Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
nikcub
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
59 ms
·
661.
▲
by
nikcub
10y ago
Two reasons: 1. this leak is old, we found out about it in August 2. Yahoo is already heavily discounted to the point where without BABA they have a negative value.
662.
▲
Ted Cruz to Fight Transfer of IANA to ICANN
(nytimes.com)
1 points
by
nikcub
10y ago
|
0 comments
663.
▲
by
nikcub
10y ago
One big difference between Soviet technology and American - the former was designed to be cheap, rugged and to survive a nuclear war. Unlike similar American jets, you can find Mig-25's in private hands today being maintained and flyin
664.
▲
by
nikcub
10y ago
Exactly. It is made easier if you store the hashing algorithm and parameters used against each user record. As you increase the parameters, or change the algorithm, you can update user passwords on login.
665.
▲
by
nikcub
10y ago
Infosec has struggled with 'good is better than perfect' - where good advice that is practical for most people is criticized for not being perfect practice that is often impractical. Thankfully, now that there is a lot more public
666.
▲
by
nikcub
10y ago
> For a while prior to this, I had been poking into the field of remote viewing, which hadn’t yet quite burst into the public’s perception ... I had contact with a couple of remote viewers and thought this might be a useful test of this
667.
▲
by
nikcub
10y ago
Thanks - forgot to mention dns history, and a domaintools subscription is worth it
668.
▲
by
nikcub
10y ago
> you can't protect the rest of your infrastructure (mailservers, chat servers, gameservers, and so on) That leads to my technique in discovering origin servers when pen testing CloudFlare customers: brute force all the DNS names an
669.
▲
by
nikcub
10y ago
> As if people from Sunderland or rural Wales were concerned about the cost of holidaying the Riviera or taking a hit on their non-existent stock portfolios. Economic downturns and recessions disproportionately affect the poor[0] and dis
670.
▲
by
nikcub
10y ago
It's not just harrasement in that sense, but also that you don't want to be bothered. With some parents, if they find you have a Facebook profile, they'll expect to be added. Once you are added, they'll expect you respon
671.
▲
by
nikcub
10y ago
I have two family members and one friend who are school teachers. All use fake names[0] on Facebook because they don't want to be harrassed by parents or students online. Apparently, it is very common (both the harassment and teachers
672.
▲
by
nikcub
10y ago
Ye it is - but in case you want to block them on a router for other network clients that don't have uBlock or equiv. available
673.
▲
by
nikcub
10y ago
If you want to run Facebook but want to be privacy conscious (any more suggestions? - this is what I do): 1. Create a separate browser profile for accessing Facebook 2. Run uBlock Origin 3. Don't install the mobile apps - use the mobil
674.
▲
by
nikcub
10y ago
The term for them is two-click like buttons, or privacy friendly like buttons. There are a number of implementations[0][1][2] Note that Facebook doesn't like having the loading or function of their like button altered (they want the th
675.
▲
by
nikcub
10y ago
They don't advertise the roles as regularly as other sectors of IT because they're hard to hire for. A lot of the hiring is word-of-mouth or promoting a developer internally who has infosec interest into the role, or hiring freela
676.
▲
by
nikcub
10y ago
congrats guys
677.
▲
by
nikcub
10y ago
You're overstating how much power investors have at this stage of a company. During a seed, Series A, Series B etc. the entrepreneurs are often still in complete control and investors are mere advisors. It is the companies that raise c
678.
▲
by
nikcub
10y ago
I've avoided the big issuers for a while now. Big plug for Digicert who are excellent - they're independent (so not conflicted), have great infrastructure (fastest on OSCP), super support and active in pushing standards such as CT
679.
▲
by
nikcub
10y ago
> Wright must have been sure the real Satoshis would not show up and ruin the show The sense I get of Wright, and other fraudsters, is that they gamble on outcomes. If the lie works out, they proceed to the next step. If it fails a truth
680.
▲
by
nikcub
10y ago
I don't know anyone there - and I always disclose my conflicts (usually by avoiding threads where i'm conflicted)
681.
▲
by
nikcub
10y ago
Shaming companies for carrying out pentests is counter-productive, i'm more interested in who is leaking against Palantir and why. This is the third story now that William Alden has written about Palantir that appear to be based on int
682.
▲
by
nikcub
10y ago
I noticed that as well and i'm surprised they didn't mention it in the blog post. 28 of the top 44 Twitter leak passwords don't appear in the RockYou top 100[0]. It suggests that they're bots - but then how does malware
683.
▲
Ghostery patent granted for displaying and blocking ad trackers in a browser
(patentbell.com)
2 points
by
nikcub
10y ago
|
0 comments
684.
▲
by
nikcub
10y ago
The default approach would stop automated attacks, there is no reason why the repository couldn't whitelist libm after review
685.
▲
by
nikcub
10y ago
This is no longer Anonymous v Appelbaum - there are now, by my last count, at least six people on the record: Tor developer Andrea Shepard to Wired[0]. Shepard again, Emerson Tan and Meridith Patterson to Gizmodo[1]. Daily Dot spoke to fo
686.
▲
by
nikcub
10y ago
Thanks again - i've been digging into the specs of those boards and it does look like you have to go pretty far down that list to get to a board that can support 4x PCI-E v3 x16 simultaneously so you were right with your first comment
687.
▲
by
nikcub
10y ago
> Unless you buy something like this That is exactly the motherboard that I was thinking of - I just rounded down a little too aggressively (iirc you can get them for $69 on NewEgg). > not sure about the 1070 but the 980 (non-ti) and
688.
▲
by
nikcub
10y ago
I agree that for gaming it makes sense getting the higher end cards rather than dealing with SLI, but my use case is password cracking that doesn't require five 9's uptime. The GTX 1070 is 150W power consumption while the 1080 is
689.
▲
by
nikcub
10y ago
1080: http://www.hardocp.com/article/2016/05/17/nvidia_geforce_gtx... 1070: http://www.hardocp.com/article/2016/06/06/nvidia_geforce_gtx... Other benchmarks: http:&#
690.
▲
by
nikcub
10y ago
password cracking and generating onion addresses[0] edit: https://www.oniongen.com/
More ›