fabulist

29 ms·

271.
by fabulist 12y ago
Are you saying adding "encrypted" to the URL fixes the problem? Because, the author does attempt to access google directly over HTTPS. And it is not set up at the carrier level; Google performed the redirection from HTTPS to HTTP.
272.
by fabulist 12y ago
Who is moe? Knowing someone's name is not a requirement for assessing the quality of their argument, and whether their observations match your own.
273.
by fabulist 12y ago
I'd wager they can pick up the cell phone pings to the tower. I don't know if these messages are encrypted; if they are, perhaps they also hold the keys, and that is the real secret.
274.
by fabulist 12y ago
If they really did sign NDAs, their hands are probably tied.
275.
by fabulist 12y ago
Stating this once is enough, please.
276.
by fabulist 12y ago
This is interesting. If I was a McGill employee, I'd be getting ready to try "foobarAAAAAA" and "AAAAAAfoobar"....
277.
by fabulist 12y ago
> Phishing + guessing. I know someone who gets about 2-3 emails a week asking to enter their login info into some site in Brazil or the Czech Republic. I think it probably has something to do with this. https://www.mcgill.ca&
278.
by fabulist 12y ago
I seem to stand corrected. I guess we'll have to watch this story very carefully. I'm also "in" the security industry (I'm applying to my first jobs, but that is my chosen career path), and I do not believe Tor is s
279.
by fabulist 12y ago
Every time something like this happens, lots of people shout that the sky is falling and Tor is "dead." Thank you for putting forward a reasonable hypothesis amid the FUD. That being said, I doubt he was a developer for 399 other
280.
by fabulist 12y ago
Thats partly what I'm getting at. When you start down the path of maintaining a real-life identity and a Tor identity, it becomes increasingly difficult to avoid contaminating one with the other. But I suppose for the original, "r
281.
by fabulist 12y ago
Using a properly configured, Tor-enabled browser/OS is the first step to protecting your identity, not the last. You still have to compartmentalize your illicit (or, in the case of research, simply suspicious) activity from your day-to
282.
by fabulist 12y ago
Location: Bay Area Remote: Sure Willing to relocate: Not at the moment Technologies: Python, Django, GNU/Linux Github: www.github.com/xmnr Resume: Shoot me an email Email: maxbondconsulting@gmail.com I'm looking for internshi
283.
by fabulist 12y ago
Hmm, my mistake. You're completely correct. From the readelf man page: This program performs a similar function to objdump but it goes into more detail and it exists independently of the BFD library, so if there is
284.
by fabulist 12y ago
The article mentions readelf as using the same buggy library :(
285.
by fabulist 12y ago
This has been very interesting, thank you all for your feedback.
286.
by fabulist 12y ago
Yes
287.
by fabulist 12y ago
Checking it out, thanks
288.
by fabulist 12y ago
Good to know. :)
289.
Ask HN: Would you pay for honeypot logs?
13 points by fabulist 12y ago|25 comments
290.
by fabulist 12y ago
Well, thank you very much for a cool app and for fielding my requests :)
291.
by fabulist 12y ago
Cool, thanks. I've found a few minor bugs, should I fill out the support form on your site to report them?
292.
by fabulist 12y ago
How many bits of entropy do your keys have?
293.
by fabulist 12y ago
Thats a difficult question I'm not qualified to answer, and in hindsight that statistic was confusing. The real issue with the tiny amount of exit nodes in operation is a fundamental weakness in Tor; if an attacker can run a large enou
294.
by fabulist 12y ago
Did this jump out to anyone else? 2. After the data has been downloaded and parsed, an automated system checks each one of them against the Facebook internal databases to see if any of the email addresses and hashed passwords match valid lo
295.
by fabulist 12y ago
Its inspiring to see so much financial commitment to an idea like this, but disheartening to see it go to the wrong place -- a Kickstarter, not the Tor Project. Maybe we, as the FOSS community, need to start utilizing crowd sourcing more. M
296.
by fabulist 12y ago
"I'm not gunnuh use unicode" != "I'm gunnuh be safe about using unicode."
297.
by fabulist 12y ago
This is a test‣ That was a RTL override character. Seems to have had no effect. Interestingly however, it seems HN gave me 0 points to start instead of 1.
298.
by fabulist 12y ago
I propose we create a new convention, "humans.txt", which states in a plain, simple manner what parts of a system one can access and how. This is placed in the web root alongside robots.txt . This would be a closed-by-default syst
299.
by fabulist 12y ago
I just disagree. You seem to be saying we should use binary protocols and load them directly into memory Cap'n Proto style. But what if I'm little endian and you're big endian? Parsing happens. Text-based protocols fit well i
300.
by fabulist 12y ago
Its used by bash itself for communicating with subprocesses. Input you type at the terminal is not the same as an environment variable; hackers set environment variables much more often than legitimate users.

More ›