nekitamo

20 ms·

181.
by nekitamo 13y ago
Hi Prefinem, Include a small piece of Javascript that sets a hidden field in your form to some password when the page loads. Then, when the form is posted, verify on the server that that field has been set to the password. This should get r
182.
by nekitamo 13y ago
>What I'm wondering is whether Twitter is actually protecting the private keys? That's the real tricky part. They could be using whitebox cryptography.
183.
by nekitamo 13y ago
I don't know if anyone at Qz.com is reading this, but if you open the link in internet explorer it redirects you to an article about programmers and autism.
184.
by nekitamo 14y ago
Yes. If you're on Android, do a checksum of your classes.dex file. If you use the Android LVL, chances are the cracker will patch your app, and thereby change the checksum of classes.dex. You can use the checksum to then decide whether or n
185.
by nekitamo 14y ago
OllyDBG every day, for x86 assembler :)
186.
by nekitamo 14y ago
I knew a person who used to spend $3000+ a day on Adwords who never got much attention from Google (reseller in the cosmetics niche). The only thing he mentioned is that at some point Google assigned him an Adwords account rep. He followed
187.
by nekitamo 14y ago
Using LinkedIn, you can easily figure out the name of the company and the name of the game. Using CrunchBase you can figure out the name of the CEO.
188.
by nekitamo 14y ago
He's exaggerating. Theoretically they could send the feds after you, but in practice it will never be done. Screen scraping and botting websites is widespread in the industry and has even been used by several startups featured on Hacker New
189.
by nekitamo 14y ago
If Uniloc wins this lawsuit they will have a precedent with which to sue every app developer on the Android Marketplace who uses the Android License Verification Library. Given how this can be a crippling blow to the Android Marketplace, I'
190.
by nekitamo 14y ago
A rebuttal: http://www.downloadtheuniverse.com/dtu/2012/06/the-demise-of...
191.
by nekitamo 14y ago
They're list building by submitting to random forms . Then they go back and try to see if the comment when through the form and shows up as a comment on the website. If it does, then they know they can spam that website in the future.
192.
by nekitamo 14y ago
Yes but only in certain US demographics. Most of these bots are ad scrapers/landing page scrapers run by people gathering and stealing the ads/landing pages of their competition. Facebook has known about the problem for a while (years), and
193.
by nekitamo 14y ago
I wrote an OCR for the previous generation of recaptcha (the one that preceded this one) that cracked it with a 92% success rate. The same day I finished the OCR, I watched my 50 year old mom try to input recaptcha for the registration of s
194.
by nekitamo 14y ago
http://www.ntcore.com/files/dotnetformat.htm
195.
by nekitamo 14y ago
You would be surprised at how many soldiers deliberately miss the enemy, or don't fire at all. Discussions on the matter: http://boards.straightdope.com/sdmb/showthread.php?t=536561 http://msgboard.snopes.com/cgi-bin/ultimatebb.cgi?ubb=g
196.
by nekitamo 15y ago
Is it only me, or does the above link crash Safari on the iphone? Been noticing that a lot with google+ links...
197.
by nekitamo 15y ago
Then they would get hit with a cloaking penalty when the googlebot figures out its being cloaked.
198.
by nekitamo 15y ago
The binaries built by the Android NDK are emulated on the emulator properly. I've deployed NDK binaries on the emulator and traced it with IDA Pro, one line of ARM assembler at a time... So yes, it's a proper emulator. Just a fact I thought
199.
by nekitamo 15y ago
Yes. This community is a bit pretentious sometimes.
200.
by nekitamo 15y ago
Have you ever had sex with someone who has an IUD. Or talked to a woman with an IUD to see her opinion on it? Because it's not all you make it out to be.
201.
by nekitamo 15y ago
I agree. I personally can't believe Kaspersky were this incompetent. To me the entire thing sounds like a PR play. Just look at all the alarmist headlines they generated.
202.
by nekitamo 15y ago
Well, on attacking Virtual Machines, Rolf Rolles has the nicest work: http://static.usenix.org/event/woot09/tech/full_papers/rolle... For building your own virtual machines, check out the ideas of the people here (Mips virtual machine sho
203.
by nekitamo 15y ago
Not to knock on the author's article, but I've never seen a code encryption technique or assembler-level obfuscation that wasn't trivial to remove. If you're looking for protection technologies that perform well in the real world, look int
204.
by nekitamo 15y ago
An amusing way to spy on your friends is to create a google account, and then log into it from their computer. Until they log out of your account, you will be able to view their web history. Aside from this, I have avoided this Google featu
205.
by nekitamo 15y ago
I found his comment about Swedish prisons to be interesting. From what I've heard and read, Swedish prisons (and Scandinavian ones in general) are some of the most mild in the world.
206.
by nekitamo 15y ago
Aforge is an excellent open-source alternative that is years in development: http://code.google.com/p/aforge/
207.
by nekitamo 15y ago
Not trolling at all. Some of us have the opinion that you have to be a fool to work at a startup.
208.
by nekitamo 15y ago
Build your own licensing system in C and compile it via the android ndk. Use obfuscation and antidebug. Self modifying code if you want to be risky. Code your own vm if you really want to be secure. Make sure your licensing system is called
209.
by nekitamo 15y ago
No need to break captchas, just get humans to type them for you at $1.39 / 1000 captchas. http://deathbycaptcha.com/user/login Also the article mentions that reCaptcha is the most secure implementation of captchas so far. This is semi-tru
210.
by nekitamo 15y ago
Amusing story: I applied to Homeland security and some defense contractors for an infosec job. I had all the qualifications, but they dropped me after they heard I have dual-citizenship. So, they're desperate for hackers, many of whom are f

More ›