keyme

22 ms·

181.
by keyme 10y ago
I don't know. I can imagine you saying the same thing about the case in OPs article. The attack was targeted. The attacker knew your name, phone number and email address. The attacker went through some real effort to hack you (SEing re
182.
by keyme 10y ago
This doesn't even take into account how inherently insecure are actual mobile networks. Human factor notwithstanding. Using GSM? Your recovery code is sent essentially plaintext over the air. Think you're not using GSM? I'll
183.
by keyme 10y ago
No, they don't have redundancies for satellites. It's 2 to 3 years.
184.
by keyme 10y ago
How do the people working for Citizen Lab / lookout justify to themselves blowing active operations by countless police forces around the world? Ops like Mexico vs Cartels? Also, since when is selling weapons to governments unethical?
185.
by keyme 10y ago
The full URL contains much more than just the host. Open fiddler, log in to a Google account, see how much sensitive data is sent inside URL params. All of this data is disclosed in this attack.
186.
by keyme 10y ago
The rest of it is covered by my second argument. They don't want you to see it due to highly proprietary stuff running there. And if you agree about code signing, do you really believe that letting everyone see it, but then not allow a
187.
by keyme 10y ago
Good question. Why don't phones have physical switches on GPS and microphones? In this case, the RSA sig is still better, though. Imagine that anyone sitting between the Intel plant and your local computer parts supplier could flip the
188.
by keyme 10y ago
As stated in the article, some researchers have managed to unpack it, and it can now be dissembled. You can't (and hpefully won't) be able to execute your own code there. There are 2 good reasons for this: 1) As per the article, t
189.
by keyme 10y ago
So can "specially crafted" gravity waves converge into a point of negative mass?
190.
by keyme 10y ago
You'll get to know a bunch of small ones if you want them to accept bitcoin. Currently I use one named vultr.
191.
by keyme 10y ago
This all depends on who you consider your adversaries to be. I've been using a VPS as a gateway to the internet for the last 2-3 years (switching providers a few times during this period). What I gain: 1) I pay bitcoin, and don't
192.
by keyme 10y ago
Walls are transparent to FM (~100MHz) radio, so you won't see anything. WiFi is closer. High microwave is probably what you want here. And of course, this already exists. It's called radar. Haven't seen any radar "photos
193.
by keyme 11y ago
They were probably mainly tracking activity, and not decoding single feeds as much. This metadata is probably enough to provide adequate intelligence, given obvious US interests in the region. Other than that, I'd wager that this does
194.
by keyme 11y ago
I use https://didlogic.com/ , but they don't accept bitcoin. Some others do. You'll have to test a few, since sometimes the numbers are re-used and thus banned in the top few services (like Google).
195.
by keyme 11y ago
A signature is good in this use case: 1) You have a public key you trust. 2) You get a message + hash + signature. You want to verify. What we had here is: 1) There is a DNS record with a signature value only. 2) You send the public key + t
196.
by keyme 11y ago
Easy to bypass tho. I just use a call forwarding service, that lets me have a DID number in any country, and FW the calls to SIP. This fails with SMS, but works with voice call verifications (which are usually an option). Costs a few bucks
197.
by keyme 11y ago
1) The only TLS connections that are let through are all MITM'd. 2) Every other TCP/UDP flow is checked for conformance with plain-text protocols (like HTTP), or far worse, simply for the level of entropy in the data. 3) A threat
198.
by keyme 11y ago
I'm sure this will work brilliantly, considering that no one who needs your money there has a bank account or credit card. Cash also won't work due to the tiny problem of all the warlords and corrupt government/police/mi
199.
by keyme 11y ago
And the guy says he's Polish. I guess we're at a point now where todays 25 year-olds have never seen what socialism can deteriorate into.
200.
by keyme 12y ago
And the back button is broken as a result.
201.
by keyme 12y ago
You had to have been very naive for these revelations to be so shocking to you. You use Google for email? Don't be surprised that someone else is reading it. You have willingly and continuously divulged your personal data to an unknown
202.
by keyme 12y ago
Why? Is it because in your sheltered view of reality all religions are reformed, and everyone is just longing to live by the values you believe in? Please. Just as smaller cults that are considered to be dangerous. The freedom of religions
203.
by keyme 12y ago
Interception is one thing, but I'm pretty sure that covertly interfering with the link (injecting data both ways, for a long-ish time) would be pretty interesting... Yes, it could be encrypted using low-latency HW implementations. Howe
204.
by keyme 12y ago
It's a matter of trust. You do trust Intel corp to not place an RF transmitter inside your CPU, right?
205.
by keyme 12y ago
> "The problem is that this method disproportionately hurts people who don't have the time or energy to effectively hold two jobs" No it doesn't. I'm a guy who has the "two jobs" by your description. Mo
206.
by keyme 12y ago
They did occur, but yes, at a very low rate. The rate will increase once the people with guns realize the benefit of such attacks. This is not the case now, but it will be the case if the price continues to rise. Imagine that 2 court orders
207.
by keyme 12y ago
Yep, obviously the incentive system of bitcoin is deeply flawed. It's interesting to see that the market price is completely decoupled from such problems coming into public attention... I'm holding on to my stash for now, but unle
208.
by keyme 12y ago
Not unless a software patch on the phone introduces significant random variances into the RTT. But yeah, there will be no pretty way to make the network "think" you are actually near another far away tower. I bet, however, that th
209.
by keyme 12y ago
I don't know the level of difficulty involved in the former, but "spoofing" cell data is possible by making the phone connect to sub-optimal towers. This would cost you service quality and battery life, but you'd "a
210.
by keyme 12y ago
More like blaming lack of policing for crime...

More ›