ryan-c

57 ms·

601.
by ryan-c 11y ago
> If you have already MitM'ed someone, you can also modify the signature to match the payload. Not without the signing key.
602.
by ryan-c 11y ago
I'm not sure this is actually useful to cryptolockers. They could use it to sell the private key to a particular public key, but I don't think they can prove that * That public key was used to encrypt the files * Even if they can
603.
by ryan-c 11y ago
Here's my attempt at explanatory comments - the ScriptPubkey is a program (written in Bitcoin Script) which is attached to an output of a Bitcoin transaction - parameters must be provided that make it return "true". # C
604.
by ryan-c 11y ago
This is really cool. I got to watch Sean Bowe's side of the transaction at FC'16 in person. I think I saw somewhere that a faucet that pays for sudoku solutions is being worked on. From reading up on this a little (and confirming
605.
by ryan-c 11y ago
Honestly, when I'm dealing with a trusted merchant, Bitcoin is less painful than a credit card, especially if there's nothing to ship (e.g. with Namecheap and Prgmr). I have Mycelium on my phone - I scan the QR code, punch in my p
606.
by ryan-c 11y ago
That does not work - I have to log in with the command line client, which fails because I it doesn't have GPG sign with the correct key. Edit: Managed to get it to work by restoring a backed up keyring from before I updated my keys.
607.
by ryan-c 11y ago
Random unrelated keybase question: I generated new subkeys with GPG recently - how do I update my keybase account? The master key has not changed.
608.
by ryan-c 11y ago
I also had six invites, my email is in my profile, and I will either edit this comment or reply to myself when I'm out. Edit: All out. I you got one from me, please use it within 24 hours, otherwise I will reclaim it and give it to s
609.
by ryan-c 11y ago
I would be really interested to see how they're making the filesystem cross platform if they're supporting Windows. I see in their 'hiring' page they mention FUSE which would give Linux and OS X support.
610.
by ryan-c 11y ago
> Stoozing. Find a credit card with 0% interest on balance transfers. Stick the money into a savings account. Or, if you like risk, on a horse. Need a good credit rating and decent savings rate to make more than a few hundred a year thou
611.
by ryan-c 11y ago
Many of the obscure WebKit browsers do not validate certificates on subresources, which allows MitM attackers to replace third party scripts with malicious ones. Some of them do this without even any UI indication that there is a problem. I
612.
HTTPS subresource validation fail(rya.nc)
4 points by ryan-c 11y ago|0 comments
613.
by ryan-c 11y ago
Maybe having a subdirectory helped.
614.
by ryan-c 11y ago
I just flagged this due to the stored cross-user XSS vector. Doubt anyone will drop 0day on this, but the alerts are annoying, and someone will probably play sound.
615.
by ryan-c 11y ago
I had mine on http://[subdomain].rya.nc/wedding/ and had it printed that way with the wedding invitations and even my less technical relatives didn't seem to have problems with it. Did you have a bare domain or di
616.
by ryan-c 11y ago
People used to use Sheevaplugs for this, e.g. https://www.pwnieexpress.com/product/pwn-plug-elite/
617.
by ryan-c 11y ago
The Facebook link you provided is not publicly viewable - I get a "Sorry, this content isn't available right now" error.
618.
by ryan-c 11y ago
I remember reading about it back in the day, it was aalib and mplayer, but the conversion was done frame by frame with a patched version of aaview. Here's the write-up of how it was done: https://web.archive.org/web&#x2
619.
by ryan-c 11y ago
Really? I'm pretty sure that when CA passed the smartphone kill switch law all smartphones got kill switches.
620.
by ryan-c 11y ago
In California, PG&E has tiered pricing such that even a moderate user in the bay area will probably be paying a marginal rate of ~$0.35/kWh.
621.
by ryan-c 11y ago
If you want to stop this, require a specific, non-standard, RSA key size for each access group. They'll have to generate new keys. For ECC, maybe ssh certificates will work?
622.
by ryan-c 11y ago
I have this: # IdentityFile magic, should be placed at very end of file Host * IdentityFile ~/.ssh/keys/id_ecdsa_%r@%h IdentityFile ~/.ssh/keys/id_rsa_%r@%h IdentityFile ~/.ssh/k
623.
by ryan-c 11y ago
Seems fairly similar to sneakemail[0] (which I have been using for more than a decade), but with more polish. Looks like Throttle's basic service doesn't handle attachments or replying (sneakemail does), which is unfortunate. 0.
624.
by ryan-c 11y ago
There is a pricing link at the top of the page.
625.
by ryan-c 11y ago
Can you elaborate on "damaged"?
626.
by ryan-c 11y ago
I've used Visa Signature concierge a couple of times and have found it to be very 'meh'. The last time I called them they seemed to have limited the scope of what they'd do to making reservations and travel arrangements.
627.
by ryan-c 11y ago
I've been on T-Mobile for quite a while. I was just in Germany for a week, and was absolutely thrilled not to have to buy a local prepaid sim card. I seemed to be on 3.5G networks but it said it was throttled to 128kbps. The fees for u
628.
by ryan-c 11y ago
Interesting. I was on a Lufthansa flight last week and they had a call asking for a doctor/emt/paramedic on the PA, however the flight was not diverted. I'm not sure what happened. This was on an 11 hour SFO-FRA flight.
629.
by ryan-c 11y ago
The question of future control is why, being involved in patents without some form of contract in place that prevents abuse being in place, bothers me. I maybe trust current management not to be dicks, but trusting all plausible future mana
630.
by ryan-c 11y ago
They can file and be granted a patent on your work against your will. The system specifically accounts for companies that need to file a patent on the work of a "non-cooperating inventor". As an employee, your refusal will probabl

More ›