gergles

78 ms·

331.
by gergles 12y ago
This is neat, but movie-plot threat territory. Far more dangerous to actual security on iPhones is that airplane mode can be enabled from the lock-screen "Control Center" by default. This basically means if somebody wants to steal
332.
by gergles 12y ago
It has both a speaker and a microphone!
333.
by gergles 12y ago
Contactless EMV also doesn't send the name, making it much much much much harder for companies to try to guess who you are to add you to their mailing list (why do you think companies ask for your ZIP code so much? Name + ZIP uniquely
334.
by gergles 12y ago
> "Push Fixer is a premium service. The generation of unique sets for push notification is power and time consuming. The price for a set is really cheap and it allow us to continue offering this service." what. This firmware br
335.
The Ghost of NFC Future (2012)(medium.com)
1 points by gergles 12y ago|0 comments
336.
by gergles 12y ago
Yes, it is. djhworld is laughably wrong. All the contactless systems Visa/MC/Amex are deploying in the world are variants of PayPass/PayWave which are all based on an international standard and will work no matter what. The a
337.
by gergles 12y ago
You can add cash to an unlimited MetroCard now and have been able to do so for about a year. More annoying is that you can't use the auto-refilling MetroCards on PATH.
338.
by gergles 12y ago
> you're playing with house money including the bonus No, you are never doing this. The prices should just be 5% cheaper and there should be no 'bonus'. The fare is obviously set taking the bonus into account, so it makes
339.
by gergles 12y ago
Your impression is incorrect. Current EMV cards do something called DDA, so charging the card (as a card-present transaction) requires the card to be physically present or you to have cloned the application off the card (which the card is d
340.
by gergles 12y ago
A note of "trust me, I promise this is legit" is exactly what I would expect from a piece of malware. You need to directly address the allegations of using a keylogger/screenlogger somewhere to counter the negative review, no
341.
by gergles 12y ago
Turns out there is already a class 1 SHA-2 intermediate! It's just buried on their site, but you can add it to your chain and it passes SSLLabs validation and otherwise looks totally fine. So this isn't as huge a problem as I had
342.
by gergles 12y ago
It doesn't, it applies to the entire cert chain (minus the root). DigiCert's non-EV intermediate cert (DigiCert Secure Server CA) is SHA1, so until they fix that, all DigiCert users are still going to be affected.
343.
by gergles 12y ago
> and which include a SHA-1-based signature as part of the certificate chain
344.
by gergles 12y ago
Digicert, the CA that signs their cert, is all SHA1, so they'll probably need to change CAs at a minimum.
345.
by gergles 12y ago
Yes, this is going to further insecure the Internet by forcing people back to the for-pay CAs, unless Startcom manages to fix it basically instantly and forces everyone to get new certs, very very quickly.
346.
by gergles 12y ago
> The bttn is based on some pretty cool patent-pending inventions. Please enlighten me as to what on earth is novel (in the patent language sense) about a button on the internet.
347.
by gergles 12y ago
Yo was rejected. The other (bigger?) problem with the approval process having guidelines like this is that you can just play CSR roulette and keep submitting it until you find somebody that approves it, which is, I suspect, what the Yo peop
348.
by gergles 12y ago
I didn't have to take shoes off, laptop out, or throw away liquids in India. They do a hand-wand metal detector and a perfunctory frisk if you're wearing loose clothing, but otherwise it's much less invasive than any TSA chec
349.
by gergles 12y ago
No, in fact, precheck generally means you don't go through the AIT device and instead go through the metal detector. If you refuse to go through the metal detector (or if you set it off, or you are the 'zone 5' "random&q
350.
by gergles 12y ago
People have literally died due to buggy software: https://en.wikipedia.org/wiki/Therac-25 I think it's reasonable to assume that people have also been wrongfully convicted due to buggy forensics software as well,
351.
by gergles 12y ago
Yeah, the only reason I can see to keep this invite-only is to try to create artifical cachet about being in a community of "smart people".
352.
by gergles 12y ago
There is a Fidelity-branded Amex card that gives 2% on everything, with no annual fee. There are several other cards that give 2% on everything (Capital One Venture, Barclay Arrival+) but that bear annual fees.
353.
by gergles 12y ago
Liquidated damages the DOL collects are paid out to the workers, so the assumption is that you are bragging about screwing the workers by 'negotiating' damages.
354.
by gergles 12y ago
You set your wholesale price. You don't get to set retail prices. If I want to buy something from you at $1000 and resell it at $1, that's my business. eBook publishers have this delusion where they get to set retail prices, a
355.
by gergles 12y ago
https://ssl.reddit.com/gold Probably like that...?
356.
by gergles 12y ago
I do wonder what it would be like to use an editor where the main cursor navigation was forward/backward incremental search. One case of this is the Canon CAT[1] word processor, which used "LEAP" keys for cursor movement (and
357.
by gergles 12y ago
Also, HN doesn't have a private messaging feature. If users don't put their email in the free-text field on their profile, there's no way to get in touch with them privately.
358.
by gergles 12y ago
This is pretty blogspammy, the better source that is linked to in the article is http://www.cflas.org/was-lionfish-research-hijacked-by-12-ye... .
359.
by gergles 12y ago
Well, define 'flawed'. It is flawed if you attempt to interpret it as being representative of how people in the general population would behave in a setting without an active experimenter interfering, sure. It does still reveal th
360.
by gergles 12y ago
Here's a link to the actual press release: https://owncloud.com/get-public-cloud-flexibility-files-self... The link in the OP doesn't actually mention v7 being released at all.

More ›