nikcub

91 ms·

871.
by nikcub 12y ago
> This is a stunning report. Significance buried with poor headline, also could have been broken up into multiple stories. This is def a top 5 Snowden revelation, with the added bonus of a denial from a top official.
872.
by nikcub 12y ago
USA claim AQ have been using stenography since the 90s: http://usatoday30.usatoday.com/tech/news/2001-02-05-binladen... Commercial companies then built tools to identify most common steg, and AQ adapted by writing
873.
by nikcub 12y ago
Important additional info from the original Der Spiegel report[0] The suspect initially offered his services to Russian intelligence for financial gain. Apparently this is what alerted him to German counterintel. There was then an offer mad
874.
by nikcub 12y ago
It is somewhat good news for online anonymity that we don't know who Satoshi is. The amount of resources that have been poured into trying to uncover his identity is the equivalent of a medium-sized open source project. He has survived
875.
by nikcub 12y ago
No logical person would give up $3-5M+ per month in growing legit income for $400M+ in dirty money with a risk of lifetime of jail. Not when they controlled 60%+ of all btc trades at the time and the VC/private equity rush at the time
876.
by nikcub 12y ago
my assessment based on the statements of others that knew him better was that he got bored with MtGox very quickly and was distracted with side projects, such as the bitcoin foundation, bitcoin ATM's and the bitcoin cafe he was buildin
877.
by nikcub 12y ago
> we don't have hard evidence pro or against Karpeles There is a lot of hard evidence: 1. 800k+ bitcoin that are gone 2. Public statements by Karpeles that all was ok on numerous occasions 3. Frozen withdrawals for months that hinte
878.
by nikcub 12y ago
The 'debunking' was an alternate theory that didn't hold up to real scrutiny. If the idea was a 'dark pool' to obfuscate their trades, not signal the market, spike the price, or avoid front running - then they faile
879.
by nikcub 12y ago
This is part of the better long-term solution for online privacy. Spend the effort to educate users about privacy and tracking and build easy to use software options, rather than investing time in standards that don't get adopted and a
880.
by nikcub 12y ago
10% of users on these sites are actual crooks. 40% are wannabe crooks who heard about it on the news and thinking carding is both easy and will make them millions. The other 50% are people working for security companies, banks, retailers, l
881.
by nikcub 12y ago
Interesting from a startup perspective is that they raised a lot of money first and then tried to figure out if they could implement the idea. This definitely is an idea where if it isn't being developed in a lab at a large corp or
882.
by nikcub 12y ago
topsy still has the tweets cached: http://topsy.com/trackback?url=http%3A%2F%2Ftwitter.com%2Fst... and for the user: http://topsy.com/s?q=from%3Astevebarnhart&window=w&type=twee...
883.
by nikcub 12y ago
you can replace your python code with: $ seq -w -s "\n" 99999 > outfile.txt also, burp has a generator built into the intruder to create these types of payloads. it is very powerful.
884.
by nikcub 12y ago
> But what does XP being EOL'd have to do with anything? Every version of Windows after XP has a native disk encryption utility. TrueCrypt was built to bring full disk encryption to Windows, which didn't exist at the time - thi
885.
by nikcub 13y ago
> We need empirical definition of what constitutes "high risk" is Average CC fraud rate is 0.04% of credit card transactions. A 'high' rate would be greater than 0.1%. The site categories that are listed frequently ha
886.
The Murders at the Lake(texasmonthly.com)
6 points by nikcub 13y ago|0 comments
887.
by nikcub 13y ago
Most reports about Heartbleed kept repeating that the vulnerability was introduced 2 years ago (Dec '12, which isn't even 2 years - but anyway) it was committed to a version of OpenSSL (v1.0.1) that wasn't widely distributed
888.
by nikcub 13y ago
> Passphrases are generated server-side That was a strange decision to me. There is nothing that can't be done with Javascript on the client, storing the dictionary in the local cache and making the app useful. If you stripped out t
889.
by nikcub 13y ago
or shell alias: cat /usr/share/dict/words | awk 'BEGIN{srand();}{print rand()"\t"tolower($0)}' | sort -k1 -n | cut -f2 | head -n 4 | tr "\\n" " " suggestion would be to fi
890.
by nikcub 13y ago
For background, this came up as Akamai mentioned in their Heartbleed announcement that they didn't think they had any sensitive information[0] disclosed by the bug as they had wrapped OpenSSL's malloc to create two heaps: a secure
891.
Akamai release source to their custom secure_malloc for OpenSSL(thread.gmane.org)
267 points by nikcub 13y ago|80 comments
892.
by nikcub 13y ago
store everything, reconstruct it all later by trying to work out which part of the heap each request is from. there is likely some sort of efficiency calculus you can do here (i'm not good at math so I have no idea what i'm talkin
893.
by nikcub 13y ago
Reading Cloudflare's blog post[0], they keep referring to the exploit having a length of 65,536 bytes, and how an allocation of that size is unlikely to find itself lower in the heap. That is true - but this exploit doesn't depend
894.
by nikcub 13y ago
The short answer is that miners are hoarders, and this is based on a few things: 1. In theory difficulty and hash rate should follow the bitcoin price, but they don't. You'd think that as price decreases difficulty re-adjusts as m
895.
by nikcub 13y ago
It refers to 'review' as in reviewing the features and how it is implemented. Here is the log: http://rt.openssl.org/Ticket/Display.html?id=2658&user=guest... That is very far from it being a security rev
896.
by nikcub 13y ago
I just happen to be speaking to the very reporter who wrote this article prior to him publishing this report. I told him that in 'our world' we don't really emphasize or make much of who introduced the bug, since it is unders
897.
by nikcub 13y ago
> Maybe the silver lining here is that it puts the final nail in the coffin for "many eyes make all bugs shallow" The OpenSSL project doesn't seem to have a 'review' step[0] in code commits, unlike FreeBSD, OpenB
898.
by nikcub 13y ago
> it was unclear to what extent Hussein had made any progress on building -- or buying -- nuclear weapons; It was very clear that he hadn't, the US government (just like the chemical weapons) chose to ignore their own intelligenc
899.
by nikcub 13y ago
Al Gore was appointed to the board of Apple prior to the Iraq war. Here is the Slashdot thread from when he joined, there wasn't much controversial about him at the time other than 'huh, he invented the internet': http:&#x2F
900.
by nikcub 13y ago
This really shouldn't need to be pointed out: but the difference is that none of these people have been appointed to the board of any tech company. In 10 years time if Facebook put James Clapper or Eric Holder on their board it'd

More ›