kpcyrd

23 ms·

241.
by kpcyrd 10y ago
The demo, yes. The attack, no.
242.
by kpcyrd 10y ago
I've seen other scripts utilizing curls --speed-limit and --continue-at for http to restart the download after the throttling kicks in and resume the download on a new connection. Really nice!
243.
by kpcyrd 10y ago
sha256sum -c <(curl -sS https://hash-archive.org/history/http://openwall.com/signatures/openwall-signatures.asc | sed -nr 's/.*sha256/([a-f0-9]*).*/\1 openwall-signatur
244.
by kpcyrd 10y ago
How is whatsapp not convenient?
245.
by kpcyrd 10y ago
I can't come up with a sane reason why opt-in privacy is acceptable. Signal is handling the issues that may arise without any issues and whatsapp is just hiding complicated errors from it's users per default so they aren't co
246.
by kpcyrd 10y ago
> Chrome really took the ball and ran with it I'm still kind of bitter with the way they did that. A lot of windows installers, which usually installed you toolbars if you forgot to uncheck a box, started installing chrome as your d
247.
by kpcyrd 10y ago
The Impressumpflicht that is applied to websites now, is based on a law from 1530[1] [1]: https://de.wikipedia.org/wiki/Impressumspflicht#Geschichte
248.
by kpcyrd 10y ago
For anybody interested in this, search for initial trust problem.
249.
by kpcyrd 10y ago
I agree that TLS would be nice, but it doesn't hide the fact that you've visited www.ttip-leaks.org
250.
by kpcyrd 10y ago
I really enjoyed reading this, you should add an rss feed to your blog, I couldn't find anything to subscribe to.
251.
by kpcyrd 10y ago
This is why torrents exist.
252.
by kpcyrd 10y ago
I like the "can't download ethernet adapter drivers" limbo I usually get with windows.
253.
by kpcyrd 11y ago
I've noticed bots seem to be quite popular for telegram. Is there any way to provide the same to signal users?
254.
Badlock details have been disclosed(badlock.org)
2 points by kpcyrd 11y ago|0 comments
255.
by kpcyrd 11y ago
debian supports something like this, if you remove the jessie-updates line and only have the release source (which is never changed) and the security source in /etc/apt/sources.list I'm not sure if this is recommended, I
256.
by kpcyrd 11y ago
In other news, the next firefox release is going to have W^X https://www.mozilla.org/en-US/firefox/46.0beta/releasenotes/ http://jandemooij.nl/blog/2015/12/29/wx-jit-c
257.
by kpcyrd 11y ago
I have the feeling that golang is very focused on pulling code from github, but I've had a hard time packaging golang applications. I have succeeded with go-ipfs, which vendors all dependencies and includes them in their release tarbal
258.
by kpcyrd 11y ago
Can somebody change the title to be less clickbaity?
259.
by kpcyrd 11y ago
The jolla store for sailfish has a patched version of signal that doesn't require the google play service.
260.
by kpcyrd 11y ago
jekyll plugins are disabled for a good reason, otherwise you could basically execute anything you want on their server.
261.
by kpcyrd 11y ago
How would you do that without handing over your private keys? Otherwise gitlab couldn't serve your site. Also, as soon as you point an A record of your domain to somebodies server, they're able to get valid certificates through ac
262.
by kpcyrd 11y ago
never run eval on anything, unless you have a very good reason. reminds me of this gem google gave me as a top result once: https://gist.github.com/40/3192269
263.
by kpcyrd 11y ago
> literally security by obscurity You've said that a lot, but there is no obscurity here. Or security. If you actually want to use this for serious spam filtering, you'd discard all emails without a valid + suffix with a whitel
264.
by kpcyrd 11y ago
It's trivial to do this with closed source applications as well.
265.
by kpcyrd 11y ago
tl;dr: pretend to be a bot this looks like a sponsored article
266.
OpenSSL security advisory 2016-03-01(mta.openssl.org)
139 points by kpcyrd 11y ago|11 comments
267.
Mass pwning osx using the sparkle updater vulnerability(evilsocket.net)
2 points by kpcyrd 11y ago|0 comments
268.
by kpcyrd 11y ago
Please read the article, this isn't about google the search engine, it's about google the browser vendor. Firefox nightly is doing the same already by default. I'm always wondering if there's a correlation between the re
269.
by kpcyrd 11y ago
If you use a live CD you're most likely running outdated software unless you burn a new CD for each update.
270.
by kpcyrd 11y ago
Operations once wrote me an email about how to cleanly exploit a xss vulnerability in the application they're using so they can implement their feature without editing the code base.

More ›