Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
nezza-_-
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
14 ms
·
121.
▲
by
nezza-_-
13y ago
I don't get your site. There's a BIG green button at the top and when I click it nothing happens.. Then there's an empty crystal ball and below that two other buttons that actually do something.. I have to click again to at least get a very
122.
▲
by
nezza-_-
13y ago
An important fact is wrong: You actually need to unlock the device to access the data unless the iPhone and the computer were paired before.
123.
▲
by
nezza-_-
13y ago
You are a contact form with a name 'inspired' by squarespace?!
124.
▲
by
nezza-_-
13y ago
Could you elaborate on what is 'worse' in CS:S etc? I'm not a gamer, just curios.
125.
▲
by
nezza-_-
14y ago
No, long-horizon investors are normally overall not interested in HFT because they won't 'suffer' from it.
126.
▲
by
nezza-_-
14y ago
You need to do <i class="icon-iconname"></i> instead of <i>icon-iconname</i>... The links all have icon names in them. Edit: Ah. It now works only with JS on when putting the icon-name into <i> and no
127.
▲
by
nezza-_-
14y ago
Is their logo for 'Free Art' just the NBC logo mirrored and with other colors? Even the pecker is in it ...
128.
▲
by
nezza-_-
14y ago
Please let me download it without giving you my mail address :/ If you don't spam me, you don't need it..
129.
▲
by
nezza-_-
14y ago
Wow, your system has super crappy font rendering IMHO.
130.
▲
by
nezza-_-
14y ago
I don't think the guy writing this really knows what he's talking about.
131.
▲
by
nezza-_-
14y ago
Hu? I know quite a lot of people who run KVM & Xen at Hetzner without any trouble.. Care to explain what your problems were?
132.
▲
by
nezza-_-
14y ago
*geraffe. Oh wait, this is not reddit.
133.
▲
by
nezza-_-
14y ago
Btw, my original tweet was this: https://twitter.com/StackSmashing/status/268083612765806592
134.
▲
by
nezza-_-
14y ago
A friend of mine built something similar: http://watched.li/ Also I am not able to find two and a half men :/
135.
▲
by
nezza-_-
14y ago
The problem is that they do not sell vulnerabilities. They sell weaponized exploits. This is not the Zero Day Initiative.
136.
▲
by
nezza-_-
14y ago
Well... I'm really sorry about the loss, but I can't really see where it's United's fault that the dog died.. Travelling IS stress, always, but there is absolutely no proof that United is to blame. (Except for the very very bad reaction at
137.
▲
by
nezza-_-
14y ago
Yeah, maybe... But I never even recognized that there is a number :/ I was quite sure that it was by random. (I also change the passcode quite often)
138.
▲
How my mom "hacked" my phone.
(stacksmashing.net)
13 points
by
nezza-_-
14y ago
|
3 comments
139.
▲
Startups: Are shares still a valuable "payment"?
(stacksmashing.net)
2 points
by
nezza-_-
14y ago
|
1 comments
140.
▲
by
nezza-_-
14y ago
(I don't like DRM, but for content providers like movie studios it's very important - and Netflix is an important feature for vendors.)
141.
▲
Why bootloaders are locked down on modern smartphones
(stacksmashing.net)
2 points
by
nezza-_-
14y ago
|
1 comments
142.
▲
by
nezza-_-
14y ago
Flask doesn't have its own user system, in the wild one sees stuff like user-ids and so on. It makes it very easy to make bad mistakes.
143.
▲
by
nezza-_-
14y ago
Flask doesn't have a user system and as such does store nothing on its own in the session.
144.
▲
by
nezza-_-
14y ago
It's signed, so the integrity is ensured as long as the secret key stays secret.
145.
▲
by
nezza-_-
14y ago
Another problem we saw (but didn't mentioned): You can't logout sessions on the server-side. If you forgot to logout somewhere, your session will stay valid. And an expiration-date for the sessions is optional. Neither changing your passwor
146.
▲
by
nezza-_-
14y ago
No, I don't think "you have a huge problem anyways" is true, as there are a lot of other scenarios.
147.
▲
by
nezza-_-
14y ago
Local file inclusions are quite often very hard or impossible to exploit. Also, as linked in the blogpost, some may just pushed them online by accident, someone may lost a notebook or whatever. So no, filesystem access is only one way.
148.
▲
by
nezza-_-
14y ago
Thank you for the new implementation and your fast reaction!
149.
▲
by
nezza-_-
16y ago
In the article it's stated that the hashes are brute forced using the provided charset. I think you used a wordlist, which is a whole other thing.
150.
▲
by
nezza-_-
16y ago
You can easily calculate that using the charset and the time it took to crack a 6 character password. 6 character passwords with 95 different characters per digit take 49 minutes (Utilizing one machine and using CUDA-Multiforcer). 7 digits
More ›