krn

86 ms·

781.
by krn 8y ago
The user can just be redirected to another similar looking site with a valid TLS certificate.
782.
by krn 8y ago
What about DNS spoofing[1] at the local network level? [1] https://en.wikipedia.org/wiki/DNS_spoofing
783.
by krn 8y ago
One comment in that thread[1] gives a full explanation of what such a Raspberry Pi device hooked up to the router can do: forward all the network traffic, replace router's stock firmware with its own, install software on the network co
784.
by krn 8y ago
They shouldn't be able to access each other's cookies at the browser's level, but instagram.com might include third-party javascript code from facebook.com, which connects the two accounts in the system.
785.
by krn 8y ago
Haven't you used the same web browser for both, Facebook and Instagram? They might just be sharing cookies.
786.
by krn 8y ago
Mikhail Lesin, Putin's press minister from 1999 to 2004, was found dead in his hotel room in Washington, DC in 2015[1]: > The US government ruled Mikhail Lesin’s death an accident, but multiple intelligence and law enforcement offic
787.
by krn 8y ago
> Yet, with so many obvious giveaways, I find it hard to believe Russia ever wanted to get away with the Skripal poisoning. Russian killings in the UK are nothing new, and there were plenty of evidences in many previous cases. What'
788.
by krn 8y ago
The Web of Death[1] by Buzzfeed lists all the people related to Russia who died in unexpected circumstances on the UK's soil in the last 15 years, together with their personal stories and connections. [1] https://www.buzzfee
789.
by krn 8y ago
Is it that hard to see how a proprietary always-on home assistant is more invasive to privacy than a personal mobile device, which is not supposed to be listening to anything without an explicit permission?
790.
by krn 8y ago
Sure, but this problem is not specific to cell phones. Any IoT device which uses 2G/3G/4G is similarly vulnerable.
791.
by krn 8y ago
> Grouping people together by some vague concept of nationality or ethnicity It's neither nationality, nor ethnicity. I explicitly raised the question of history, and how it forms different values in the society. Why doesn't th
792.
by krn 8y ago
> They’re a closed source, always on device with a microphone. How do you know it’s not always listening? Your iPhone might be closed-source, but Android devices can be compiled from source and fully inspected.
793.
by krn 8y ago
Cell phones, unlike home assistants, are not designed to be recording anything by themselves. Their apps are. And the user controls both, what apps he installs on his device, and what permissions he gives to them.
794.
by krn 8y ago
As a European, I cannot believe that millions of people just across the ocean are putting always-on closed-sourced internet-connected listening devices in the hearts of their homes. Maybe it's the lack of shared history? I highly recom
795.
by krn 8y ago
Sadly, Vivaldi is not an open-source web browser[1]. [1] https://help.vivaldi.com/article/is-vivaldi-open-source/
796.
by krn 8y ago
> I suppose it makes sense as a Mozilla project, but what does it have to do with the browser? Those are my thoughts as well. Mozilla is like Google, and Firefox is like Chrome. If Google had introduced such a service, it would have be c
797.
by krn 8y ago
In other words: OpenJDK is like Fedora, and OracleJDK is like RHEL?
798.
by krn 8y ago
You probably would have been safe, unless you lived in Germany and used CASH26[1], like many N26 users do. In that case, a hacker could have just taken all the money out at the place you frequent using any device. Good luck trying to prove
799.
The Russian Laundromat (2017)(occrp.org)
3 points by krn 8y ago|0 comments
800.
by krn 8y ago
What this article doesn't mention, is that Denmark is facing all these issues now, because Danske Bank's Estonian branch was used to move vast sums of money out of Russia by the people close to Russian government and Vladimir Puti
801.
by krn 8y ago
> As I said, both of these actions are both easily traceable and reversible. Some inconvenience to me certainly but I am covered, and the the thief is most probably in jail. That's only true, if the bank itself was aware of its secu
802.
by krn 8y ago
TLDR: A German security researcher was able to take over any N26 account, even though that theoretically required having an access to customer's email address, phone number, and MasterCard ID. He was then able not only to transfer the
803.
by krn 8y ago
> recaptcha appears to be moving towards a model based on usage heuristics in v3 I always thought that Google has a huge competitive advantage here, because most people browse the web being logged into their Gmail accounts, and, therefor
804.
by krn 8y ago
It sounds like the spammers found a way to automatically create new @zoho.com email accounts, and the single way to stop them might be using a CAPTCHA service from the direct competitor, Google. At least that was the unfortunate case for th
805.
by krn 8y ago
> What is considered a reliable registrar in Europe? I heard a lot of good things about German INWX[1], even though French Gandi[2] is more popular and is the registrar of ycombinator.com (and was the registrar of reddit.com until recent
806.
by krn 8y ago
> For generic Europeans wanting to invest in stock market you don't have much choice. There are couple of archaic and/or dodgy brokers with shitty apps (or no apps at all, just some bad websites built decade ago an never upgrad
807.
by krn 8y ago
Nobody in his right mind should be using N26, if he cares about his account security. It's beyond my mind, how an online-first bank can be built by hiring dozens of software engineers, but not a single security expert, leaving hundreds
808.
by krn 8y ago
Revolut requires a physical address in the EEA for registration, but after that it can be used from anywhere in the world, including worldwide debit card delivery. It has already applied for a banking license in the EU, and is planning to d
809.
by krn 8y ago
> If you're so obsessed about build quality, why don't you buy Apple? > You are basically asking for premium quality from cheap brands. Neither Lenovo ThinkPad, nor DELL Precision are cheap brands. They are marketed as busin
810.
Dr. Servicelove or: How I learned to Stop Worrying and Love the On-Site Warranty(ultrabookreview.com)
21 points by krn 8y ago|13 comments

More ›