rasengan

86 ms·

931.
by rasengan 7y ago
> failing to respond to a self-XSS report This really downplays the report or shows a complete lack of understanding. Getting access to someone's Paypal account which could potentially mean all their credit cards and banks is defini
932.
by rasengan 7y ago
“SATISFY COMPLIANCE CERTIFICATION REQUIREMENTS Meet pentest requirements for PCI DSS, SOC2 Type II, and HITRUST compliance certifications.” [1] [1] https://www.hackerone.com/product/pentest
933.
by rasengan 7y ago
> All of HackerOne's information that you cite is about them being PCI-DSS-compliant or having undergone a SOC2 Type 2 audit. Nothing you link to identifies them as a PCI-DSS auditing company. They are not. Please read the page agai
934.
by rasengan 7y ago
> Not anywhere on the page you linked. Read the page carefully - it specifically states they are an auditor approved org. Quote from page: “Meet penetration testing requirements for PCI DSS and SOC2 Type II compliance certifications with
935.
by rasengan 7y ago
HackerOne states they are a PCI-DSS auditor approved organization [1]. [1] https://www.hackerone.com/product/challenge
936.
by rasengan 7y ago
From this article [1], I get the feeling that PCI-DSS has always been selectively enforced. [1] https://www.anitian.com/the-failure-of-the-pci-dss/
937.
by rasengan 7y ago
PCI DSS requirements specify that companies have 30 days to refute or remediate externally reported issues [1]. If they don’t respond or fix some of these issues, then PayPal will no longer be compliant and all credit card companies will b
938.
by rasengan 7y ago
This major shift is well received by the tech community and appears to be an industry wide movement [1]. Looks like meltdown [2] and spectre [3] have run their course. Bravo to Cloudflare! [1] https://www.amd.com/system&#x2
939.
How to Claim Your Handshake Airdrop(gist.github.com)
2 points by rasengan 7y ago|0 comments
940.
by rasengan 7y ago
This reminds me of TetriNET [1]. This looks amazing, and I'm definitely going to give it a go. Thanks for sharing! [1] https://en.wikipedia.org/wiki/TetriNET
941.
by rasengan 7y ago
> lots of cash-strapped organizations whose Web presence depends on .org continuing to be operated as it was Actually, this is the problem. Cash-strapped organizations should not be forced to pay rent for something that should be owned
942.
by rasengan 7y ago
> The .org owners should not be allowed to rent-seek, but instead continue to provide the same level of service and fees that we have come to expect. When the centralized monopoly is all for raising prices, it becomes clear that market
943.
by rasengan 7y ago
> If you want to get rid of that problem, the TLD registration needs to be robust enough that everyone -- even high-school kids, even poor people, even weirdos who own dozens of websites -- can buy their own TLDs for all of them. I agree
944.
by rasengan 7y ago
> We don't know that every fortune 500 company in the world and every government in the world won't step in and snatch up every auction that gets posted. By design, there's no way for us to stop them from doing that. There
945.
by rasengan 7y ago
The problem isn’t just .org but instead you’ll have to look one step up - ICANN and the US government [1]. [1] https://arstechnica.com/tech-policy/2020/02/registrars-raise...
946.
by rasengan 7y ago
> Handshake doesn't solve that problem. TLD owners will still be able to rent-seek, and they'll still hold monopolies over anyone who buys from them. This statement is cryptographically false. Handshake does give ownership of n
947.
by rasengan 7y ago
The problem isn’t just ISOC [1]. Further, there were both petitions and RFCs that were completely ignored by both ISOC and ICANN. I was a major donor to ISOC and even attempted to question this and was completely ignored. [1] https:/
948.
by rasengan 7y ago
> Registering a TLD in Handshake may end up being significantly more complicated and significantly more costly than buying a .org domain today It’s significantly easier than the process is today. It’s very hard to get a TLD from ICANN as
949.
by rasengan 7y ago
Since TLD ownership will no longer be difficult (ICANN forces a 185k non refundable application fee just to see if you are eligible with no guarantees), people will have alternatives to .org, should .org continue to do what the people don’t
950.
by rasengan 7y ago
The majority of internet traffic goes to the top sites in the world [1]. To address these concerns, Handshake actually allows the top 100k ranked Alexa sites to claim their tld on Handshake with a DNSSEC ownership proof [2]. Finally, everyo
951.
by rasengan 7y ago
No need to apologize! Just pointing out that we do need an alternative web! Your questions are also excellent and pertinent, and it’s always good to analyze everything in detail to understand purpose and intent.
952.
by rasengan 7y ago
Attacking the messenger doesn’t make the message incorrect.
953.
by rasengan 7y ago
In Handshake, rather than renting your domain from .org or .com, you own your tld. This means that nobody will be able to charge you for using your own name. No more rent seeking or getting taxed by a pseudo government of the internet.
954.
Society Desperately Needs an Alternative Web(forbes.com)
19 points by rasengan 7y ago|14 comments
955.
by rasengan 7y ago
> We need an alternative to all this centralized control, and we need it now. The Handshake Naming System [1] provides a decentralized option, works directly with the existing legacy system so there will be 0 difficulty in the transition
956.
by rasengan 7y ago
I don’t want anyone to trust us. I want people to verify [1]. If you rely on trust in any system, be it VPN or other, you’re going to have a bad time. Secondly, Mark was not hired to PIA. He was hired to LTM and I posted a blog post about
957.
by rasengan 7y ago
Good luck with other VPNs. Let me know how that works out for you. Meanwhile, we will continue to stand true to our principles at PIA as the only proven no log VPN provider. I’m biased because I know PIA doesn’t log, but given all the VPNs
958.
by rasengan 7y ago
You’re welcome! Next up is transparency to our servers and the random audits!
959.
by rasengan 7y ago
PIA never hired Mark as the CTO, and he never worked at PIA.
960.
by rasengan 7y ago
This is exactly why we have become the most transparent VPN and are continuing to become even more so. 1. No other VPN provides its financials and management/ownership info publicly. We do. 2. All of our apps are open source. 3. We are

More ›