rasengan

85 ms·

901.
by rasengan 7y ago
This was designed to give a fair chance to all names. Each name is released on a release schedule where you can take the hash of the name % 52 to determine which week it will be released. All names will be released within a year. When it’s
902.
by rasengan 7y ago
This service is a POC for accountless web and dns hosting using only signed messages for name and ownership verification. To get a Handshake TLD, you will need to buy one on the handshake blockchain [1]. If you lose your key, unfortunately,
903.
by rasengan 7y ago
SS: Handshake names have addresses (and keys) associated with them. Because of this, it provides a unique method of authenticating against ownership of a domain without any interaction other than the blockchain and signature verification.
904.
Show HN: Free web hosting for handshake TLDs, no account required(github.com)
44 points by rasengan 7y ago|12 comments
905.
Show HN: Free Handshake TLD Hosting, no account required(github.com)
5 points by rasengan 7y ago|0 comments
906.
by rasengan 7y ago
This is a very impressive story and equally impressive work! Keep it up!
907.
by rasengan 7y ago
Rather than trust a search engine and what it does with data, private search [1] never gets identifiable information, period. [1] https://private.sh
908.
by rasengan 7y ago
We need to take this as a lesson and build redundant networks from mesh to satellite and so on. I can’t even imagine having no internet for 7 months.
909.
A vuln in NordVPN's payments platform allowed anyone to view users’ info(theregister.co.uk)
20 points by rasengan 7y ago|0 comments
910.
by rasengan 7y ago
> explanation for what Handshake is Handshake is a decentralized naming and certificate authority [1]. It decentralizes the DNS root and allows for the people of the internet to own names instead of leasing from a TLD provider like Veri
911.
by rasengan 7y ago
Encryption is a form of free speech [1]. [1] https://www.eff.org/deeplinks/2015/04/remembering-case-estab...
912.
by rasengan 7y ago
That's really impressive. Thanks for sharing!
913.
by rasengan 7y ago
> I set something similar up to mail me PDFs while I am in federal prison. That's amazing. I would love to hear more.
914.
by rasengan 7y ago
Anyone that gets in the way of you reaching your goals is not your teammate.
915.
by rasengan 7y ago
That’s over 10pct! It’s still very impressive! Great job, and thank you so much!
916.
by rasengan 7y ago
Stats[1] indicate about 1.5-1.7 [2] websites exist. This would mean letsencrypt certificates make up more 2/3 of the internet! [1] https://www.websitehostingrating.com/internet-statistics-fac... [2] https://
917.
by rasengan 7y ago
All countries owned by “her majesty” are anti encryption. Look up the Queen of New Zealand - many know but I’m sure some will be surprised. Sadly, that same world leader is the strongest anti encryption and censorship advocate.
918.
by rasengan 7y ago
> Do I think it's possible PayPal had an incomplete fix or had a regression or an organizational screwup of some kind? Absolutely, that is possible. Great! You’re in agreement!
919.
by rasengan 7y ago
> This seems curiously confident given that just about every single one of your many comments on the other story was inaccurate or a misinterpretation. So you don’t think that sending a bug bounty reward a year ago to a security research
920.
by rasengan 7y ago
I’m wondering, is the US a phased roll out or is this in light of government mandated censorship in the UK, Australia, New Zealand, India, China, etc.?
921.
by rasengan 7y ago
> having “no plans” to enable this outside the USA seems a bit disingenuous. Other countries have censorship (China, UK, New Zealand, etc) whereas there is none in the US. I wonder if that’s why?
922.
by rasengan 7y ago
From the article: “ “Will you take a corporate check which I promise to put in the mail?” She was sure this wouldn’t work. “You will?!” ” ————————- What if a check was never sent?
923.
by rasengan 7y ago
From the article: “We reported this in February 2019 to PayPal via HackerOne,” they say. “After an initial rejection and several discussions, PayPal paid a bug bounty of $4,400.” The pair have not heard from PayPal, they say, since April 20
924.
by rasengan 7y ago
Same difference. Anti account take over and account authentication, because similar methods would be deployed (i.e., multifactor authentication, heuristic, etc.)
925.
by rasengan 7y ago
> This feature is not 2FA > anti-ATO ATO [1] is authentication by definition, but again, depending on how it's implemented, not usually the best form. [1] https://csrc.nist.gov/glossary/term/authorizatio
926.
by rasengan 7y ago
> No. Please explain which parts of my comment are false? Thank you.
927.
by rasengan 7y ago
> They are getting access to the accounts of people who do not have 2FA enabled and whose credentials have been stolen. Ok, first, and foremost, don't you think it's a problem if there are stolen accounts? Wouldn't it mak
928.
by rasengan 7y ago
The former; the author's report (short of seeing what was intentionally left out for proper disclosure reason) is credible, and Paypal's failure to respond/remediate the issue is improper. Getting access in this way to users&
929.
by rasengan 7y ago
> 1. They can suppress a new-computer login challenge (they call this "2FA", but this is a risk-based login or anti-ATO feature, not 2FA). 2FA means 2 Factor Authentication. This works by forcing one to use two different forms
930.
by rasengan 7y ago
> Paypal has one of the larger application security teams in SFBA. It's not the size that matters, but how you use it that counts.

More ›