homakov

47 ms·

1. 451.▲
   by homakov 10y ago

   Doesn't work so far. Technology looks like a better answer: get a cheap laptop and bootstrap new google from home
2. 452.▲
   by homakov 10y ago

   Best practice is to never use 2FA SMS
3. 453.▲
   by homakov 10y ago

   Is there a fix?
4. 454.▲
   by homakov 10y ago

   Get rich != become a banker. The article would be accurate if it said "how to become a banker"
5. 455.▲
   by homakov 10y ago

   Hard work is only option. "having rich parents" is a personal condition... you cannot choose condition, universe does not work like that - and every second we discuss income inequality is a wasted second. Thus we end up with hard
6. 456.▲
   by homakov 10y ago

   Blah blah college. Degree has nothing to do with getting rich
7. 457.▲
   by homakov 10y ago

   Over complicated doesn't mean insecure, but the less code the better
8. 458.▲
   by homakov 10y ago

   There is account system too - journalists got passwords, sources got "code names" Not huge, but much more complicated than it could be . For instance, it redefined CSRF protection in a weird way https://github.com&#x2F
9. 459.▲
   by homakov 10y ago

   Agreed on unnecessary complexity, but it's not a trivial app. Quick scrolling through sources and we see dozens of endpoints and each is potentially vulnerable. Trusting the server, developers, Flask (which is by no means a good choice
10. 460.▲
    by homakov 10y ago

    My bad, it's not what classic "through obscurity" means. Instead I meant something that makes exploitation more "obscure" (you need to be prepared to hijack a server vs simply leak the key).
11. 461.▲
    by homakov 10y ago

    It really is, but there is no need for hardware. Software based auth would be the same
12. 462.▲
    by homakov 10y ago

    In my opinion it's not worth the effort (and certainly not $50). It makes marginally +X harder to exploit yet marginally +X inconvenient to use = typical security through obscurity.
13. 463.▲
    by homakov 10y ago

    Get owned = SSH is hikacked = I don't need your keys and can run any commands on your behalf. This thing might protect from keyloggers but useless against proper malware that just waits for you to authenticate.
14. 464.▲
    by homakov 10y ago

    I made a research on this https://sakurity.com/blog/2015/07/28/appcache.html I'm fine with having a less secure web version and i know its limitations
15. 465.▲
    by homakov 10y ago

    How you managed to make Keybase.dmg 72MB when any Electron app is 120+?
16. 466.▲
    by homakov 10y ago

    Should be easy since main app is in electron
17. 467.▲
    by homakov 10y ago

    My recommendations to use full disk encryption etc go ignored.
18. 468.▲
    by homakov 10y ago

    There is a middle ground truefactor.io
19. 469.▲
    by homakov 10y ago

    Please explain how Kanna lost bitcoins if only his accounts were hacked not computer where the wallet is? I dont get how 2fa is supposed to prevent local hack btw
20. 470.▲
    by homakov 10y ago

    It's a shame many people would make their opinions about Bluetooth API on such poor journalism as The Register offers. Zero credibility!
21. 471.▲
    by homakov 10y ago

    Any example of a company where few people badly need to share password and there is no "team" where you can add new users?
22. 472.▲
    by homakov 10y ago

    Wow, never thought of that. Someone must create an alternative web app store that we can browse with aggregated ratings
23. 473.▲
    by homakov 10y ago

    Easy to fix 1) prohibit popups asking for review 2) show ratings inside of app store and only after iOS knows you used this app for a while 3) stop asking for damn password every time and requiring review "title". This will make i
24. 474.▲
    by homakov 10y ago

    Isn't mailto: opening Mail.app for you?
25. 475.▲
    by homakov 10y ago

    This is a bit of a clickbait, sorry. It is not a vulnerability in Github, but simply <link rel="prerender" href="..."> that loads the page in a hidden tab and instantly loads it when you're about to click. You
26. 476.▲
    Hijacking your GitHub in one click(homakov.github.io)

    4 points by homakov 10y ago|1 comments
27. 477.▲
    by homakov 10y ago

    So they watched Why him?
28. 478.▲
    by homakov 10y ago

    Or four of them in much of the entire world.
29. 479.▲
    by homakov 10y ago

    For instance, infosec and developer community is mostly on twitter. Great for trolling and has clean interface unlike notorious Facebook clumsy UX.
30. 480.▲
    by homakov 10y ago

    No they shouldn't, that's not how secure engineering works.