nikcub

96 ms·

841.
by nikcub 12y ago
Torbrowser doesn't even sanbox tabs[0], let alone virtualize. Checkout Qubes which was a project that virtualized each app: https://qubes-os.org/ Doing that today with Docker containers would be interesting. [0] This i
842.
by nikcub 12y ago
You'd host the queue service on a separate machine on the private network and communicate with it using either HTTP or standard TCP (all firewalled to restrict everything else) So you have your gateway virtual machine which has one int
843.
by nikcub 12y ago
That is why you have it segmented: > Put it behind a gateway that acts as an isolating proxy. You don't NAT - you forward the port required through the gateway machine and to the virtual machine. Either terminate Tor on the gateway
844.
by nikcub 12y ago
> Costco comes to mind That isn't a coincidence. According to[0] "The Everything Store"[1], the latest biography of Amazon, Bezos picked up the model for Amazon retail from Costco founder James Sinegal. The first aspect wa
845.
by nikcub 12y ago
Most people replying here will be as sarcastic as I was - but there is a serious question here which i'm certain Ulbricht's defense will ask and challenge. The motions filed leading up to this FBI filing have all been about corn
846.
by nikcub 12y ago
The theory I posted last year on Stack Exchange [0]: > The above environment variables were being dumped in the source of the login page on Silk Road. They contained the real IP address of the server. notbad.gif. Second - the FBI conside
847.
The FBI Says How It ‘Legally’ Pinpointed Silk Road’s Server(wired.com)
226 points by nikcub 12y ago|157 comments
848.
by nikcub 12y ago
I dropped the font, didn't realize it was so bad until somebody emailed me. Saw a screenshot, yikes .
849.
by nikcub 12y ago
thanks - fixed. didn't notice I picked the wrong image out when uploading.
850.
Notes on the Celebrity Data Theft(nikcub.com)
366 points by nikcub 12y ago|274 comments
851.
by nikcub 12y ago
i'm watching them continue to attempt to hack new accounts on a forum, so whatever apple patched with this bug wasn't it.
852.
by nikcub 12y ago
with vendor bugs publishing after a timer runs out is a good idea. an alternative is full disclosure, which is where you publish right away. another idea is to keep the bug to yourself and use it as part of a product or service or learning
853.
by nikcub 12y ago
> My advice is do not bother. Second this motion. The number of vendors or administrators who respond well to security or privacy reports is tiny. Some approximate data from my own emails. I've reported just over 120 security or pri
854.
by nikcub 12y ago
Economic term is regulatory capture: https://en.wikipedia.org/wiki/Regulatory_capture relevant Onion from this week: http://www.theonion.com/articles/elderly-lobbyist-always-dro...
855.
by nikcub 12y ago
> and I don't really get how it's not a bigger operation yet. Overpriced insurance policy based on pseudoscience implemented by a shady industry. What is not to like.
856.
by nikcub 12y ago
The current quads/drones have problems with naturally occurring thermals in calm weather and the slightest winds - they don't come close to surviving the climate surrounding a wild fire. When the tech and price scale are right for
857.
by nikcub 12y ago
> far before anyone was thinking about multi-touch interfaces CERN built capacitive multi-touch displays in the 70s. Mitsubishi, Bell, Microsoft, IBM and a bunch of other companies were involved in the R&D from there. What Apple are
858.
by nikcub 12y ago
Probably should have dated it - this is from right after 911 I remember when the change happen, because there were no longer the large bins and signs at both SFO and Sydney. Lighters were the biggest single item holding up security queues p
859.
by nikcub 12y ago
Cult leader, ponzi schemer or other conman believing his or her own bullshit does't make a difference. Victims are lead to believe something with no basis in science, reason, logic or reality for the purpose of personal or financial ga
860.
by nikcub 12y ago
TAO phoning Canada on the Brazil job is code for "do you have any vulnerability to use here that we don't?"
861.
by nikcub 12y ago
I ended up finding a way to get cigarette lighters through with a 100% success rate just by brute forcing it. If you travel a lot and you're a smoker you'd know that the worst part is getting off the flight, crawling through the a
862.
by nikcub 12y ago
They are also intel savvy. They understood the propaganda value / intelligence tradeoff prior to publishing the first photo. AQI/ISIS have adapted and evolved from almost a decade of fighting the US military and intel orgs. They a
863.
by nikcub 12y ago
Finding where James Foley was executed is less interesting. It is most likely just outside Raqqa. Not much you can do with the location (and they likely know it). When they were AQI, the beheadings were conducted in homes and buildings in a
864.
by nikcub 12y ago
NRO has such a large budget because they design, build and launch a ton of satellites, high-altitude equipment and a number of ground and space-based comms networks. They provide that raw data to CIA, NSA & DIA who do analysis. NGIA do
865.
by nikcub 12y ago
Google can't figure out dummy detection or what is a real person with all the data and smart people they have. Secret don't stand a chance if that is the basis for their defense model. Figuring out who is real or not is one of the
866.
by nikcub 12y ago
Anonymous application that users install on their phones that identify them, using their personal email addresses and real-life social networks turns out to not be so anonymous. mindblown.gif As was pointed out when Secret launched by many,
867.
by nikcub 12y ago
Buzfeed longform is really good, the idea is that they want to do more of this and with video as well: http://www.buzzfeed.com/longform This was a great story: http://www.buzzfeed.com/susanelizabethshepard&#
868.
by nikcub 12y ago
could a mod edit back to the original title please? this post is a lot more interesting than what the title here suggests.
869.
by nikcub 12y ago
They left out the sponsors and the FIFA logo, which makes it a non-starter. Anybody following the EPL would know that they have their on-screen graphics done very well, especially starting last season. Minimalist but informative (and with s
870.
by nikcub 12y ago
The NSA will see this post, write more rules with regexs to catch anybody doing any of these things, and then tag them as terrorists in XKeyScore. edit not to mention that the source of these rules is from a non-verified document that is

More ›