madars

30 ms·

361.
by madars 5y ago
Similar for dnscrypt-proxy: add "forwarding_rules = '/etc/dnscrypt-proxy/forwarding_rules.txt'" to /etc/dnscrypt-proxy/dnscrypt-proxy.toml and then populate the forwarding_rules.txt with lin
362.
by madars 5y ago
Qrator Labs report: https://blog.qrator.net/en/meris-botnet-climbing-to-the-reco...
363.
New Mēris botnet breaks DDoS record with 21.8M RPS attack(cyber-reports.com)
1 points by madars 5y ago|1 comments
364.
by madars 5y ago
You need to have karma above a certain threshold. It used to be > 500 (not sure what it currently is) https://github.com/minimaxir/hacker-news-undocumented#downvo...
365.
by madars 5y ago
Study itself: https://journals.plos.org/plosone/article?id=10.1371/journal... (open-access article). Sci-Hub for posterity: https://sci-hub.ru/10.1371/journal.pone.0098246
366.
by madars 5y ago
Yep. "The authors don't use TeX" is also sign #1 on Scott Aaronson's "Ten Signs a Claimed Mathematical Breakthrough is Wrong" https://www.scottaaronson.com/blog/?p=304 > This simple tes
367.
by madars 5y ago
I think there is a distinction we can make here. What sets anti-debugging apart is not denying something -- after all, the point of cryptography is to make things impossible for adversaries -- but whom does it serve. In the case of anti-deb
368.
by madars 5y ago
The main thing I'm missing with podman is gVisor support https://github.com/google/gvisor/issues/311 . Would be happy to switch once that is available!
369.
by madars 5y ago
Archive: https://archive.is/8z5lM
370.
Amazon is close to launching its own TV in the US(businessinsider.com)
3 points by madars 5y ago|2 comments
371.
Japan launches Digital Agency to push ahead with long-overdue reforms(japantimes.co.jp)
2 points by madars 5y ago|0 comments
372.
by madars 5y ago
Regarding WebRTC-type leaks probably the best answer on Linux is to have a separate network namespace with only wg0 inside of it and then run your browser in the network namespace. Then the browser does not get to "see" the real e
373.
by madars 5y ago
And, notably, before Apple's announcement that they will incorporate some of their child safety features in macOS Monterey. No NeuralHash/CSAM scanning just yet though https://www.apple.com/child-safety/
374.
by madars 5y ago
You might be getting bitten by Linux having two clipboards https://codeyarns.com/tech/2017-01-18-the-two-clipboards-in-... . If you use a clipboard manager (e.g. gpaste or parcellite) they can be configured to synchron
375.
Chelsea Manning is back and hacking again(forbes.com)
2 points by madars 5y ago|0 comments
376.
by madars 5y ago
And the great thing is you don't even need Razer device to exploit this! You can just any Linux device, e.g. a phone running LineageOS as in this PoC https://twitter.com/an0n_r0/status/1429386474902917124 ht
377.
by madars 5y ago
Then that's not TOTP https://datatracker.ietf.org/doc/html/rfc6238 but something different. Do you know how it is called and which products support it? I'd love to read up about it!
378.
by madars 5y ago
Codes from those apps are typically TOTP: a deterministic output given a shared secret (e.g. from QR-code during the setup procedure) and current time interval, e.g. HMAC(shared-secret, time-interval) mod 10^6. This does not embed the domai
379.
by madars 5y ago
How? TOTP does not embed the domain, as it is generated on a separate device which does not communicate with your browser, and does not know the target domain. TOTP is literally HMAC(shared-secret, time-interval) mapped to a short range (e.
380.
by madars 5y ago
> I want to start by pointing out I use two-factor authentication just about everywhere and Facebook is not an exception. I wish he'd mention what kind of 2FA. The reason you _really_ should use U2F/WebAuthn is because it does
381.
by madars 5y ago
Magma should do it ( http://magma.maths.usyd.edu.au/magma/handbook/text/970 claims a Alan Steel's non-commutative generalization of Faugère F4 and noncommutative Buchberger algorithm) and US institutions
382.
by madars 5y ago
Untouched MSDN images have their hashes published online (not without subscription anymore but people have made mirrors).
383.
by madars 5y ago
So glad there are KMS emulators like py-kms or vlmscd that are open-source and work offline (though there is still pinging home which "Turn off KMS Client Online AVS Validation" group policy setting should disable).
384.
by madars 5y ago
Yep, the program referenced in the blogpost https://github.com/briandfoy/excellent_numbers/blob/master/c... is using GMP's variable-width numbers (mpz_* routines). If you know bit lengths in advance
385.
Location-based apps pose security risk for Holy See(pillarcatholic.com)
1 points by madars 5y ago|1 comments
386.
by madars 5y ago
cperciva's comment there also generalizes to cryptographic protocols which sometimes require batch inversion (i.e. given a1, ..., an \in F, find out all a1^{-1}, ..., an^{-1}; e.g. when converting a bunch of EC points from projective t
387.
by madars 5y ago
Practicing Catholic here. To add a reference about vows of celibacy: the minor (but notable!) exception are priests in Anglican Ordinariate who were validly married before their Catholic ordination. https://www.vatican.va/ro
388.
Concerns raised about using surveillance technology to track clergy(catholicnewsagency.com)
3 points by madars 5y ago|0 comments
389.
Nym gets $6M for its anonymous overlay mixnet to sell privacy as a service(techcrunch.com)
1 points by madars 5y ago|0 comments
390.
by madars 5y ago
> On any other phone, expect branding, pre-installed bloatware apps, modified startup and shutdown screens, modified top-bar to show "5G" on presence of a 4G network, and 6+ month delays to security updates while they get the a

More ›