fabulist

56 ms·

241.
by fabulist 12y ago
This really isn't true in any common cases. For instance web frameworks are making SQLi and CSRF, and to a lesser extent XSS, less common. When everyone was rewriting the same code in their CGIs over and over again, many of them got it
242.
by fabulist 12y ago
Its hard to really give a meaningful answer without seeing the email. You could check if the attacker was sloppy, and allowed information to leak in the email headers, but its quite likely that your brother was emailed by another victim. It
243.
by fabulist 12y ago
Oops, thanks. I skimmed and ctrl+f'd for "army", but I guess I still missed it somehow.
244.
by fabulist 12y ago
This seems like an interesting perspective, would you care to elaborate?
245.
by fabulist 12y ago
What is the relevance?
246.
by fabulist 12y ago
I was thinking about this, and I realized there is a bigger problem. The sensors detected a break in, failed to report it, and apparently just forgot about it; it successfully engaged in the protocol designed to detect jamming, but didn&#x2
247.
by fabulist 12y ago
They might be willing to invest the time and money to become proficient at this attack, if they believe they'll be able to use it on several high-value heists -- think jewelry shops or museums, if you knock over a handful of those with
248.
by fabulist 12y ago
I think if the alarm isn't able to communicate (through wired means or otherwise) with its sensors or its back end for a suitable period of time, it should be functionally equivalent to detecting a break in. That is; the alarm should s
249.
by fabulist 12y ago
This does not stop them from viewing the source of the page.
250.
by fabulist 12y ago
The only way which is at all effective is to move the sensitive bits of functionality onto your servers, away from prying eyes. You're going to have to concede some parts of your app to public scrutiny; if a JavaScript interpreter can
251.
by fabulist 12y ago
Non-paywalled link: https://archive.today/efhmJ
252.
by fabulist 12y ago
I think you're right to take offense, this person is blatantly claiming credit for your work. Their repository on Git doesn't even show it was forked from yours. I'd suggest you get in touch with GitHub and Elance; they'
253.
by fabulist 12y ago
I think you are quite unfairly placing blame for a systemic issue on the people least responsible.
254.
by fabulist 12y ago
Not according to their website, no. If they're looking to turn a profit, its probably by acting as sellers.
255.
by fabulist 12y ago
Rob Graham (@ErrataRob) gave a (joking) talk about the "fail-peen"; it is the measurement of how susceptible an organization is to compromise, and is calculated by taking the inverse of their epeen ("the ego of your online pe
256.
by fabulist 12y ago
I missed it at first, too; I saw comments referencing it, and checked the article again. I'm all for having secure, private means of communication; it is essential for our liberty and a healthy democracy. Inevitably, these will be used
257.
by fabulist 12y ago
Well, the ones who purchased the secrets are the ones who can request arbitration; if they do, presumably the information is false and worthless, or they are attempting to cheat the system to have their cake and eat it too.
258.
by fabulist 12y ago
Out of curiosity, not criticism, why would you want to?
259.
by fabulist 12y ago
It would probably be more intelligent for them to give up, and focus on the crowd-funding aspect of their idea.
260.
by fabulist 12y ago
This is really disappointing and almost seems engineered to proliferate Bitcoin's reputation as a technology to service criminals. I also think that they misunderstand the needs of their potential customers. They are trying to introduc
261.
by fabulist 12y ago
This guide is very hand-wavey. Tor alone is a poor operational security strategy; using nikto and unix-privesc-check does not a hacker make. This may be a decent place to begin one's inquiry, but don't let it end here too. Here ar
262.
by fabulist 12y ago
It seems craigslist has resolved the situation, and you're probably seeing the after effects caused by cacheing. Additionally, there is already a discussion about this: https://news.ycombinator.com/item?id=8650921
263.
by fabulist 12y ago
Perhaps if those tools aren't meeting your needs, you could run the Node interpreter in a sandbox, instead.
264.
by fabulist 12y ago
Non-paywalled link: https://archive.today/0a9a6
265.
by fabulist 12y ago
This is usually my goto move, but it failed me here.
266.
by fabulist 12y ago
That was my experience with DDG several years ago, but not recently. Sometimes I check results in both search engines; they're always very similar.
267.
by fabulist 12y ago
I tried it myself before making the comment and it did not work, but perhaps that was because of HTTPS Everywhere.
268.
by fabulist 12y ago
DuckDuckGo's main problem is that they don't pick up new results as quickly as Google does. Otherwise, a query on DuckDuckGo looks very much like a query on Google (the top results are often identical.) If you can't find some
269.
by fabulist 12y ago
It seems like that technique no longer works.
270.
by fabulist 12y ago
For the privacy conscious, I don't really see a need to ever use Google (except perhaps for images). DuckDuckGo and Startpage are perfectly fine for your average search query; they aren't terrific for fresh news stories, in which

More ›