kalmi10

29 ms·

91.
by kalmi10 13y ago
"Forward secret HTTPS is now live for Gmail and many other Google HTTPS services(*), like SSL Search, Docs and Google+." http://googleonlinesecurity.blogspot.com.au/2011/11/protecti...
92.
by kalmi10 13y ago
Forward secrecy ensures that even if the private key is compromised at some point, one can't decrypt passively captured traffic.
93.
by kalmi10 13y ago
Sure, but that's an active attack.
94.
by kalmi10 13y ago
I not really an expert in this at all, but we were not discussing ciphers, but key exchange methods. I open google.com in Chrome, click on lockpad icon, go to the second tab, and it says: Key exchange method: ECDHE_ECDSA Some googling turns
95.
by kalmi10 13y ago
An attack like that would also mess up the flow of the data. Me in Europe ------200 ms------- MITM magic --1 ms-- Google For the attacker not to introduce huge extra latency, it would need to complete the handshake with Google almost instan
96.
by kalmi10 13y ago
It's gone.
97.
by kalmi10 13y ago
The linked quora answer (from the co-author of Firesheep) says that even in that case one can't launch a passive man in the middle attack if perfect forward secrecy is used. Google.com uses Diffie–Hellman key exchange which provides pe
98.
by kalmi10 13y ago
My theory is that the slides will eventually turn out to be a hoax, and they are just trying to raise the ppls' privacy-invasion tolerance levels, so that they can actually implement it later on.
99.
Ask HN: Suppose that the PRISM slides are made up. Why does the gov play along?
1 points by kalmi10 13y ago|2 comments
100.
by kalmi10 13y ago
I understand that. The previously linked quora answer (from the co-author of Firesheep) says that even in that case one can't launch a passive man in the middle attack against SSL if perfect forward secrecy is used. Google uses Diffie–
101.
by kalmi10 13y ago
"All they would need for unfettered access to user data is the SSL/TLS private key file used to encrypt traffic." False, one can't passively mitm SSL when perfect-forward-secrecy is used. I just checked, and google seems
102.
by kalmi10 13y ago
Is there a public API for change notification in Dropbox? Last time I checked there isn't one.
103.
by kalmi10 13y ago
It seems someone doesn't want this operation to commence.
104.
Ask HN: Is global ipv6 multicasting actually a reality?
1 points by kalmi10 14y ago|0 comments
105.
by kalmi10 14y ago
OpenDNS still has the site categorized in: Nudity, Pornography
106.
by kalmi10 14y ago
They already do: "I operate a ~10k botnet using a ZeuS software I modified myself, including IRC, DDoS and bitcoin mining (13GH/s - 20GH/s atm)." - reddit IAmA http://www.reddit.com/r/IAmA/comments/sq7cy/iama_a_malware_c... http://news.y
107.
by kalmi10 14y ago
Local Peer Discovery is for LANs
108.
by kalmi10 14y ago
Comment from the linked site: "Linus didn't call his contributor a moron. He called the random person snarking him to make an exception for a 3-line-diff a moron."
109.
by kalmi10 14y ago
Can someone explain how this is possible within the web's standard security model?
110.
Don't use FB to message anyone not a friend of a friend. They won't notice.(facebook.com)
1 points by kalmi10 14y ago|0 comments
111.
by kalmi10 14y ago
SkyDrive supports really awesome collaborative editing of Office file formats in the Office 2010 desktop apps. That got me (and a few friends of mine) to use it instead of Google Docs for collaborative editing of documents.
112.
by kalmi10 15y ago
It is an emulated one....
113.
The Basic AI Drives (pdf paper)(selfawaresystems.files.wordpress.com)
2 points by kalmi10 15y ago|0 comments
114.
by kalmi10 15y ago
uTorrent 3.1 added support for BEP33 (DHT scrape), so apparently the answer is yes. http://bittorrent.org/beps/bep_0033.html
115.
by kalmi10 15y ago
http://cydia.saurik.com/package/com.crashx.unrestrictor3g
116.
by kalmi10 15y ago
In Hungary they are taxing too fatty, too sweet and too salty foods. Oh.. and drinks with high coffeine content. http://www.chew.hu/welcome_to_the_maybe_healthy_a.html Some foods' salty version costing twice as much as the non-salty versi
117.
Would you like to see a Health site on Stack Exchange? Commit to this proposal!(area51.stackexchange.com)
3 points by kalmi10 15y ago|0 comments
118.
by kalmi10 15y ago
Yes, you can.
119.
by kalmi10 15y ago
You can only have in-app payment inside a native iOS app if the payment goes through the appstore, or Apple rejects the app.
120.
by kalmi10 15y ago
and if you don't like Unity, you can still use your old environment by selecting "Classic Ubuntu" on the login screen

More ›