moxie

41 ms·

331.
by moxie 14y ago
I think this is the hardest part. Ortiz is obviously disgusting, but she's not really different than anyone else in her position. These kinds of tactics are employed every day. So what do we do? I support the demonization of Ortiz purely
332.
by moxie 14y ago
Google has two primary points of control over Android: Anti-Fragmentation Agreements (AFAs) and "Google Experience" apps. While something like Tizen might alleviate an OEM of the former restriction (at great cost), I don't think it helps th
333.
by moxie 14y ago
Because OEMs like Samsung have done such an incredible job modifying and skinning Android that I'm sure we can expect great things when they're responsible for the entire experience from the ground up?
334.
Career Advice For Young People(thoughtcrime.org)
52 points by moxie 14y ago|5 comments
335.
by moxie 14y ago
If you host a website and are worried about these types of attacks against your users, there are a couple of fairly straightforward things you can do to strengthen your position: 1) There is no reason that your mobile apps need to use the p
336.
Security Advisory 2798897 released, Certificate Trust List updated(blogs.technet.com)
5 points by moxie 14y ago|0 comments
337.
by moxie 14y ago
I need to be able to define consistent labels and colors for machines across multiple graphs. So a machine named 'uk' is always displayed 'London' in dark green, consistently across all graphs.
338.
by moxie 14y ago
This looks great. I use a modified version of gdash, but always wish that the graphs were rendered in D3 instead. At first glance, it seems like the configuration could be a little more expressive for some common use cases. For instance,
339.
by moxie 14y ago
"Darling also possesses some hope as the project is being worked on for a diploma thesis research project by a university student..." I would draw the exact opposite conclusion.
340.
by moxie 14y ago
This is a story that hasn't shown itself to have legs, I think largely in part because both political parties are fully complicit, so neither are interested in driving the narrative. So the problem is, what does it mean for the public in ge
341.
by moxie 14y ago
I think the quotes you've selected are probably some of the most uninteresting quotes in the whole piece. They certainly don't seem like "the story" to me. I read it as a story about someone who had a passion to build something that was un
342.
by moxie 14y ago
He said he intended to crowdsource his retirement. That's really no different than what every HN-inspired startup-jockey is doing. Plenty of people have incredibly inane or uninspiring startups that end up bringing in enough money to retir
343.
by moxie 14y ago
What shocks me is the opposite -- that Gittip is only just now thinking about this. Their first round of chargebacks are going to be insane, and if they're this far behind they're going to be eaten alive by fraud.
344.
by moxie 14y ago
Well, I dunno. I had 200(+) friends in the late 90's. There were a group of 10 people that I hung out with literally every day, and I'd see the rest at events which I mostly found out about through fliers that we'd make and pass to each-o
345.
by moxie 14y ago
The problem with wanting not-facebook is that we don't really have a choice anymore. The social systems that were in place before facebook and mobile devices became so prevalent have all been destroyed, so there's no going back to the way
346.
by moxie 14y ago
Yep, it also has benefits to the site. AGL is quite generous with his time in terms of accepting static pin requests, but it can become a difficult situation for large website operators. It's a little nerve-wracking to know that the faste
347.
by moxie 14y ago
I conceptualize Convergence as providing trust agility for situations where a client needs third party verification. TACK is about reducing the number of situations where we even need to trust a third party at all. The latter helps the for
348.
by moxie 14y ago
Trevor Perrin and I are actually making some encouraging progress with TACK, which is a less controversial proposal with fewer moving parts. It's for dynamic certificate pinning rather than a full CA replacement, but we feel that it takes
349.
by moxie 14y ago
Oh thanks, I think that FAQ is exactly what I was looking for. I realize we might not be your target audience, but it seems like it'd be worth including those impact analysis statements in the paper itself, since they're short and do reall
350.
by moxie 14y ago
I agree that these APIs are fundamentally difficult to use correctly (sometimes it almost seems as if they've been designed to trick you), and that developers commonly get them wrong, but this paper is perhaps a little more inflammatory tha
351.
by moxie 14y ago
Yes, although they seem to have much better marketing this time around (a good thing).
352.
by moxie 14y ago
I don't think it's worth emphasizing the confidentiality aspects of Tor's "link layer" protocol, given that users really shouldn't conceptualize Tor as something which provides confidentiality for their traffic. Or as the Tor project says,
353.
by moxie 14y ago
Tor is like Tor for mobile phones (checkout Orbot). =) These applications have more emphasis on confidentiality than on anonymity. The type of "onion routing" that Tor employs for anonymity is very difficult/impossible to pull off for appl
354.
by moxie 14y ago
You might check out RedPhone and TextSecure (I'm one of the developers). They're in the Play Store and on GitHub.
355.
by moxie 14y ago
For the voice app, it uses ZRTP. Basically, the initiator and responder perform an ephemeral DH key agreement. Both clients then independently generate a "short authentication string" (basically just two English words) from the shared secr
356.
by moxie 14y ago
The secure voice app is ZRTP (they are just using an existing open source ZRTP library). The ZRTP protocol is now an RFC: http://tools.ietf.org/html/rfc6189 The secure chat protocol they're using is something they developed and haven't y
357.
Cheaper MS-CHAPv2 Cracking(cloudcracker.com)
34 points by moxie 14y ago|7 comments
358.
by moxie 14y ago
I think that's totally on the right track, but if people start to do that, chances are that they'll start to create exploitable patterns again (maybe they already exist, I don't even really keep track of how my password cracking dictionarie
359.
by moxie 14y ago
I think you nailed it: school isn't optimized for creativity, it's optimized for creating workers. But I don't think that just applies to the factories of the 19th century. The highest institutional rewards are given to the students who mo
360.
by moxie 14y ago
I run cloudcracker.com, which would have gotten this pretty quickly. If you look at public password compromises, the components of this password "900", "gage", and "!@#" each appear pretty frequently. So using a data-driven approach to bui

More ›