micaksica

15 ms·

91.
by micaksica 10y ago
Ease of implementation? Just grab any modern Rails and pick a frontend framework later.
92.
by micaksica 10y ago
TL;DR: A plurality of Tor users are from Western countries with arguably decent judicial frameworks. Those that have life-or-death consequences to network anonymity will need a lot, lot more than the Tor Browser Bundle or Tor itself. >
93.
by micaksica 10y ago
Flagged for being potentially dangerous in its inaccuracy. This post is terrible advice and is BuzzFeed meets infosec in its quality and analysis. Many of these services are unauditable and should not be used for secure communications. Secu
94.
by micaksica 10y ago
> American foreign policy can hardly become more profit-centered and evil than it has been post WWII, but I predict we will see a resurgence of voices critical towards it in the coming years because Trump places no effort in hiding behin
95.
by micaksica 10y ago
EMET has mitigations against stack pivoting.
96.
by micaksica 10y ago
Eh, with that being the case, I don't personally have too much sympathy. +1 to FBI on this being pretty well targeted; you had to have had a successful login for them to be attempting this in the first place. It's about as precise
97.
by micaksica 10y ago
It is basically impossible to fully anonymize a browser as long as JavaScript+plugins are running. EFF's Panopticlick [1] and browserleaks [2] are good at explaining some of these fingerprinting vectors. [1] https://panoptic
98.
by micaksica 10y ago
After thinking about this, I agree with your point, but it's past me being able to edit my original comment to address this issue there. OK, now you have an IP. Now what? You get a warrant and search the place. What do you find? A comp
99.
by micaksica 10y ago
Fine. Replace Tails with Whonix-Workstation and Whonix-Gateway, if you need to worry about leaking the IP address.
100.
by micaksica 10y ago
Unrelated, but kudos on the arbitrary hash use on the Wordpress auto updater last week.
101.
by micaksica 10y ago
> A better solution would be to run javascript in a sandbox (as is done in Chrome/Chromium based browser) which has a much higher barrier to exit. Sure, but we can't get TBB rewritten overnight to work instantly with Chromium,
102.
by micaksica 10y ago
The VM can go "full screen" and lock the height/width in X, then.
103.
by micaksica 10y ago
What's their threat model, then? If you're going to be actively targeted by exploits like this, then you shouldn't give a damn about some of these tradeoffs. If you have journalists/activists willing to go to information
104.
by micaksica 10y ago
Working within an assumed breach scenario, the VM is defense in depth. Firefox has holes, and it will continue to be relatively easily exploitable as long as TBB allows for plugins and JavaScript by default. There is reticence from TBB team
105.
by micaksica 10y ago
What's their biggest struggle with it? PS, if you're ever on the US West Coast or in Singapore, drop me a DM. I'll buy you a drink someplace.
106.
by micaksica 10y ago
This likely points to this being an FBI "network investigative technique".* I'm really curious where this attack was injected, as that also means that that .onion is also compromised. My guess? Some darknet market. * Sure, th
107.
by micaksica 10y ago
If TBB leads want to run Firefox with JavaScript "default on", then Tor Browser Bundle needs to be messaged as insecure. Either that or turn on NoScript and inform people what bad shit can happen when their browser is interpreting
108.
by micaksica 10y ago
I agree with your statement, however, running Linux as a desktop OS is definitely not that bad anymore.
109.
by micaksica 10y ago
It's not that bad once you have it set up. PaX causes most issues. You run a custom repo with two packages, your compiled linux-grsec kernel, and a package that contains paxd and paxd exceptions for your typical binaries. Once you find
110.
by micaksica 10y ago
As far as software development is concerned, all you really need to know is C/C++, a little assembly to get by in gdb, and -nix system calls. Pick an abstraction layer on top of that if you feel it helps you , but don't feel li
111.
by micaksica 10y ago
> We don't know how much damage Comey's actions in particular did to Hillary's candidacy but there is no doubt that the email scandal damaged her prospects tremendously. I don't understand what logic there is in blami
112.
by micaksica 10y ago
> “All bets are off when you get really small,” Strano says. “It’s really an unexplored space.” I'm going to assume that this pun was intentional by Strano, and sadly I think it's gone past everyone who's in awe of the act
113.
by micaksica 10y ago
For the record, on the front page of HN right now: https://cpbotha.net/2016/11/27/android-security-in-2016-is-a...
114.
by micaksica 10y ago
> Agreed. But I would be hesitant to use the word capitalism. It is too broad. You're right, and the better term would be something along the lines of "the American capitalist system", or "the American economic system
115.
by micaksica 10y ago
That's not my point at all. My point is that the crosshair is incorrectly aimed: it is not an industry that is failing at this, it is the way our social structure is formed and rewarded that is failing. Technological progress may be an
116.
by micaksica 10y ago
A capitalist economy is an "empathy vacuum". This is just more vilification of Silicon Valley in the midst of the post-Trump election, where coastal residents are mad "fake news" and social media organized "flyover&
117.
by micaksica 10y ago
[redacted, posted to wrong Theranos-related thread]
118.
by micaksica 10y ago
I happen to be watching this right now, only to find this on the HN front page. The Organization is watching me!
119.
by micaksica 10y ago
What I love the most about this is that journalists write obituaries long before a significant figure actually dies to get on top of it ASAP.
120.
by micaksica 10y ago
Yes. That is the only rational thing to do.

More ›