p410n3

10 ms·

61.
by p410n3 6y ago
My bad. Thanks!
62.
by p410n3 6y ago
In security, certificate pinning is a good practice because it defends against, who guessed it, MITM.
63.
by p410n3 6y ago
Finally someone who knows this! Even (some) "SEO advice" blogs have suggested to just use local storage instead of cookies. Just no. Both the e-privacy directive and the GDPR are very broad in their articulation and never mention
64.
by p410n3 6y ago
I work a lot with GDPR and making sites compliant, and some agency's do in fact tell this to their customers. I suspect it's to sell their Services for cheaper. Luckily where I work we are pretty serious about this stuff. Since on
65.
by p410n3 6y ago
That would break the "remember me" feature for sure, unless you explicitly bookmark the site with the get parameter attached. It also poses a security / opsec issue if anyone non-technical wants to send a link to a friend &#x
66.
by p410n3 6y ago
Pretty easy to digest explanations and some fine opsec tips in there. Obviously self promotion (How can you protect yourself? Use privacy.com!!) but nothing strikes me as being a lie or misrepresentation
67.
by p410n3 6y ago
The only company you can get bug bounty money from is the company that makes the software. If you sell your findings elsewhere you're selling an exploit. Which is probably more lucrative in most cases but also far less ethical. So ther
68.
by p410n3 6y ago
This together with pico-8 / tic-80 will be great!
69.
by p410n3 6y ago
Jailbreaking DOES break the security model though. Its literally performed to "break the jail". It takes a locked down system and removes the locks, resulting in a system that is more open; to yourself and an attacker alike.
70.
by p410n3 6y ago
This is comparing apples with oranges. When I do give out my CC data I do this voluntarily and make an active decision each time to do so. I'm NOT giving it out to random people, some of which might be fraudsters
71.
by p410n3 6y ago
For a while now I was struggling to put into words why my l changed from being a "privacy activist" to being a "normie". But you just hit the nail on the head. Security, both technical and operational are still very much
72.
by p410n3 6y ago
Which makes it much more interesting to me personally.
73.
by p410n3 6y ago
Great Article! I just shared that with a group of people that are primarily not Hackers but web devs. This is a perfect example that quite often, hacking is just debugging. I always like these trivial vulnerabilities too. Reading about IDOR
74.
by p410n3 6y ago
Holy Shit. That should be illegal. All it needs is one rogue employee to potentially steal trade secrets? And dont tell me MS employees never go rogue after the recent events...
75.
by p410n3 6y ago
In other News: Play Store identified as main distribution vector for most Android Software OFCOURSE most malware comes from the Play Store since thats what 90%+ of people exclusively use to get ANY software on their phones.
76.
by p410n3 6y ago
AIDE is a thing
77.
by p410n3 6y ago
What good are alerts when I sleep? I usually don't even check my personal mail until I'm done at work. There's a lot that can happen in 16h
78.
by p410n3 6y ago
What you are referring too is a salt
79.
Who reports the “low hanging fruit” security issues?(palone.blog)
1 points by p410n3 6y ago|0 comments
80.
by p410n3 6y ago
I was thinking that too. People are voluntarily aggregating news for likes, karma, points and recognition. Gathering some news on a certain webpage and re-writing it in your own words is NOT worth my money. But many online news pages are ex
81.
by p410n3 6y ago
Most important part of the Article imo: "It sets in stone that software licenses are contracts and can only be settled in contract law / contract courts." (in France that is) So it's not that the GPL is useless in France
82.
by p410n3 6y ago
With vulnerabilities like these, there is a big problem in my opinion. Who actually ever reports these? The thing with vulnerabilities like describes in the post is that they are SO EASY that you dont need any special infosec expertise. All
83.
by p410n3 6y ago
It all started with a def con talk if I remember correctly. https://youtu.be/N3dzVl40lQA
84.
My First "Incident Response"(palone.blog)
2 points by p410n3 6y ago|0 comments
85.
by p410n3 6y ago
I'm saving this. Very good point
86.
by p410n3 6y ago
I'll keep that in mind and will probably fix this... Someday
87.
by p410n3 6y ago
Well. Tastes are different
88.
by p410n3 6y ago
Yeah guess the mods did that or something. I just updated the original title :) Read here: https://news.ycombinator.com/item?id=23714416#23716962
89.
by p410n3 6y ago
Hm guess I subconsciously chose an clickbaity title... Well in my case, I use Debian as my main operating system on my Desktop. Debian is great, but as a classical desktop OS it does not have those cool security things like app sandboxing,
90.
by p410n3 6y ago
You can happily browse the noJS version at wp.palone.blog

More ›