pandog

8 ms·

31.
by pandog 11y ago
If it changes and you haven't taken the software update yet the lists will differ.
32.
by pandog 11y ago
But there's a difference between looking at the list of root certificates that Microsoft say Windows trusts and looking at the list of root certificates that Windows trusts.
33.
by pandog 12y ago
Isn't this just criticism of frameworks? If I want to do something a framework doesn't support I'm going to be in "a world of pain" but that's the cost of using a framework.
34.
Cowards Attack Sony PlayStation, Microsoft XBox Networks(krebsonsecurity.com)
2 points by pandog 12y ago|0 comments
35.
by pandog 12y ago
If you scroll to the bottom in Gmail you can see a "Last account activity: 1 hour ago: Details" link. If you click that you can see everyone who logged on.
36.
Measuring the Leakage of .Onion at the Root(dl.acm.org)
49 points by pandog 12y ago|1 comments
37.
by pandog 12y ago
Getting a 50kB/s download rate for the Linux bzip. If anyone's going to find that annoying, it's developers!
38.
by pandog 12y ago
Looks like 14.10 is patched now
39.
by pandog 12y ago
I think they're here: https://github.com/docker-library
40.
by pandog 12y ago
Maybe I'm missing something here but I don't see this as being particularly useful? It's a nice quick way to get an application running in Docker but realistically would you want to be depending upon these images in productio
41.
by pandog 12y ago
But I don't want to use a strategy, I want to click a button and have adverts blocked.
42.
Ubuntau Forum Hacked(ubuntuforums.org)
1 points by pandog 13y ago|0 comments
43.
by pandog 13y ago
They appear to take a SHA1 Checksum from an unencrypted (non-HTTPS) website to verify the integrity of the download. Surely if you're worried about the integrity of the file you should also be worried about the integrity of the source
44.
by pandog 13y ago
This is true for some cases but not all. For example if you have a CAPTCHA on your registration form but not your login form.
45.
by pandog 13y ago
I like how Myth 1 tells us long passwords are better than complex passwords then Myth 3 complains that Microsoft rate the long but non-complex password "jjjjjjjjjjjjjjjjjjjjjjjjjjj" highly
46.
by pandog 14y ago
Correct me if I'm wrong here but I believe that then all one would need to do is stick an SSL intercepting proxy (such as http://mitmproxy.org/doc/ssl.html ) in the middle and get the keys from there.
47.
by pandog 14y ago
I'm not sure if it makes it easier to listen in on calls but Microsoft have made changes to the skype infrastructure: http://arstechnica.com/business/2012/05/skype-replaces-p2p-s...
48.
by pandog 14y ago
This isn't a security issue in Firefox. To pull this off you need write access to Firefox's SQLite database. If you have write access to Firefox's SQLite database you've already 'won', the system is already yours. You can do a lot more dama
49.
by pandog 14y ago
This is exactly what's happening - though the author seems to think differently. This isn't a huge deal as you can still get details of Google Queries using Google Webmaster Tools: http://www.google.com/webmasters/
50.
by pandog 14y ago
From the article it would appear that their definition of a bot is a client with JavaScript disabled
51.
by pandog 14y ago
Which is really taking things too far - if Facebook wanted to generate some revenue with bots then it wouldn't be very difficult for them to write ones that supported JavaScript.
52.
by pandog 14y ago
This looks great - but I think I'll have to wait for the camera and/or tinkering panels before I grab one
53.
by pandog 14y ago
Worked for me - and with a quick reverse lookup I was able to tell a friend the name of his halls of residence