilDagmar 5y ago
No, the bots are the reason the goods are scarce. They are not a genuine indicator of scarcity, nor are they a part of genuine price discovery. That they still exists just shows that the bot operators are too small to attract the interest
52.
by evilDagmar 5y ago
At our high school most of the pickup trucks had gun racks. It wasn't until like, my sophomore year of high school before anyone even considered "Hey... those shouldn't be on school grounds". We all knew quite well &
53.
by evilDagmar 5y ago
It's amazing the number of people who can't think just a little bit ahead and realize one of the major reasons for boarding passes and seat assignments is the possibility of a plane crash. Because there's two possibilities..
54.
by evilDagmar 5y ago
Better verbiage would be "T-Mobile requires the ability to report your browsing activity to third-parties."
55.
by evilDagmar 5y ago
Someone probably nicked them thinking they were novelty coasters shaped like save icons.
56.
by evilDagmar 5y ago
It depended on which brands of floppies you bought. Some vendors were more profit-oriented than others and would skimp on the binding agent or just the amount of magnetic material without which the signal can become so weak they could beco
57.
by evilDagmar 5y ago
Luckily for well, everyone, those 8-inch floppies didn't really see a lot of use.
58.
by evilDagmar 5y ago
Now, to be fair we did outsource that security clearance data to China... Why I have no idea.
59.
by evilDagmar 5y ago
That really seems like a lot of code just to do the job of cp. Perhaps their time would be better spent thinking up some way to prevent a TiddlyWiki from becoming a wormable nightmare.
60.
by evilDagmar 5y ago
I don't know about iPhones specifically, but I know I used to sigh and grit my teeth every time I'd debug something networking-related while I was at a public coffee house or something, and there's all those apple laptops, br

More ›