Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
rosndo
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
50 ms
·
571.
▲
by
rosndo
5y ago
Exchanges decentralize trust, you don’t have to work with any specific exchange.
572.
▲
by
rosndo
5y ago
Leaving an email on your profile (the “about” field) might increase the chances of someone contacting you.
573.
▲
by
rosndo
5y ago
Oof. Some incredibly problematic stuff in this article: > Such controls might be expected to prevent a bank from opening accounts for clients such as Rodoljub Radulović, a Serbian securities fraudster indicted in 2001 by the US Securitie
574.
▲
by
rosndo
5y ago
> The bank not questioning the source of the money they deposit is the problem here How do you know that the bank isn’t questioning the source of money? In my experience these fancier banks tend to ask a whole lot of questions. > Vlad
575.
▲
by
rosndo
5y ago
Your comment implies that Georgia might have had better ways out of that situation, that’s probably not true.
576.
▲
by
rosndo
5y ago
Are you saying that all the publicly accessible satellite footage showing Russian troop movements is fake? Are you saying that the discredited Russian false flag attacks in separatist areas didn’t happen? (A fact anyone can verify by lookin
577.
▲
by
rosndo
5y ago
There are also a lot of people unwittingly participating in Russian disinfo ops. We should condemn them, but they’re usually not paid.
578.
▲
by
rosndo
5y ago
I’ve been to Russia, am married to a Russian, own homes both in Moscow and Kiev. Many Americans on HN who have never visited either country have a weirdly pro-Russian bend.
579.
▲
by
rosndo
5y ago
I think you’re just failing to comprehend what you’re reading. Nobody is suggesting that this would have a dramatic impact. During my time in the military I was in the armored brigade, muddy conditions of the spring really sucked. Nobody th
580.
▲
by
rosndo
5y ago
> Basically, he thinks the west precipitated the crisis by pushing to have Ukraine join NATO This is a downright lie. Anyone who follows NATO knows that there has been very little desire to allow Ukraine to join.
581.
▲
by
rosndo
5y ago
We shouldn’t spare much kindness for trolls like this. The facts are indisputable and known to everyone, Russia is preparing to invade Ukraine.
582.
▲
by
rosndo
5y ago
You misremembered to such an extent that the article actually said the exact opposite of what you thought it did? Impressive.
583.
▲
by
rosndo
5y ago
https://www.economist.com/the-economist-explains/2022/02/07/... Doesn’t really line up with your comment, but perhaps you’re talking about a different article?
584.
▲
by
rosndo
5y ago
This entire screed seems to be based around a truly bizarre idea that the economy is a zero-sum game. It is not.
585.
▲
by
rosndo
5y ago
Only way we’re going to see another exploit pack like blackhole is if it’s targeting Android devices which aren’t receiving security updates.
586.
▲
by
rosndo
5y ago
> with KYC very obvious and unlikely truly monetizable without consequences if exploited FWIW you can buy KYCed coinbase accounts for a few hundred bucks on forums like exploit.in But of course you’re kind of screwed if you discovered th
587.
▲
by
rosndo
5y ago
What about suspicious amounts of mentions of AWS and GCP?
588.
▲
by
rosndo
5y ago
But then most exploits that involve sending links would also be zero-click, just not deployed in that manner. I think this just goes to show how silly this new terminology is.
589.
▲
by
rosndo
5y ago
> A non zero click vulnerability can be mitigated by being cautious. A zero click vulnerability cannot. No amount of caution will save you when the exploit is injected into a major website. Why bother with such meaningless distinction? D
590.
▲
by
rosndo
5y ago
> And that genuinely bought us about a decade. The reason things are changing is because attackers have caught back up. Browser exploitation is back. Sandboxing is amazing and drove up the cost, but it is not enough - given enough vulner
591.
▲
by
rosndo
5y ago
Yep, good luck finding an useful exploit pack on crime forums now. The days of blackhole & co are long past, those people hacked far more people than those discussed in this article ever will.
592.
▲
by
rosndo
5y ago
Even a browser driveby attack is wormable if you use various social media for spreading. Few vaguely reliable RCE bugs aren’t wormable. Even ones requiring significant user interaction are wormable, office macros are wormable. Workable bugs
593.
▲
by
rosndo
5y ago
In my area (Westminster, Central London) we have a plenty of free parking for residents. Here, and in most of the country we have free parking for motorcycles. Even the paid government owned parking spots probably don’t tend to actually be
594.
▲
by
rosndo
5y ago
Client services like these are also expected to be attacked. iMessage isn’t meaningfully different from Apache, instead of listening on a TCP number it listens on your Apple user id.
595.
▲
by
rosndo
5y ago
I know how Monero works. In fact, I’ve made several commits. > The people in control of the funds won't need to answer any questions about the origin in order to cash out because the origin of the funds are not known to the network
596.
▲
by
rosndo
5y ago
There is no meaningful distinction between the two. > Zero-click describes an issue on a client system where usually a user would have to click something to trigger it, but doesn't as parsing/processing happens before the user
597.
▲
by
rosndo
5y ago
That’s correct.
598.
▲
by
rosndo
5y ago
Years ago we used to regularly have worms that’d infect millions of computers without any clicks at all. The truth is that “Zero-Click” hacks are becoming increasingly rare. But of course everything is new for journos unfamiliar with the fi
599.
▲
by
rosndo
5y ago
This sounds like some strange US bullshit to me, I’m not interested in importing what you’re selling.
600.
▲
by
rosndo
5y ago
We are discussing a lawyer who does estate planning, that’s something people do before they die.
More ›