jjguy

13 ms·

91.
by jjguy 14y ago
Oskar, I didn't know you were an HN'er. Thanks for posting. I have studied malicious use of DNS for a long time and have not yet found any reference prior to your post in 1998. In fact, I used your original bugtraq post as a reference t
92.
by jjguy 14y ago
Software isn't a fire and forget transaction anymore There's a lot of insight in that soundbite. I wish more of the "enterprise!" crowd (and in this case, Daddy Google) realized that.
93.
by jjguy 14y ago
If you create a new account, it will allow you to select an @outlook.com email address. There is no ajax on the account name, you'll have to enter the captcha to know if your chosen email address is available. - Click your username in
94.
by jjguy 14y ago
For any new reverse engineers in Hacker Newsland, another win32 PE classic is Ero Carrera's diagram from 2005: https://www.openrce.org/reference_library/files/reference/PE...
95.
by jjguy 14y ago
Even if the sensational headline is accurate, it's not worth the conspiracy theories: (1) Microsoft is a US Corporation (2) With the Skype acquisition, Microsoft (arguably) becomes a telecommunications carrier. (3) CALEA passed in 1994, "re
96.
by jjguy 14y ago
Appendix B: The primary problem with the "X-" convention is that unstandardized parameters have a tendency to leak into the protected space of standardized parameters, thus introducing the need for migration from the "X-" nam
97.
HN's tptacek on how to break into a security job(krebsonsecurity.com)
3 points by jjguy 14y ago|0 comments
98.
by jjguy 14y ago
A note for college HN'ers: you don't need foreign relatives to mail you the books. amazon.co.uk will happily ship to US addresses. It costs a little more to ship and takes a week or so longer, but you can still save a substantial amount.
99.
Ross Anderson: Debunking Cybercrime Myths(lightbluetouchpaper.org)
3 points by jjguy 14y ago|0 comments
100.
by jjguy 14y ago
Ref Microsoft's Shared Source Initiative: http://www.microsoft.com/en-us/sharedsource/default.aspx Enterprises w/ 10k+ seats, OEMs, MVPs and governments can get access to Windows source these days. Microsoft launched the program in 2006
101.
by jjguy 14y ago
To paraphrase Edison, anything worthwhile is 99% perspiration and 1% inspiration. The novel md5 collision/windows update propagation is Flame's 1%. The rest is just what's made possible as a result. It is a cogent reminder of the fragili
102.
Remind HN: DEFCON CTF registration closes tomorrow(ddtek.biz)
2 points by jjguy 14y ago|0 comments
103.
The quest to replace passwords(lightbluetouchpaper.org)
2 points by jjguy 14y ago|0 comments
104.
by jjguy 14y ago
Also: Michael DeGusta's chart from Oct 2011 http://theunderstatement.com/post/11982112928/android-orphan...
105.
by jjguy 15y ago
This page http://wiki.python.org/moin/LoggingPackage gave me a lot of indirect insight into why the logging module is the way it is. The user "VinaySajip" is the author and maintainer of the package.
106.
Real world antivirus performance: 30 days with 43 different antivirus products(getcarbonblack.com)
1 points by jjguy 15y ago|0 comments
107.
by jjguy 15y ago
The best people always have many opportunities. It's like Joel said in 2006 [1]: the good ones never "hit the market" because they simply pick up the phone and call in the outstanding offers. Don't fret. View it as validation you've got
108.
Exploit code released for MS12-020, remote pre-auth vuln in RDP(aluigi.org)
1 points by jjguy 15y ago|0 comments
109.
by jjguy 15y ago
Reminds me of Joel's Law of Leaky Abstractions. At some point, you must deeply understand the entire stack. http://www.joelonsoftware.com/articles/LeakyAbstractions.htm...
110.
by jjguy 15y ago
There are two new paradigms gaining momentum in enterprise environments: - Assumption of breach - Bring your own device Assumption of breach is driven by the industry's over-emphasis on protection, versus detection and response.
111.
Bathsheba Sculpture - art embodied as 3D printed mathematical sculptures(bathsheba.com)
4 points by jjguy 15y ago|0 comments
112.
by jjguy 15y ago
Technology's favorite lawyer, Lawrence Lessig, has a new book out advocating for campaign finance reform. Like most things from Lessig, his arguments are well-considered, balanced and thought-provoking. He includes a quote I found partic
113.
by jjguy 15y ago
Efficiency is probably a better descriptor. How about The Internet allows us to make those connections more efficiently, and each generation of communications technologies increased both the efficiency and quality of our interactions. I d
114.
by jjguy 15y ago
>For entrepreneurs, the key message is to be really careful about doing a social networking startup in 2012. The social networking wave is about to crest. There are very few ideas and opportunities in this space that aren’t crowded.
115.
by jjguy 15y ago
> Microsoft has to do something that's _compellingly_ better, to someone, somewhere, on some basis that makes money. $20 says Microsoft will take over the mobile enterprise market from the now weak grasp of RIM, by focusing on securit
116.
by jjguy 15y ago
It wouldn't be very interesting. Here's what real hacking looks like: http://imgur.com/YAnUh (sorry for the reddit-esque share, originally there. But it's relevant and accurate)
117.
by jjguy 15y ago
The noise is incredibly annoying. There's no industry-accepted way to distinguish between a security expert and the guy with the A+ cert. We really need to raise the bar and instuitionalize better standards. Your points re: difficulty of
118.
by jjguy 15y ago
No network of any reasonable size/complexity can keep out a focused attacker. If you think yours can, you are wrong. Today's threat models are dominated by the criminal, opportunistic attackers looking for user information or computing po
119.
The legal history of "fuck" (2007) [pdf](cardozolawreview.com)
49 points by jjguy 15y ago|27 comments
120.
by jjguy 15y ago
It only seems odd because from the outside it's a big, faceless, scary bureaucracy. The Valley and that ecosystem seems that way to most folks outside it, too. There's serious cash to be had from USG and arguably fewer strings than you g

More ›