f-

9 ms·

31.
by f- 10y ago
I hate to be negative, but I've been working in the security industry for several decades now and... the article reads to me like a collection of condescending platitudes that attribute malicious intent or extreme incompetence to just
32.
by f- 10y ago
The last time this story made rounds on HN, quite a few readers were ripping into the people described in the article, and it sure feels good to do so, but... I don't know about you, but if I had more money than I conceivably ever need
33.
by f- 10y ago
The "top ten" list you linked to includes accidents (such as poisonings and falls), suicide, and influenza. I do not mean to be a jerk and I am no meat apologist - but is meat consumption playing a direct, notable role in at least
34.
by f- 10y ago
Off-topic, but my personal work sometimes ends up on the front page, and I'm always amazed how much reposting there is on HN - probably more than on Reddit and similar sites. Say, here's my stuff: https://news.ycombinat
35.
by f- 10y ago
One important consideration here is that the phishing attack as described here could be pulled off even if the targeted site did not support redirects - and in general, it would be exploitable without any identifiable fault on the part of t
36.
by f- 10y ago
Author here. Rookie mistake! It's actually a golden-mantled ground squirrel. https://en.wikipedia.org/wiki/Golden-mantled_ground_squirrel A chipmunk would have a stripe going across the eye. (Today, you learned yo
37.
by f- 10y ago
Not sure I follow - especially if it already depends on IM, how is it different from 'convert -compose difference' or a similar operator? http://www.imagemagick.org/Usage/compose/#difference
38.
by f- 10y ago
Although the emphasis on the actual abuse of newly-introduced APIs is much needed, it is probably important to note that they are not uniquely suited for fingerprinting, and that the existence of these properties is not necessarily a prod
39.
by f- 11y ago
> Assault with a hand is much less likely to end in serious injury than assault with a weapon. Really? I'd take pepper spray over fists. I'm talking specifically about non-lethal choices, especially for people who do not stand
40.
by f- 11y ago
I think this is pretty similar to the rest of the western world, and certainly to the legal frameworks in much of the US. The interpretation is probably very different, though. So is the legality of carrying weapons in anticipation of an as
41.
by f- 11y ago
Interesting. Lethal weapons are banned in much of the world, but based on my reading of it, the UK seems to be pretty radical when it comes to non-lethal tools, compared to most of Europe. Looks like pepper spray, stun guns, or really anyth
42.
by f- 11y ago
The guide doesn't go into specific instructions on how to find flood maps and doesn't do a risk analysis on everything (although it provides numbers for many of the more common risks) chiefly because (a) it's difficult to p
43.
by f- 11y ago
Sure, and I'm using "space zombies" humorously, to broadly refer to all sorts of apocalyptic / TEOTWAWKI scenarios that many hardcore preppers are preoccupied with. Most prepper guides devote a lot of time to societal co
44.
by f- 11y ago
The subsequent paragraphs address that, I think. It does not have to be this way, but the reality is that most people spend as much as they earn. You know, anecdotally, I talked to people in the Bay Area who claim that they couldn't
45.
by f- 11y ago
Hm, I sort of suspect that you skipped much of the first part of the guide, which talks about identifying the relevant risks, including - say - studying flood maps, identifying nearby industries, walking around the home to spot fire hazards
46.
by f- 11y ago
I honestly don't know; it's interesting that in Europe, the same culture - certainly present in the nineteenth century - has atrophied very quickly after WWII. I'm not sure how to explain that; urbanization? The expansion of
47.
by f- 11y ago
Yup. In fact, the guide talks about home fires as one of the most significant dangers (right after going insolvent or getting hurt); and cites the 72 hour figure. It also highlights that some of the prepper ideas, such as stockpiling gasoli
48.
by f- 11y ago
Oh, I don't think that trying to prepare for historically plausible contingencies is crazy - quite the opposite - but it's definitely easy to approach it in a haphazard, disorganized, or wasteful way. The Bay Area culture definite
49.
by f- 11y ago
The page talks about it a bit, but in an attempt to differentiate itself from the usual, mildly paranoid "prepper" content, it does its best not to get hung up on more outlandish scenarios, such as fighting off zombies and survivi
50.
Doomsday planning for less crazy folk(lcamtuf.coredump.cx)
213 points by f- 11y ago|162 comments
51.
by f- 11y ago
(Author of the blog post here.) As a matter of fact, I did, many years ago. Ultimately, I didn't go for it, but it was more a matter of circumstance than conviction. I think I would have been happy there. The US is hardly the violent c
52.
by f- 11y ago
(Author of the blog post here.) While I don't want to debate my mindset or the motivations for the original blog post, I do want draw the attention to the closing comments at the bottom of the article :-) In essence, I very much acknow
53.
by f- 11y ago
(Author here :-) It's difficult to argue about the merit of subjective experiences, but I think that two things are worth emphasizing. First of all, my experiences are colored by growing up in relative poverty in the 80s and 90s; I exp
54.
by f- 11y ago
Yep, the two PKCS bugs were from afl-fuzz.
55.
by f- 11y ago
(afl-fuzz author here) The basic idea for AFL is that it's supposed to be reliably better than dumb fuzzers without requiring you to think too much about the problem space, fuzzing settings, grammar definitions, harness design, etc. An
56.
by f- 11y ago
Many of the horribly vulnerable parsers are generated with Bison / Flex, so it's not exactly a robust solution. Plus, especially for binary formats (images, videos, etc), it's hand-written or bust.
57.
by f- 11y ago
As others have said, parsers for complex formats (be it text-based or binary) are exceptionally hard. There are some classes of C/C++ software where the choice of a language doesn't have such a striking effect. For parsers, the ef
58.
by f- 12y ago
Hey all, I'm the author of AFL. I think this is pretty cool, but also would like to ask you all to hold on to your hats =) Here's the short response I posted to the oss-security mailing list: http://www.openwall.com&#x2
59.
by f- 12y ago
There is no inherent correlation between the severity of the find and the PR budget available to the discoverer. On top of this, some types of security claims attract considerably greater attention than others for reasons unrelated to their
60.
by f- 12y ago
Also SELECT c.* FROM (a,b) AS c;

More ›