kerng

20 ms·

181.
by kerng 5y ago
Bitcoin isn't a security, so why should a Bitcoin lending platform be one? Assuming that rewards are in Bitcoin and not dollars.
182.
by kerng 5y ago
The premise and conclusion of the post is strange because it seems to say Web3 is extremely awesome, and therefore should become default in browers, rather then having to deal with extension!?!? Or did I get this wrong? Brave already integ
183.
by kerng 5y ago
A statement like this makes you wonder if the NSA actually already possesses this capability...
184.
by kerng 5y ago
Strange that they do this delay so late... the damage is already done, so why bother now? Apple's leadership must be quite confused.
185.
by kerng 5y ago
I'm sure even Nat Friedman saw github1s because it was high up on HN and he frequents the site. When I saw github1s on HN a while ago I thought Githuh should just hire whoever built that. Difficult to argue if it was a plain rip-off or
186.
by kerng 5y ago
I think Crowdcast is what you are looking for.
187.
by kerng 5y ago
It doesnt sound like a breach (in the legal sense) occured, at least with the knowledge at hand. Microsoft has bug bounty programs, so such hacking is legally covered and processes seem to have been followed (e.g. researcher didn't un
188.
by kerng 5y ago
Yeah, 48 hours doesn't seem too fast - but better then multiple months as with Exchange
189.
by kerng 5y ago
I think payouts are defined in bug bounty programs upfront, so there are naturally upper bounds.
190.
by kerng 5y ago
This sounds like no basic pen testing was performed - quite surprised Microsoft isn't doing that. Seems like their resources (billions in cash) aren't allocated correctly.
191.
by kerng 5y ago
How? I have limited data and pay $65? Part of a larger family plan?
192.
Microsoft commits to spend $20B to cybersecurity over five years(finance.yahoo.com)
9 points by kerng 5y ago|0 comments
193.
by kerng 5y ago
Seems related: Microsoft just said they'll put in $20 billion. https://finance.yahoo.com/news/microsoft-commits-to-spend-20...
194.
by kerng 5y ago
Why couldn't others with lots of traffic use a similar approach? I assume they do. Seems pretty genius idea to batch things like that, especially when qps is very high batching (maybe waiting for a few ms to fill a batch) makes a lot
195.
by kerng 5y ago
At a very very high level yes - but the reason you want to use tokens is that you get a second factor and you have better entropy and created tokens are time based (password is valid forever).
196.
by kerng 5y ago
At high level imagine it like this: The browser will only give access to the Yubikey token for a specific domain name - so if the attacker phishes for examle.org, rather then example.org, then there is just no tokens (signing keys) availabl
197.
by kerng 5y ago
That's a fair point. Funny how without these efforts the web and technologies pretty much the entire world used over the last two decades would probably have been very, very different - I'm not judging better or worse. In fact Mic
198.
by kerng 5y ago
That's how most of the world does it and it works fine. And for businesses it can be just as is. Its the insane burden and waste of time for the average person that is the problem. Imagine how much more productive the entirety of the U
199.
by kerng 5y ago
My understanding is that its it's about the code path for installation of drivers that is being exploited. In order for people to print to printers not seen before, Windows downloads and installs the driver automatically from a remote
200.
by kerng 5y ago
Such a strange view. For the people that grew up and live there these changes are terrible - in every objective and measurable way. It's so bad that those that can are trying to leave...
201.
by kerng 5y ago
That is one product. The benefit is related to growth and related taxation (but might depend on the country you are in).
202.
by kerng 5y ago
I find the Copilot and AI discussions quite interesting. On the one side its indeed problematic that Microsoft (and others in the industry in general) hardly ever ask for permission for data to train models. On the other side, if you consid
203.
by kerng 5y ago
What the post fails to highlight is what causes problems or why is it an issue? E.g. it sounds like people died because of it? Why? I'm not sure I follow - isnt it a good thing that the emblem is widely recognized and used, so everyone
204.
by kerng 5y ago
Comments like this make me wonder how misunderstood a lot of the crypto space is and how little many know about it. It's very normal in finance to call financial offerings, lending, loans, etc. products. Some DeFi products offer nice r
205.
by kerng 5y ago
Details for anyone interested: https://www.cnbc.com/2021/07/07/visa-says-crypto-linked-card...
206.
by kerng 5y ago
Regulation makes sense, as it will allow it to become mainstream. Also a lot more clarification and guidelines needed around taxation with DeFi and related products - government really has to do tremendous catch up.
207.
by kerng 5y ago
Visa just surpassed $1 billion in transaction value with their crypto related cards last quarter. Things are slowly picking up steam.
208.
by kerng 5y ago
This is to the point - cash bonus can compensate this somewhwat. And cash bonus typically doesnt have to be paid back in case of layoff.
209.
by kerng 5y ago
The whole crypto is bad, reminds me of the crypto wars where governments to this day try to outlaw encryption technology because bad guys can use it also. You know ransomware encrypts data to make it inaccessible - we should ban encryption
210.
by kerng 5y ago
No, most big companies don't have cliffs anymore (Google, Facebook, etc...). They pay out monthly or quaterly. At least if you already worked for a while elsewhere (because they have to buy you out basically). Why would you otherwise t

More ›