iancarroll

13 ms·

91.
by iancarroll 4y ago
Every international gate can be a domestic gate in the US -- you just exit into the terminal via the same door you would board the plane from. It is pretty common to deplane a domestic flight at an international-capable gate at JFK and basi
92.
by iancarroll 4y ago
The bank can take your cash deposits and invest them, which is the problem occurring with SVB. In this case, your deposits are still insured via FDIC. If you buy investment products from a bank, and they hold those for you, those are not in
93.
by iancarroll 4y ago
Their bandwidth pricing is competing with AWS, not wholesale bandwidth rates.
94.
by iancarroll 4y ago
That’s what Ventura does…
95.
by iancarroll 4y ago
Disposable gift cards are widely available in the US that will run as debit/credit without any need for identity verification. They are disposable, though, and as the other comment mentions aren't very economical (~1% outright in
96.
by iancarroll 4y ago
> Why would you? Because the license often requires it.
97.
by iancarroll 4y ago
$0, as far as I know. For example, Ford has HackerOne programs but only pays bounties for an extremely small set of their applications. Other companies had no program at all, like Ferrari, and we had to message them on LinkedIn. (I worked o
98.
by iancarroll 4y ago
There are brokers with SIPC insurance who will hold crypto, but crypto is not covered by SIPC (AFAIK), so it’s not very useful.
99.
by iancarroll 4y ago
The interchange fee differences between credit card types are not very high, usually around 0.5%. You can see the public Visa interchange rates at https://usa.visa.com/content/dam/VCOM/download/merchants&
100.
by iancarroll 4y ago
Unpredictable user IDs are also an important security feature. At every tech company, developers inevitably write an endpoint that accidentally operates on user data without authorization checks. It is much easier for an attacker to itera
101.
by iancarroll 4y ago
It’s not really that simple, and it’s likely that these attacks would fail CVV/3DS/etc, so it’d be hard for a reasonable merchant to be tricked regardless.
102.
by iancarroll 4y ago
It might be difficult, but it's possible to send encrypted push notifications as you mention, and you don't get to make the E2EE claims until you actually do it. I don't think UniFi or most other cameras claim anything like E
103.
by iancarroll 4y ago
Amex is already legally responsible for fraudulent charges on your card, so if they want to make the numbers predictable, why not?
104.
by iancarroll 4y ago
Seems like you are saying that bug bounty researchers focus more on application security issues and not other types of security, which is certainly true, but [some % of] breaches occur via appsec issues and they’re what bit e-Tugra here.
105.
by iancarroll 4y ago
What does CAA have to do with Let’s Encrypt? CAA’s first RFC was published years before Let’s Encrypt began issuing certificates, and they are an author on the latest RFC version. CAA easily supports several CAs issuing for one domain.
106.
by iancarroll 4y ago
This exists on GitHub but is not free. https://docs.github.com/en/enterprise-cloud@latest/code-secu...
107.
by iancarroll 4y ago
I don’t think there’s a single compelling reason. I personally did it because the price increase was relatively modest ($90->$180/mo), my access points already supported 5GbE, and I do a lot of security research that high bandwidth
108.
by iancarroll 4y ago
Went through this recently as AT&T Fiber began offering 5Gbps service to my apartment in San Francisco. Luckily, the apartment building (seemingly) ran CAT 6 through the walls, but the AT&T modem only has one 5GbE port, so a switch
109.
by iancarroll 4y ago
My parents actively paid AOL for quite some time because they thought it was for their email service, not for dialup.
110.
by iancarroll 4y ago
Google makes every security researcher sign up as a vendor inside their procurement system, SAP Ariba. Seems likely that a payment for another vendor got misdirected by the procurement team as a result of this.
111.
by iancarroll 4y ago
Had some fun with this. I used fireprox[0] to grab a ton of AWS IPs, and some proxy vendors for some other random ranges. Sadly my ASN has only /24s in disparate ranges so it wouldn’t make a dent for most of them. [0] https:/&#x2
112.
by iancarroll 4y ago
I think the article is slightly wrong on this; first class on Emirates is on the second level of the A380. The cockpit and economy class are on the first level, and traditionally the A380 crew rest area is then below economy — inside the ca
113.
by iancarroll 4y ago
Cubic (still) runs and maintains Clipper as a whole, and most other systems like it in the US. They didn’t develop Clipper at first, but have been maintaining/upgrading it for most of its life. The support/call center is Cubic, mo
114.
by iancarroll 4y ago
The gist in your snippet is published by this article’s author.
115.
by iancarroll 4y ago
That seems like all it is, though? I have moved some stuff off of Heroku to Fly, and the new features/capabilities you get are pretty cool. It's hard to be excited about moving anything to Render, which is just the same thing as H
116.
by iancarroll 4y ago
Thanks, for some reason this worked!
117.
by iancarroll 4y ago
It’s complex, but I believe Visa and MC voluntarily gave up their anti-steering requirements, while Amex fought the legal challenge against them and won[0]. [0] https://en.m.wikipedia.org/wiki/Ohio_v._American_Express_C
118.
by iancarroll 4y ago
Worth noting that most IP blocks are going to be transferrable in some form, and thus most IP blocks can be sold on this site. IPXO is of course different since it's temporary leasing, but you couldn't really build a list of IPs t
119.
by iancarroll 4y ago
You can’t implement what you suggest in a browser. The only trusted identity that browsers have is the parent page in the URL bar — which Plaid doesn’t remove. If Plaid tried to create some kind of secondary URL bar, phishing pages could ju
120.
by iancarroll 4y ago
Hetzner is probably paying ~$300/mo/Gbps for their transit capacity. While I’m sure this particular account isn’t profitable for them, they’re not losing a boatload of money from it either. Hard to blame the user if they advertise

More ›