no_time

89 ms·

841.
by no_time 5y ago
>The author points out that you can detect this by finding keys that have an unusually high signature counter. Ah that makes sense. No evil fun for me then :^(
842.
by no_time 5y ago
If this catches on I will make sure to buy and abuse a few of these tokens every month just to get them banned. Doing a little trolling, 100k+ banned tokens at a time.
843.
by no_time 5y ago
>3. We think this’ll actually make the state of global privacy better I'm sorry but this is grade A bullshit. If your api provides access to data (extracted or raw), you are not improving anything. Quite the opposite actually, becau
844.
by no_time 5y ago
> at some point publishers could require it, no? They could. However they wouldn't have a way of enforcing you play along and don't have a separate floc ID for every site you visit
845.
by no_time 5y ago
Some of them use state of the art obfuscation to make this a PIA, others are not that good[0] The one I've taken a look at(forgot it's name) was using VMProtect and had a competently written VM detection routine. It wasn't my
846.
by no_time 5y ago
This will only get worse and worse as time goes on and tech gets cheaper. Unless the people realize that the people who design,market and require these devices have names and addresses.
847.
by no_time 5y ago
> If anyone knows of one that supports non-web languages (I already use codesandbox for frontend) like python, etc. this is the chance to pitch it. How about a locally hosted lxc container running nothing but sshd, tmux (to share a singl
848.
by no_time 5y ago
From a cursory glance that version while better, looks vulnerable to replay attacks since I don't see any mention of timestamps or MAC Of course this requires the attacker to purchase at least one license so its a partial victory :^)
849.
by no_time 5y ago
>rect->minx = min(rect->max.x, rect->minx + a); Did you mean maxx instead of max.x?
850.
by no_time 5y ago
Would be a real shame if someone used mitmproxy modify the validation request in transit. Looking at one of the provided examples [0] it does not have any mention of certificate pinning. With all due respect this service seems to alleviate
851.
by no_time 5y ago
The widevine situation puzzles me even more because music and film rights holders will be at a perpetual disadvantage as long as you can point a camera at the screen and plug your drm device into the line in slot on your motherboard.
852.
by no_time 5y ago
>You're conflating trusted computing with there being an OS-manufacturer monopoly over TCB boot keys. Because the two go hand in hand in the wild already. Just look at all android phones. Where you have to make a pact with the devil
853.
by no_time 5y ago
Yeah, on devices without hardware attestation. Which is now the new normal on all phones sold. When the software route inevitably gets disabled and you can no longer fool google into believing you dont have hardware attestation you are done
854.
by no_time 5y ago
Will it though? From what I see anecdotally, people will just accept it as the new normal sooner or later. Just like when Android rolled out a feature that enables apps to prevent you screenshotting them. At first it was annoying but now n
855.
by no_time 5y ago
Trusted computing and TPMs by extension are treachery on a chip without an user override. And the fact that even the most tech savvy of us don't care (looking at security researchers with macs) makes me super pessimistic about the futu
856.
Trusted Computing: Promise and Risk(2003)(eff.org)
1 points by no_time 5y ago|0 comments