ge0rg

37 ms·

361.
by ge0rg 12y ago
The link is 404 now, anyone got a mirror?
362.
by ge0rg 12y ago
Even if the proposed feature is added to C and implemented, there is still the (practical) problem of OS-level task switching: when your process is interrupted by the scheduler, its registers are dumped into memory, from where they might ev
363.
by ge0rg 12y ago
Yeah, the certificate situation on Android is really sad, if you cannot afford to buy/get a "proper" cert. I wish more applications would provide an easy way to use self-signed certs without totally compromising security. Edi
364.
by ge0rg 12y ago
Rarely used, low-level Socket class intentionally doesn't perform automatic SSL certificate verification It is true this class is rarely used, but it does not mean that security is optional for rarely-used APIs. As can be seen from t
365.
Java/Android SSLSocket Vulnerable to MitM Attacks(op-co.de)
12 points by ge0rg 12y ago|2 comments
366.
by ge0rg 12y ago
from http://en.wikipedia.org/wiki/Facebook_Zero : Facebook Zero is an initiative undertaken by social networking service company Facebook in collaboration with mobile phone-based Internet providers, whereby the provid
367.
by ge0rg 12y ago
From a short look, I tend to agree with you. > memcpy(packet + 1, &con->ping_request_id, sizeof(uint64_t)); Copying multi-byte values into a network packet is a typical error made by novice developers - this will bite you hard as
368.
Did TrueCrypt’s developers embed a hidden Latin message for us all?(grahamcluley.com)
5 points by ge0rg 12y ago|2 comments
369.
Hacking the Samsung NX300, part 2: Get Root(op-co.de)
8 points by ge0rg 12y ago|1 comments
370.
by ge0rg 12y ago
With statements like this, the author is doing the community a disservice. It is very important to understand that a modern smartphone contains enough CPUs to be used against you, even if you only run Open Source on the primary one. This mi
371.
by ge0rg 12y ago
So due to piracy, a generation of students came to think that software was not a secure career path. Why get into a career to work to build something that can be easily copied at little cost? Wow, this is really interesting - in Russia, p
372.
by ge0rg 12y ago
My goal was not to criticize their UX (which I do nevertheless, triggering "advanced" features like HDR takes some amount of clicking), but to point out things that still need to be improved. Modern interconnected devices need to
373.
Hacking the Samsung NX300 "Smart" Camera(op-co.de)
126 points by ge0rg 12y ago|51 comments
374.
Is my private key secure?(privatekeycheck.com)
2 points by ge0rg 13y ago|0 comments
375.
by ge0rg 13y ago
The heartbleed bug looks exactly like an NSA backdoor: * the protocol extension rfc and implementation are from the same person (who is now working for the largest German IT service contractor; formerly state owned T-Systems). * the extensi
376.
StartCom answer to Heartbleed(pastebin.com)
2 points by ge0rg 13y ago|0 comments
377.
by ge0rg 13y ago
Wow, a code change introduced around New Year's Eve (depending on timezone), and authored by Robin Seggelmann, who also brought us DTLS-SCTP.
378.
Paypal Android App Remote Code Execution(labs.mwrinfosecurity.com)
32 points by ge0rg 13y ago|13 comments
379.
by ge0rg 13y ago
While I agree with your general point of making car security openly auditable, I think the best short-term approach to fix this is via insurance companies. They have a direct financial loss from badly designed car locks, and probably suffic
380.
by ge0rg 13y ago
Original source: http://www.raspberrypi.org/archives/6299 HN discussion: https://news.ycombinator.com/item?id=7320828
381.
Raspberry Pi GPU Goes Open Source $10,000 Bounty For Quake 3(hackaday.com)
6 points by ge0rg 13y ago|1 comments
382.
by ge0rg 13y ago
fortunately there is improvement in sight: XEP-313 Message Archive Management [0] allows a client to fetch the backlog from its server, at the (privacy) cost of having all your messages stored on the server. [0] http://xmpp.org&#
383.
by ge0rg 13y ago
It is interesting how most of the games look like ports of old PC games (not a critique, just noticing). I suppose this underscores the sad state into which the "modern" game developer studios have maneuvered themselves.
384.
by ge0rg 13y ago
Would you care to elaborate? The only thing I found in the apple docs is that calling your app callback is a "best effort" service not guaranteed to do anything if your app is not running already.
385.
by ge0rg 13y ago
In the early Android versions (pre 1.0), the Android API actually included XMPP methods. I also remember reading debug messages containing "XMPP" in the function names related to GCM. These are just hints, and the protocol might h
386.
by ge0rg 13y ago
Zero deployment on the networks I have access to. Also I would not be surprised if the carriers manage to break permanent connectivity there with stateful firewalls.
387.
by ge0rg 13y ago
It was tongue-in-cheek, though my agenda is to make mobile xmpp as reliable and user-friendly as the proprietary apps. Can you elaborate your reasons for hoping I'm not serious?
388.
by ge0rg 13y ago
As I wrote, it is hard to keep the conversation private in such an offline+push context. On the other hand, the additional battery load induced by a properly implemented XMPP connection is low. Apple's main fear is probably badly desig
389.
by ge0rg 13y ago
The main problem with energy saving are short-living NAT session in the "carrier grade" NAT systems deployed by mobile ISPs. You need to ping the server aggressively to prevent a NAT timeout from killing your connection. On most n
390.
The Sad State of Mobile XMPP in 2014(op-co.de)
102 points by ge0rg 13y ago|76 comments

More ›