kerng

54 ms·

571.
by kerng 6y ago
SSH Agent Hijacking comes to mind. Technically not the same, but outcome of self propagating malware is same.
572.
by kerng 6y ago
The modern version is tags, but they lack good sorting/viewing for tags
573.
AMP pages will now show original URL in Chrome's address bar (2019)(androidpolice.com)
2 points by kerng 6y ago|1 comments
574.
U.S. lawmakers ask Zoom to clarify China ties after it suspends accounts(reuters.com)
5 points by kerng 6y ago|0 comments
575.
FCC failed to monitor Chinese telecoms for almost 20 years: Senate report(arstechnica.com)
3 points by kerng 6y ago|0 comments
576.
by kerng 6y ago
Probably an operational issue, like an expired internal certificate I'd imagine. Very curious to see the post morten and root cause analysis.
577.
by kerng 6y ago
Seems like IBM (patent owned by CISCO now) is officially responsible for inventing SQL injection! There is not mitigation to SQL Injection attack in the patent - didn't read it all word by wors but skimmed it through.
578.
by kerng 6y ago
Friend told me that in Seattle they lifted the curfew, just dropped it. Since then protests are 24/7, but also peaceful - before it always escalated and got violent past curfew.
579.
by kerng 6y ago
Using Google products really becomes a big liability for businesses. Articles like this have become quite frequent over the last year.
580.
by kerng 6y ago
It makes perfect sense that the government gets all the cleartext passwords forwarded. People reuse passwords, so its likely that WeChat passwords allow access to other systems (like Facebook, Twitter, Alibaba, Amazon,...) This attack angle
581.
by kerng 6y ago
I uninstalled WeChat a bit over a year ago. It was quite sad, because it meant I couldn't easily chat with friends in China anymore. A few months later I also uninstalled all Facebook related apps from my phone.
582.
by kerng 6y ago
Because it inconveniences and reaches people that otherwise are not impacted or avoid getting involved. Documentation is still available on Github - so really just a very little minor inconvenience.
583.
by kerng 6y ago
Article discusses Hacker in the broader context, not limited to security.
584.
by kerng 6y ago
They seem to get quite popular, also reaching out to folks i know to hire recently. I was always confused by the name... who thinks Brex is a good choice? I mean Brexit was already a big thing in 2017.
585.
by kerng 6y ago
Oh, man.. I start doubting my senses. Thanks.
586.
by kerng 6y ago
Not sure of I missed it, but what product did they use before?
587.
by kerng 6y ago
Good point, despite all the Mars hype I think primary focus is going to be satellites that carry new kind of weapons and surveillance infrastructure, and establishing a basecamp on moon first.
588.
by kerng 6y ago
Wondering if someone will take legal action. Port scanning still is legally a grey area in many jurisdictions.
589.
by kerng 6y ago
I think one of the main priorities is military supremacy. It might not appear as that from a bit away, but that should not be overlooked. NASA's boss really highlighted some of that indirectly today as well with the increased funding t
590.
by kerng 6y ago
This thing should have blown up somewhere during launch, not while parked basically. People not happy.
591.
by kerng 6y ago
Yeah, but if you dont want it to explode and it does - it's not a good thing. Destructive testing is something different, like the mission abort test they did a while ago.
592.
by kerng 6y ago
Not a microservices guru, but why are big companies (most famously Uber, who was sort of spearheading it famously) starting to abandon this architecture?
593.
by kerng 6y ago
In certain areas contractors earn good money, at times more then FTE. Like $300+ an hour and much higher. With that pay comes the risk of a less strong connection to the company. Which is expected and wanted by many contractors. Of course,
594.
by kerng 6y ago
I think you statements about Taiwan are not accurate anymore - definitely not since recent elections, but even before that.
595.
by kerng 6y ago
Not any less meaningful then your comment. You aren't arguing anything, you are only stating a very shaky premise.
596.
by kerng 6y ago
This is why I like languages where you just can't have a free function! I'm arguing the opposite, free functions are an annoying and confusing anti-pattern when dealing with OO languages that allow them. C++ is often just a maze o
597.
by kerng 6y ago
That's a good point, but if I understand correctly Hackerone staff has to triage bugs before a company is even responding or required to look at it? So it's all offloaded, or is that incorrect?
598.
by kerng 6y ago
Large, well known companies (startups especially) often don't encrypt nor authenticate internal prod traffic - I always wonder how they pass compliance checks. Google with their BeyondCorp stuff really mislead a lot of startup shops an
599.
by kerng 6y ago
As company you should do bug bounty but in addition, not as replacement of doing your own testing. The reason: Bug bounty is fundamentally favoring the companies that sign up. They pay next to nothing for getting a lot of eyes on their site
600.
by kerng 6y ago
Mozilla just recently changed their program to divide bounty amongst submissions of same vuln within 3 days. Not a perfect fix, but I think it helps.

More ›