phlo

20 ms·

1. 151.▲
   by phlo 12y ago

   For all intents and purposes, E-Mail (assuming you are in control of your own domain name) and Bitcoin are equally decentralized. E-Mail uses DNS information to find ip addresses matching recipients' host names. Bitcoin uses DNS seeds
2. 152.▲
   by phlo 12y ago

   I, too, am quite fond of Timely. For me, enabling my phone's lock screen works quite well: in order to access the notification bar (and skip the shake/puzzle prompt), I would need to unlock the phone. Which is almost as difficult.
3. 153.▲
   by phlo 12y ago

   Technically, Tor, but at that point you are just moving your mis-placed trust from one (local WiFi) entity to another (exit node). For the tech-savvy, use VPN, it's free[1]. And there's pre-built images[2]. [1] http://w
4. 154.▲
   by phlo 12y ago

   While defense in depth is never wrong, please be aware that even moderately advanced trojans will simply capture the contents of any form fields in most browsers. Neither your "skipping" technique, nor (partially) using an on-scre
5. 155.▲
   by phlo 12y ago

   The point was to emphasize how ladders are clearly superior to knives, or even sticks. As has been demonstrated in literature[1]. [1] https://www.youtube.com/watch?v=DrRFzwPE0d4&t=3m13s
6. 156.▲
   by phlo 12y ago

   While I agree with most of the article, in light of recent events (blanket surveillance, Heartbleed), an argument could very well be made in favour of using JS crypto -- not by itself, but in addition to TLS. > The problem is, having est
7. 157.▲
   by phlo 12y ago

   As many sources have pointed, out, this is very likely related to Sabre. Interestingly, there is another reason why such a restriction might be useful: There are three popular key arrangements. English/US QWERTY, French AZERTY, and Ger
8. 158.▲
   by phlo 12y ago

   Thanks! This search query appears to catch most of 'em: https://www.google.ch/search?q=site:blogs.msdn.com+intitle:%...
9. 159.▲
   by phlo 12y ago

   Full-Disclosure is recently flooded with dubious submissions like this one. The author proposes replacing the Telegram App with a trojanized version which he then proceeds to MITM. This is not a vulnerability, "it rather involves being
10. 160.▲
    by phlo 12y ago

    According to Bloomberg [1], this removes an obstacle for Apple's inclusion in the Dow Jones Industrial Average. The index weights stocks solely by their share price. Splitting up AAPL 7:1 should produce a new share price of around $75,
11. 161.▲
    by phlo 12y ago

    StartCom/StartSSL [1] and, to my knowledge, Comodo [2] do offer free (and widely supported) SSL certs. Charges may apply to revoke certificates if a private key is leaked ($25 at StartSSL, IIRC). As for why SSL should be used everywher
12. 162.▲
    by phlo 13y ago

    Interestingly, they are also attacking the "problem" of snail mail from another angle: ePostOffice [1] is an online control panel and inbox, allowing recipients to select how they'd like to receive communications [from partic
13. 163.▲
    by phlo 13y ago

    I'm not sure about earth class mail, but Swiss Post Box will deliver them. Using the default settings, if I'm not mistaken, only envelopes will be scanned. You then get to decide to either open and scan or physically deliver lette
14. 164.▲
    by phlo 13y ago

    I'm not convinced many people would volunteer to destroy their deposits just to punish a fraudulent seller. For reference, say you're trying to buy a widget valued $100. Both the seller and you deposit $150, you pay, the seller ne
15. 165.▲
    by phlo 13y ago

    In this case, the very test you're describing would not have worked. For a better writeup, see agl's post[1] on the matter. The basic gist of it: On affected systems, the server may use any combination of private key and certifi
16. 166.▲
    by phlo 13y ago

    I actually bookmarked your post on vi mode in bash a couple of months ago. That'll do as proof you're worthy. :-) My email address is listed in my profile. Ping me for an invite.
17. 167.▲
    by phlo 13y ago

    Judging by your comment history, I can't spot a reason not to risk sending an invitation. My email address is in my profile, ping me if you're interested.
18. 168.▲
    by phlo 13y ago

    StartSSL (a reasonably priced Israeli PKIX CA) does. Some Banks do too, but tend to wrap it all up in a hardened browser instance or app. As for why no-one else does: * installing a client cert is way too complicated for "average&q
19. 169.▲
    by phlo 13y ago

    Most current smartphones are ARMv7, Apple's A7 stands out as a(n albeit slower) ARMv8 SoC. I'm not quite sure about the compatibility between the two, but at least iPhones 5/5C should be architecturally compatible. Performanc
20. 170.▲
    by phlo 13y ago

    I'm very wary about loading JS from random CDNs. In my opinion, the negative aspects outweigh the benefits by far: - The CDN gets to decide *what* code is delivered to *which* users. Could be a prime target for, say, another FERRET
21. 171.▲
    by phlo 13y ago

    This is working quite well for the swiss postal system. Amongst other services (notably: public transport and a business solutions division), PostFinance provides financial services. Out of 6 divisions, the financial one accounts for about
22. 172.▲
    by phlo 13y ago

    eBay's system works that way. Before oo's (I'll leave the asterisks out) bid, the highest bid amount was $89'100 by e7. oo then bid an amount between $89'900 and $90'000. At this point, eBay only displays $89&#
23. 173.▲
    by phlo 13y ago

    He may be mining Bitcoin. If you're able to issue Facebook stock, let's talk :)
24. 174.▲
    by phlo 13y ago

    And this is where metric really shines: at Autobahn speed (130 kph), 90 miles is only some 66 minutes -- 24 minutes saved over imperial. :)
25. 175.▲
    by phlo 13y ago

    Could you elaborate a bit on your CrashPlan setup? I have a somewhat similar setup and have been trying to back up my NAS (Synology DS1812+) to CrashPlan for about half a year now. I was able to start the backup, but the transfer rate quick
26. 176.▲
    by phlo 13y ago

    While Switzerland doesn't have a hard minimum wage, the reasonable minimum is around triple your figure or CHF 20 ($21) per hour. Lidl (a chain of deep-discount stores) recently ran a campaign touting their new minimum of CHF 4'00
27. 177.▲
    by phlo 13y ago

    This would be very hard to achieve in Switzerland. For one, Swiss law places a big emphasis on acting in good faith . If an employer were to hire permanent employees as "contractors", courts would be likely to reject that argumen
28. 178.▲
    by phlo 13y ago

    You're perfectly right. PBKDF2 (Password-based Key Derivation Function 2) takes your password as an input, derives a key from it and outputs that. This key is then fed into an encryption algorithm like AES in order to actually encrypt
29. 179.▲
    by phlo 13y ago

    What about deterministic padding? As a (badly thought through) example: Hash the plaintext, then use the first couple of bits of that result as your padding size. This should counteract averaging of requests. On the other hand, an attacker
30. 180.▲
    by phlo 13y ago

    > Exactly! But you also don't have the right to tell him not to send tracking info either. You do, however, have the right not to execute it. [...] You're right about both parties' rights. However, dealing with the "M