fabulist

12 ms·

61.
by fabulist 11y ago
If you choose to sign up for facebook with real information, sure. You don't have much choice in the data your government loses about you.
62.
by fabulist 11y ago
The winners here are fraudsters and the losers are the Turkish people. Cryptographers never enter into the equation.
63.
by fabulist 11y ago
I'm not sure I agree with it either, but it is certainly newsworthy.
64.
by fabulist 11y ago
More and more it seems to me that there is no replacement for correctness, and you have to squint to tell this apart from theater. Perhaps I'm exaggerating. It would certainly raise costs to the attacker to recruit an additional collab
65.
by fabulist 11y ago
I'll bet you an Airbus that if we managed to FOIA the source code it would use an LCG seeded from the system clock.
66.
by fabulist 11y ago
So you're saying this app operated by TSA agents is meant to defeat attackers looking to be screened by cooperative TSA agents? I can't help but feel something is lacking in this threat model.
67.
by fabulist 11y ago
For that matter, they could tell odd parties to go left and even parties to go right.
68.
by fabulist 11y ago
Make and submit it.
69.
by fabulist 11y ago
I would counter that we need to make it more difficult for police to use Stingrays, but law enforcement should absolutely engage in all sorts of man-in-the-middle attacks when it is in the public interest. The problem is not that the have a
70.
by fabulist 11y ago
It isn't that there is a sea of illegitimate traffic so much that their methodology is incredibly flawed, and they have little financial incentive to fix it. As a society, we have to give them that incentive, or we will lose access to
71.
by fabulist 11y ago
It is 2016. The web is public. People scrape sites. Don't show them things they shouldn't see. Don't pretend you're going to stop 80legs from scraping you by blocking Tor.
72.
by fabulist 11y ago
Hassling Tor users shouldn't become the Internet's default. If you're having trouble, consider informing Tor users checking out that you won't process the payment without their providing additional information. This rais
73.
by fabulist 11y ago
Services like CloudFlare are responsible for more and more of the DNS. When they are poor net citizens, they are poor net citizens at a massive scale. Heuristics that end up being equivalent to "Tor users are guilty until proven innoce
74.
Sousveillance (Wikipedia)(en.wikipedia.org)
1 points by fabulist 11y ago|0 comments
75.
by fabulist 11y ago
Then allow the Tor users and watch them carefully. If you think you have a way to definitively tell that some traffic is malicious, why oh why would you interrupt your enemy while they're making a mistake? Do you think they're not
76.
by fabulist 11y ago
Avoid running eval(), unserialize(), etc. because you're wrong about what isn't user input.
77.
by fabulist 11y ago
You are using very strong words to describe a very weak signal, and it comes out sounding like noise. Self-respecting programmers make lots of good and bad decisions, and trying to exclude someone from that category because they went down a
78.
by fabulist 11y ago
If you are a self-respecting programmer, you should ask yourself if someone has done a better job writing the same tool than you intend to do.
79.
by fabulist 11y ago
One shouldn't expect much of anything to remain secure if an organization with the resources of the FBI has physical possession of it.
80.
by fabulist 11y ago
Copyright violation is a huge problem for photographers, but if you have a better solution than suing violators they are all ears, I'm sure.
81.
by fabulist 11y ago
They are alluding to IDA's recursive disassembly capabilities. http://reverseengineering.stackexchange.com/questions/2347/w... (It's worth noting the answer from Igor Skochinsky, while not the selected a
82.
by fabulist 11y ago
Very interesting article, you should submit it.
83.
by fabulist 11y ago
Alternatively, I'd appreciate if comments had a link to their siblings and not just their parents. It wouldn't require any JavaScript, but would (for me) have the same utility.
84.
by fabulist 11y ago
HN's UI is clear, accessible, and uncluttered. If you want something different, they expose an API which everyone and their mother has written a client with, including native apps for mobile. The only JS on the site is in place to redu
85.
by fabulist 11y ago
Try it. You'll find HN an interesting target.
86.
by fabulist 11y ago
I've definitely spoken to people who've told me that, when they plug a USB drive in at their place of work, Windows pops up a dialog for an administrator's password in order to mount it. I believe this is some sort of group p
87.
by fabulist 11y ago
Another way to look at it might be that HN has a classic, utilitarian aesthetic.
88.
by fabulist 11y ago
A small point of information, it is also problematic (in a highly sensitive enviornment) to let people arbitrarily decide to take gigabytes of information out the door with them.
89.
by fabulist 11y ago
It seems to me like refusing to provide this convenience did lead to a dangerous breach of protocol. Without endorsing Clinton's actions, lets learn from this.
90.
by fabulist 11y ago
If you say "yes" rather than "no", you become involved in the process of implementing the system and can provide security fixes and mitigations. If you say "no" they they probably do it anyway, stick it in Digi

More ›