jtaft

13 ms·

61.
by jtaft 5y ago
Oof. I hate to call C a mistake. I hold the language close to my heart; quirks and all. Sure there are safer models for computing. But it has served its purpose for a long time. A small language allowing highly performant programs/oper
62.
by jtaft 5y ago
Hmm I don’t totally agree. I get it probably mitigates risk , but it removes to much of the human element and sense of purpose. I admined game servers and built a couple communities. I made long lasting friends I wouldn’t of met otherwise.
63.
by jtaft 6y ago
According to following, engineers knew this sound would happen during high winds from the west. https://www.theguardian.com/us-news/2020/jun/06/golden-gate-...
64.
by jtaft 6y ago
This is quite false! The mere fact that someone asks how to be a hacker shows they are curious. A true hacker asks a lot of questions. Lots and lots of questions. The longer you hack, the more obscure, interesting, and fascinating the quest
65.
by jtaft 6y ago
What's your stance on the term "cracker"? I was super into reverse engineering and loved the challenge. It seemed at some point "cracker" moved away from someone who can break software protections through reversing
66.
by jtaft 6y ago
From the paper: > On these devices, the bitstream encryption provides authenticity by using an SHA-256 based HMAC and also provides confidentiality by using CBC-AES-256 for encryption > We identified two roots leading to the attacks.
67.
Myst Almost Couldn't Run on CD-ROM [video](youtube.com)
159 points by jtaft 7y ago|64 comments
68.
by jtaft 7y ago
To clarify, do you mean usability as "how easy is it for an end user to perform X?" I feel in general, adding security to a system without security does decrease usability. I think focusing on "relative usability" is imp
69.
by jtaft 7y ago
I've been thinking about security and usability for a while. IMO a big part of use-ability issues are related to interfaces people have to interact with. This is mainly concerning authentication and crypto related processes. I generall
70.
by jtaft 7y ago
Mandrake, Slackware, then Gentoo here. Curious, do you remember when user contributable/rolling package managers became popular? Back in 2000 when I wanted latest software, I remember having to resolve dependencies manually (view compi
71.
by jtaft 7y ago
wow
72.
by jtaft 7y ago
NeoTokyo has an awesome soundtrack too. It's a free HL2 source engine mod. https://www.youtube.com/watch?v=408tWOubRDM
73.
by jtaft 7y ago
Call ahead before you go to a doctor’s office or emergency room. Tell them about your recent travel and your symptoms. https://www.cdc.gov/coronavirus/2019-ncov/faq.html
74.
How Myst Almost Couldn't Run on CD-ROM [video](youtube.com)
3 points by jtaft 7y ago|0 comments
75.
by jtaft 7y ago
All around pretty good article. Never thought about using the pomodor technique while pair programming. The part about "informal hierarchies" threw me off, and comes off a bit sexist and racist to me. I read this as "hierarch
76.
by jtaft 7y ago
I did it to learn about computers and security. It's a form of sport too. Feels good to bend the rules and outsmart your opponent. (Opponent as in security controls, not in-game players). You get a rush when your hack works, and using
77.
by jtaft 7y ago
This is some awesome PR too! Didn't expect them to be a software security consultancy.
78.
by jtaft 7y ago
Interesting, thanks! They moved to /Users/Shared/Relocated Items .
79.
by jtaft 7y ago
This seems to be how many people feel about Lenovo now. Great if it works, but seems to need multiple replacements before getting a properly working system. I just got the Extreme 2, and immediately ran into the keyboard issue. The matte sc
80.
Lenovo Thinkpads Missing Keypresses(forums.lenovo.com)
3 points by jtaft 7y ago|2 comments
81.
by jtaft 7y ago
They didn't touch upon sound events. Arma for instance you hear sound of the the bullet whizzing by or crashing into an object. After, you hear the sound of the bullet actually being fired (as bullets move faster then sound). This real
82.
by jtaft 7y ago
Not related, but my "/backup" folder was removed by Catalina upon upgrading. Of course I backed up "/backup" to an external drive daily, but still...not cool.
83.
by jtaft 7y ago
I think you're both right that the risk is low, assuming it's a build script that is to be run locally by a developer. Code tends to get copied and pasted, and can easily sneak into other programs. Programs are integrated in ways
84.
by jtaft 7y ago
Someone might. It's always better not to introduce such code.
85.
by jtaft 7y ago
The second example is vulnerable to command injection. ./test.sh ls -la
86.
by jtaft 7y ago
Just a guess. Sounds like the global identifier is generated at installation, tied to a license key, or perhaps even a unique file/system fingerprint. When saving/creating a word document, the identifier is embedded in the docum
87.
ShaderToy FX Coding: Twisted Toroid(youtube.com)
1 points by jtaft 7y ago|0 comments
88.
by jtaft 7y ago
It's not polished, but here's a vagrant box which can provision Yubikey's PGP and PIV applications. Additional hardening can be performed. https://github.com/justintaft/yubikey-gpg-piv-provision
89.
by jtaft 7y ago
Normal form posts don't require pre-flight requests. DNS rebinding attacks can be used too.
90.
by jtaft 7y ago
You can side load applications on iOS devices by re-singing it with your developer key. I do this when testing iOS apps for security vulns when source code or jailbreaks are not available. You can even binary patch the application and add n

More ›