Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
mpeg
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
154 ms
·
871.
▲
by
mpeg
13y ago
I disagree with the reasoning, and I normally eat lunch at my desk because it's convenient and I get to watch crap on the internet. First off, being the person that gets to put out fires is in no way a certain path to a promotion. And
872.
▲
by
mpeg
13y ago
It will, most anti-cheat software operate as a device driver so they have access to the WDK libraries. Valve isn't even the worst offender, some other anti-cheat will not allow you to run ANY virtualization software while the anti-chea
873.
▲
by
mpeg
13y ago
Anti-cheat protections use exactly the same methods rootkits use to "monitor" your system, it's one of those things we grudgingly accept when playing multiplayer games. It's not even what Valve and co are doing with the
874.
▲
by
mpeg
13y ago
No, the point is not to make your password more secure in case of a data breach like this (although it can, since you can store a password that is very long and composed of random characters) The idea is that even if your password for kicks
875.
▲
by
mpeg
13y ago
I'd definitely pay for a Chrome addon or desktop version of this.
876.
▲
by
mpeg
13y ago
I work in the field and have seen companies who spend several million a month, agree with your key points. For companies of that size, data is everything, if an ad is underperforming it stops running, if an ad is bringing you low quality cl
877.
▲
by
mpeg
13y ago
I wasn't going to comment on this story, as I'm clearly biased. I used to work for an early facebook marketing partner, and I am very familiar with their advertising. This video is sensationalist, a large portion of all internet a
878.
▲
by
mpeg
13y ago
But hiring him offers no guarantee that he will be able to find any other bugs. That's the beauty of bounties, it allows people to decide whether they want to do the right thing or not, if there was no bug bounty more people are just t
879.
▲
by
mpeg
13y ago
Yeah and you can also go to starbucks, pay £1.50 for a coffee and pee outside of the toilet. I don't know, is your argument against this cafe that some people are cunts? Well, they are.
880.
▲
by
mpeg
13y ago
There is a Japanese animation from 2009 called Eden of the East, in which the main character funds a software startup that has a product which is very similar to that: take pictures on your phone and tap onto a network of users to identify
881.
▲
by
mpeg
13y ago
Yes, it defintely is. The data needs to have either been obtained directly from the users complying with laws regarding PII or you need to have all necessary rights to use the data (if obtained from a third party) Names are definitely PII.
882.
▲
by
mpeg
13y ago
It'd be nice to know what the author of the post got out of trying even harder (!!) and joining Exec that way. Are we talking nice experience, multiple promotions, million-dollar exit, or other stuff? I, honestly, don't try hard a
883.
▲
by
mpeg
13y ago
Note that using custom audiences to target people that you found in Facebook is against the TOS and could get your ad account suspended. It's supposed to be first-party data that you have obtained yourself, the terms are a bit vague on
884.
▲
by
mpeg
13y ago
I don't think you understand, it's not about a reward; it's about having a clearly defined process to report security bugs that is inclusive of every kind of bug. If you don't have that, people don't know if they ar
885.
▲
by
mpeg
13y ago
I think it's ridiculous, I've reported similar "out of scope" bugs and got no bounty for them. Even worse are the companies that DON'T state any kind of bug bounty or instructions to report a security bug... I found
886.
▲
by
mpeg
13y ago
Compiled programs are as easy to read the source for (at least the relevant bits) as interpreted ones. Still, if you encrypt it and someone gains access only to the database, they wouldn't be able to use the tokens. Every little bit he
887.
▲
by
mpeg
13y ago
If the web server is making API calls, encryption could still protect you from some SQL injection attacks, even if the decryption key for all tokens was in the web app code. With a system of this scale, the web server will probably be makin
888.
▲
by
mpeg
13y ago
Yeah, same thing. I remember a large retailer I did some pentesting for a long time ago, they kept the encryption key for credit card numbers in the same table as the card numbers. Doh.
889.
▲
by
mpeg
13y ago
Wow that's terrible, I guess it means they stored their access tokens with no encryption. Personally feeling slightly smug now, I actually applied for a job there not too long ago and got a half hearted rejection without any feedback (
890.
▲
by
mpeg
13y ago
Apart from the push to improve the brand image as a luxury brand, she also spearheaded heavy use of social media and technology for marketing. I had the chance to watch a presentation she gave with some people from my old company and she wa
891.
▲
by
mpeg
13y ago
I find it incredibly presumptuous, people's circumstances are different, not every young person who quits his job is a spoiled brat who doesn't know hard work. I might be biased, because I quit my stable but unfulfilling corporate
892.
▲
by
mpeg
13y ago
I worked in this company where we had a dedicated security team, the pentesters were either outsourced or underpaid goons with an excel cheatsheet of things to try. The managers were MBAs with CompTIA certs. Now, this is only my experience,
893.
▲
by
mpeg
13y ago
Apart from the fact that it's pretty much impossible to find a job in cybersecurity unless you have some wanky certifications. When I was younger I tried to break into that world and it was pretty much impossible. Companies I contacted
894.
▲
by
mpeg
13y ago
I wrote my first code in visual basic when I was around 12, following internet tutorials, but the lack of consistent access to a computer / internet made me give up on it fairly soon. Later on, when I was 16/17 I started tinkering
895.
▲
by
mpeg
13y ago
Or in London with http://www.boxload.co.uk/ Note: I have nothing to do with that company :)
896.
▲
by
mpeg
13y ago
I know what you mean, but, just to nitpick, most small airlines will lease the planes
897.
▲
by
mpeg
13y ago
Why not let people buy it? Says the public release is in "a few weeks" - I'll probably have forgotten it exists by then, but now I would probably impulse pay $20 for early access. Also, is the code going to be in github?
898.
▲
by
mpeg
13y ago
From the screenshots it's obvious that the captured data is an HTTP form submission in facebook. So they didn't have access to private messages, they just intercepted internet traffic and relied on it being unencrypted. Facebook d
899.
▲
by
mpeg
13y ago
Thanks for the reply, I see that you fixed the refresh crash too; having a nsfw option would be pretty cool. Funny enough, "iAlien Gallery", a similar iOS app, just got updated with a nsfw option.
900.
▲
by
mpeg
13y ago
Back in my home island - where she lost her phone - we have a saying for being careful and not acting impulsively without thinking, which translates literally to: "you need to know how to swim and keep your clothes safe"
More ›