Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
px43
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
69 ms
·
721.
▲
by
px43
10y ago
Is status.im using whisper for messaging? Is there end to end crypto between users?
722.
▲
by
px43
10y ago
Immutability isn't a great option for obvious reasons. Trackability would be nice though. Imagine if web data served off a domain could be dug through like a git repo. If you could see every commit and diff, and if proof of malice wo
723.
▲
by
px43
10y ago
> using that will put you on several watch lists Name one "watch list" that you get put on for using Tor. That's ridiculous. Even with Rule 41 there aren't any additional watch lists. It's this exact fear and
724.
▲
by
px43
10y ago
The DDoS market is already pretty active, so these coins would immediately have value. This is also a significantly safer way to get paid than advertising services for bitcoin or something. You don't send actual transactions with the
725.
▲
by
px43
10y ago
Yes, that's addressed in the paper. If a website owner notices a bounty on their own site, they can very quickly generate the proof needed to collect the bounty without suffering any downtime.
726.
▲
by
px43
11y ago
They hope to prevent people from putting sensitive documents on unencrypted media that's easy to lose. There have been worms that spread through autorun and shell exploits, but I think that's a secondary concern.
727.
▲
by
px43
11y ago
Ancient. The latest fun project enabling this sort of thing is Samy's USBDriveby project: https://www.youtube.com/watch?v=aSLEq7-hlmo And yes, you totally can detect operating system, bypass HID protections, and deliv
728.
▲
by
px43
13y ago
Have you looked into systems like Mailvelope? (similar to what FireGPG once was) Private keys are kept in the domain of a browser extension, so even if your webmail provider served up malicious javascript (via xss or court order), they wou
729.
▲
by
px43
14y ago
Reminds me of this story: http://www.huffingtonpost.com/2012/10/01/daniel-ferraris-new...
730.
▲
by
px43
14y ago
One nice thing about defcon is that people WILL get kicked out for taking pictures of others without permission.
731.
▲
by
px43
14y ago
First off, what profit? Weev can be described by many negative terms, but greedy has never been one of them. Secondly, if a company posts something publicly, people in the public are going to see it. My mind is incapable of comprehending
732.
▲
by
px43
14y ago
He didn't expose some flaw or weakness. ATT knew that information was there, they were the ones that put it there. Weev was pointing out a negligent mishandling of data. ATT already has shown that they suck at vendor response. I think h
733.
▲
by
px43
14y ago
Why would you unlock a phone when you are still on your contract? That doesn't make any sense. If you switch carriers, then by definition you have just ended your contract, and you should be able to use your old phone. This is exactly wh
734.
▲
by
px43
14y ago
Do you have a food cart? I live in Portland which is supposedly the food cart capital of the world, so I may have a bit of a skewed perspective, but around here, every company like yours operates primarily as a food cart. The income isn't
735.
▲
by
px43
14y ago
ctrl+f energy massage
736.
▲
by
px43
14y ago
No, the PoC forks and ptraces the child, which is allowed in even the strictest yama settings.
737.
▲
by
px43
14y ago
Adblock?
738.
▲
by
px43
14y ago
If there were no PoC, significantly fewer would patch, and even those that did patch would have a hard time verifying that their patch worked.
739.
▲
by
px43
14y ago
I never understood why people put money into satoshi dice. In my opinion, betsofbitco.in is way more fun, though admittedly slower paced. Similar to intrade.
740.
▲
by
px43
14y ago
When did they start shipping? I ordered mine last May and haven't heard a word from them since then.
741.
▲
by
px43
14y ago
Ah, not sure how I got turned around, but yes I was using the scanner from the main page. Thanks for the clarification, and nice work. This is going to help out a lot of people.
742.
▲
by
px43
14y ago
This is about the equivalent of putting a single quote in a GET variable to detect sql injection. It tries to detect any bugs in the bug class, rather than a specific bug. The solution is different depending on what component is broken.
743.
▲
by
px43
14y ago
We use old rails, but not the affected activerecord components. Also, there are more yaml bugs in existence than the ones publicly talked about, and this would detect those issues as well.
744.
▲
by
px43
14y ago
Your scanner says 3 issues on my domain, but rails_xml_yaml_scanner instantly says none. Is your scanner scanning for more than the yaml thing? I don't really have access to just modify a production system on the fly to go through your ve
745.
▲
by
px43
14y ago
This is what they call this a 1024 bit Vernam Cypher in the movie "Swordfish".
746.
▲
by
px43
15y ago
Was his entire account really wiped? That is pretty horrifying. Can you give us a hint as to what sort of offence would justify destroying an online identity? I use my google identity for almost everything I do. If the crime this guy co