homakov

37 ms·

331.
Get Free Security Audit If You Replace Passwords(sakurity.com)
3 points by homakov 9y ago|2 comments
332.
by homakov 9y ago
Yeah, though it sucks both require a phone & sim card
333.
by homakov 9y ago
That's what I said. We judge laws not by their intention, but on the outcome. Outcome of cookie law is one giant net negative.
334.
by homakov 9y ago
> SOTA started including some new feature you didn't know if you sign for 2 versions, changes in 3 would not brake you. and the point is MANY things right now could be safe to turn on for 99.99%, e.g. XFO. So, not much effort
335.
by homakov 9y ago
EU, where millions of hours go into accepting cookies popups - says it all about EU legal system.
336.
by homakov 9y ago
I proposed a header instead of a protocol btw https://medium.com/@homakov/request-for-a-new-header-state-o...
337.
by homakov 10y ago
You can install the fix no matter what, it's innocent. They should have offered source code for their test app instead, but that's definitely not malicious.
338.
by homakov 10y ago
>3. That whoever created this page recommends the user alter the miner to point to some other, user-controlled HTTP server, effectively MITMing anyone who sees this page. >127.0.0.1 auth.minerlink.com This is localhost.
339.
by homakov 10y ago
Yes, but you cannot cancel the request. If you go offline mode it lacks cookies. That's why I need an extension that blocks request first.
340.
by homakov 10y ago
Can it be extended so I could copy entire request in one click in some format (XAR is best)
341.
by homakov 10y ago
Exactly what happened to me with Starbucks ( https://sakurity.com/blog/2015/05/21/starbucks.html ) - threats, signing NDA, they disappear.
342.
by homakov 10y ago
I don't need a service to send this data:text/html,<form method=post action=URL>params...<input type=submit></form>
343.
by homakov 10y ago
Disagreed - i is distinct enough from l ( if you look at the URL at all)
344.
by homakov 10y ago
I lived for half a year in biggest cities of Vietnam, it's basically a dump for long term living compared to Thailand.
345.
by homakov 10y ago
As long as it is mutual consent, I don't see a problem about it. Also without that mai pen rai atmosphere TH would turn into another Laos/Vietnam and those countries are just sad.
346.
by homakov 10y ago
Phuket is awesome, go to south (nai harn/rawai), for sure you need a scooter.
347.
by homakov 10y ago
The stalls around Nana are much more annoying than the street food. And loud motorbikes are about 10x times more annoying than any stalls. (Lived in town for few years)
348.
by homakov 10y ago
All that can be done with transparent iframes, cursor tricks achieve nothing.
349.
by homakov 10y ago
Use in clickjacking - unlikely. Once your mouse is on another iframe you have no power over cursor pic.
350.
by homakov 10y ago
Banks is 99% regulation and paperwork and 1% account table. They won't be around long enough this way to be interesting for Apple.
351.
by homakov 10y ago
It is not correct until that "As an individual I am taxed on income I earn overseas. Why shouldn't a corporation?" implied living overseas as well.
352.
by homakov 10y ago
Last time you used it?
353.
by homakov 10y ago
How do I disable unicode in domains entirely for Chrome? Such a useless and dangerous feature.
354.
by homakov 10y ago
Btw, I conducted pentests for over a hundred of companies (sakurity.com), and none of them ever mentioned any certifications. Maybe 1% of deals failed because of government-specific clearance.
355.
by homakov 10y ago
Knowing basic English is a prerequisite to any tech job. There's nothing else you need to know to explain a bug. And there's TOEFL/IELTS if you're looking for English language certificate.
356.
by homakov 10y ago
I know a handful of attack that work, and a few more vectors that won't be fixed as well. So why bother, exactly? It's neither a big concern nor fixable in current web design.
357.
by homakov 10y ago
SRI shouldn't use static hashes, it should set pub keys of different people and the response must have N/M signatures. This way updates are possible and you know N people confirmed the source as safe.
358.
by homakov 10y ago
Who cares someone went to X website? Even https is not protecting from that.
359.
by homakov 10y ago
Maybe I was lucky, but I never felt in danger in major US cities walking literally everywhere. While in D.F. I had some anxiety outside of central roads.
360.
by homakov 10y ago
I'm very sensitive to blue light and been using flux for few years. After trying nigth shift for few days I'm back to flux which actually works

More ›