lima

75 ms·

811.
by lima 7y ago
There's NextEPC: https://github.com/nextepc/nextepc Fake base station attacks do not work with 4G/5G, but a downgrade attack to 2G might still be possible.
812.
by lima 7y ago
I worked for a European domain registrar a few years ago. An obviously malicious site like "whatsappdownload.site" would be taken offline very quickly, but under no circumstances could we give non-public subscriber information to
813.
by lima 7y ago
Internal TPM is more secure for attestation. You can MitM the LPC bus with an external TPM, faking PCRs.
814.
by lima 7y ago
Available data points to it being more dangerous than the flu, especially to the elderly and immunocompromised. Your doctor might have been talking about the danger to you in particular, which is very low, similar to the flu, if you'
815.
by lima 7y ago
Go also cleanly separates results and errors. syscall.ForkExec returns an error if the call failed.
816.
by lima 7y ago
This does not apply to N95+ masks with exhalation valves, which is most of them.
817.
by lima 7y ago
I agree with you that it's a good defense in depth measure for exactly the reasons you describe.
818.
by lima 7y ago
They did in fact encourage him to learn and even pointed him to various entry-level resources and mailing lists.
819.
by lima 7y ago
Yes, but that is because TOTP is user-hostile. The solution is to migrate to a more secure and less hostile mechanism, not to compromise on security.
820.
by lima 7y ago
The best available solution is to implement WebAuthn support and allow users to add multiple devices. No backup code, no phishing.
821.
by lima 7y ago
> It is incorrect to say that they "are a gimmick and offer negligible value". I'm well aware of how the mechanism works. If the host OS or the app is compromised, it won't help - the attacker can just steal the codes
822.
by lima 7y ago
Strongly disagree with the premise of this article: - Passcode or biometric locks on an app are a gimmick and offer negligible value. - The keys not being backed up or or synchronised across devices is not a bug, but a feature. You're
823.
by lima 7y ago
It can take hours to pinpoint the location of a specific transmitter with skilled equipment operators.
824.
by lima 7y ago
I'm an ham radio operator, and shortwave spectrum pollution is sadly a big problem despite very strict regulations. The unfortunate reality is that the market is flooded with noisy devices, often cheaply produces overseas, that vastly
825.
by lima 7y ago
Not a given if said USB charger is cheaply produced in China.
826.
by lima 7y ago
There's tons of security researchers focusing on iOS and the lack of source code access is merely an inconvenience.
827.
by lima 7y ago
Actual headphones, yes - many of them have an analog jack. But I haven't ever seen a bluetooth headset that support analog audio.
828.
by lima 7y ago
Replace it for enterprise customers. https://support.google.com/a/answer/9291305?hl=en&ref_topic=... https://9to5google.com/2019/08/21/google-delays-hangouts-dea... There will b
829.
by lima 7y ago
> Google's suite of connected office apps functions quite well, but the company doesn't really have an agreed-upon chat app, and it's hard to overstate the usefulness of a casual, watercooler-like chat app to let colleagu
830.
by lima 7y ago
Right, but this is a small minority of applications.
831.
by lima 7y ago
It sure is. This is why Chrome apps and progressive web apps are great - they share the Chrome runtime and inherit its hardening, security properties and updates. Many Electron apps should just be a PWA instead, and many actually are. Why w
832.
by lima 7y ago
https://en.wikipedia.org/wiki/Goodhart%27s_law
833.
by lima 7y ago
I've even seen 100+ Gbps from a single ASN in a single country.
834.
by lima 7y ago
As someone who used to work for a company that hosted large-scale gaming infrastructure, I can confirm that Choopa was a common source of DDoS. DigitalOcean, too, and lots of eyeball providers. Any provider who allows credit card payments h
835.
by lima 7y ago
Single window works fine with Chrome, too, the only feature missing is single screen.
836.
by lima 7y ago
Sharing a single window does not work on X11 either via Chrome screen capture, though. We have resorted to custom tooling that uses VNC via the company VPN, which works decently with better quality.
837.
by lima 7y ago
DO is also commonly blacklisted for being slow to deal with network abuse. I used to build a DDoS mitigation product and we would regularly see 50+ Gbps of inbound attacks originating from DO.
838.
by lima 7y ago
Only if each device has a unique subdomain.
839.
by lima 7y ago
How did security get worse?
840.
by lima 7y ago
The attacker would just dump the individual router's key instead and use the remote signer as a signing oracle to impersonate devices.

More ›