riyakhanna1983

11 ms·

61.
by riyakhanna1983 6y ago
A friend of mine has furnished his garage, and is renting it out as a private working space in his neighborhood.
62.
Researchers working on detecting malicious NPM packages(twitter.com)
1 points by riyakhanna1983 6y ago|0 comments
63.
Ossillate: We mitigate Open Source software supply chain attacks(twitter.com)
1 points by riyakhanna1983 6y ago|0 comments
64.
by riyakhanna1983 6y ago
Out of curiosity, what advantage would that provide?
65.
by riyakhanna1983 7y ago
Not only that, you could end up shipping malicious code to your customer.
66.
by riyakhanna1983 7y ago
What companies do you see paying for this service? Why would they prefer paying a company for this over a community-driven effort to curate secure packages.
67.
Defeating Scam/Robo Calls with Call Forwarding and AI(andrewchidden.com)
1 points by riyakhanna1983 7y ago|0 comments
68.
Defeating Scam/Robo Calls with Call Forwarding and AI(andrewchidden.com)
1 points by riyakhanna1983 7y ago|0 comments
69.
by riyakhanna1983 7y ago
Is it possible to eliminate the phone number? It was needed in old days, and many people today use over-the-top services like WhatsApp and FaceTime. Companies use phone number to track us and scammers use it to swindle us.
70.
by riyakhanna1983 7y ago
How do you spoof "dialing tone" on a smartphone?
71.
by riyakhanna1983 7y ago
They monitor read system calls, and therefore cannot deal with memory mapped IO. Concept of caching data is very old. Not sure if this is practical. Not sure how is this better than Apple app thinning?
72.
by riyakhanna1983 7y ago
We see a lot of security researchers time and time again finding security issues with mobile apps. Not sure if security matters more than adding features quickly.
73.
by riyakhanna1983 7y ago
SandFS does not rely on PTRACE, but uses eBPF. No TOCTTOU races. https://lwn.net/Articles/803890/
74.
by riyakhanna1983 7y ago
You get the point though. The idea is to create something that replaces phone number.
75.
by riyakhanna1983 7y ago
I know I'm repeating my argument, but why can't we create something that replaces phone number? Phone numbers are being used to track and scam people -- either through phone calls or text messages.
76.
by riyakhanna1983 7y ago
I'm wondering if it is possible to eliminate the use of phone number altogether? It was needed in old days, but today we use apps like Whatsapp and FaceTime.
77.
NPM team is introducing APIs to detect malware in packages(blog.npmjs.org)
2 points by riyakhanna1983 7y ago|0 comments
78.
by riyakhanna1983 7y ago
I'm wondering if its possible to eliminate phone number altogether, at least with your friends/relatives -- ask them to use FaceTime or WhatsApp for calls.
79.
Ask HN: How do you deal with phone scams?
5 points by riyakhanna1983 7y ago|7 comments
80.
Ask HN: How do you deal with phone scams?
1 points by riyakhanna1983 7y ago|0 comments
81.
Ask HN: How do you deal with phone scams?
1 points by riyakhanna1983 7y ago|1 comments
82.
by riyakhanna1983 7y ago
Im assuming that by "only" you mean there's limited impact. However, if the malicious package steals user keys, the harm can spread to the packages that may have received way more downloads.
83.
by riyakhanna1983 7y ago
SandFS could be used for lightweight custom sandboxing $HOME dir. It uses eBPF to let you insert custom checks. Check https://lwn.net/Articles/803890/
84.
by riyakhanna1983 7y ago
Another example is a sandboxing file system https://lwn.net/Articles/803890/
85.
by riyakhanna1983 7y ago
code is now available: https://github.com/sandfs/LibSandFS
86.
Lightweight Filesystem sandboxing with eBPF(lwn.net)
32 points by riyakhanna1983 7y ago|3 comments
87.
by riyakhanna1983 7y ago
Another use case for ebpf.
88.
by riyakhanna1983 7y ago
Makes sense. Thanks!
89.
by riyakhanna1983 7y ago
How do I prove better value compared to the competition w/o actually building something that is indeed better?
90.
by riyakhanna1983 7y ago
Just detecting publicly known n-day vulnerabilities accurately depending on the library versions being used. Not detecting new vulnerabilities.

More ›