Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
miw-sec-work
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
4 ms
·
1.
▲
by
miw-sec-work
13y ago
This doesn't make sense -- from Feb 11th 2014 ebay will be allowing Virtual Currency to be sold in its own category. This is eBay policy, so papal will have to fall in line.
2.
▲
by
miw-sec-work
14y ago
If this isn't a good enough reason to GET THE HELL OFF FACEBOOK then you wont be convinced otherwise. GET THE HELL OFF FACEBOOK!
3.
▲
by
miw-sec-work
14y ago
More to it than that... lets say you exploit that bug in the internet banking application and you access my account. Then you start logging into other peoples accounts and copying their address, balance, transaction lists. Then you publish
4.
▲
by
miw-sec-work
14y ago
Responsible disclosure to the vendor is one thing. Taking the fruits of your exploits and publishing it for glory and a "I leaked all that information because you wouldn't fix it" attitude is quite another. I would hope that if you discover
5.
▲
by
miw-sec-work
14y ago
i think the semantics in the method in which weev retrieved this data is far overruled by the fact he LEAKED it afterward. Real people were hurt here by having their PII exposed. Don't forget that.
6.
▲
by
miw-sec-work
14y ago
weev still thinks that AT&T 'published' this information. AT&T had no intention on 'publishing' this information, he abused their system in order to obtain it, then he leaked it. No weev, you found a bug in their web app, then _YOU_
7.
▲
by
miw-sec-work
14y ago
Also, "Aarons law" was raised 1 year ago by the same Congressperson under a different name. This is nothing but personal political quests using our martyr for justification. I'm insulted.
8.
▲
by
miw-sec-work
14y ago
A better AArons law would be to force publicly funded research be released freely and under a Creative Commons license. They did this in EU, why not the US? Weakening the Computer Fraud laws, and naming it after Aaron trivializes his quest
9.
▲
by
miw-sec-work
14y ago
Graphical 'signatures' cannot be legally binding as they are trivial to forge. I also don't understand this retrograde step. I will repeat it. It is trivial to COPY and FORGE a graphical signature! And from a cloud provider?? What about S/M