ryan-c

64 ms·

691.
by ryan-c 11y ago
Didn't burn down Google campus or shoot my dog, +1 star. Joking aside, I'm somewhat more likely to read a two star review vs a one star review because a lot of the one star reviews are whiny rants and not actually helpful.
692.
by ryan-c 11y ago
I could see this as a browser plugin - professional reviews of popular products where there are many, many brands of wildly differing quality such as cables and chargers. The problem is it seems that it'd need to be a browser extension
693.
by ryan-c 11y ago
My assumption is that he's working on some sort of project where he's buying many cables on Google's dime to test them, then reporting his results on Amazon. My worry would be the cables that get good reviews being switched o
694.
by ryan-c 11y ago
I run my own mail server, and would happily risk a few cents per email to not have to deal deliverability bullshit. I'm a little sad hashcash never caught on for email.
695.
by ryan-c 11y ago
I got around 50k hits to my "stupid cert tricks"[0] page from a combination of twitter, reddit and hackernews over a period of 48 hours. My site is static content generated with pelican[1], served by nginx and hosted on a $10&#x2F
696.
by ryan-c 11y ago
Anyone know of anything like this that integrates well with ZNC?
697.
by ryan-c 11y ago
I wonder how this would have gone if they disclosed something besides a disability in the "control" coverletter that wasn't relevant to the job. I suspect they'd still find discrimination, but perhaps a bit less.
698.
by ryan-c 11y ago
I would really like to see that play out in court. The fix (for the companies) would be to simply include the text of the contract (or maybe even just a hash) in the form submission.
699.
by ryan-c 11y ago
dd if=/dev/zero of=/dev/sda bs=1M & would be worse. `shred` is slow.
700.
by ryan-c 11y ago
You can get a blood test for IgG antibodies without an outbreak that will differentiate between HSV-1 and HSV-2.
701.
by ryan-c 11y ago
I figured you'd look at the cipher suites and have a list of fingerprints for ones that needed special handling. I'm pretty surprised that WinXP Chrome falsely claims support for ECDSA... Does the switch to BoringSSL fix that, or
702.
by ryan-c 11y ago
I have somewhat mixed feelings regarding SHA1 support. On the one hand, it is useful in some cases to support legacy clients that "can't" upgrade. On the other hand, I don't feel too bad about cutting off clients that ar
703.
by ryan-c 11y ago
"above my pay grade" is an odd phrase to use considering that your profile says you're the CEO, but I'm guessing you mainly mean you're not familiar with the details? I'm pretty sure I know exactly what you&#x2
704.
by ryan-c 11y ago
No mitigation is required. Part of the data signed by the server certificate in the handshake is the entire ClientHello message. If a MitM attacker did a downgrade, they would have to change the ClientHello, and then the client would notice
705.
by ryan-c 11y ago
Are you looking at anything beyond the SignatureAlgorithms TLS extension? That is the obvious solution, but I know there are a few browsers that support sha256 certificates that don't send that extension.
706.
by ryan-c 11y ago
I think BGP hijacks have actually been done against bitcoin.
707.
by ryan-c 11y ago
250,000^4 is obscenely generous. A typical person's vocabulary is maybe a tenth that, and people will be biased towards common words.
708.
by ryan-c 11y ago
Does anyone know if the "relay network'[0] addresses this? It seems like it should, and I think most of the major pools/miners are using it already. 0. http://bitcoinrelaynetwork.org/
709.
by ryan-c 11y ago
I do not - I mainly do arcane infosec work and only in the past two years or so (I've gotten better with javascript in that time) have I been doing non-trivial client side stuff. Consequently, most of my professional contacts are in in
710.
by ryan-c 11y ago
Why is an email address required?
711.
by ryan-c 11y ago
What you can do with some CDNs is have a self-served loader that pulls the files from the CDN using XHR (requiring CORS headers...), verifies the content hash, then injects it into the page if it looks good. I have a PoC on github https:&#
712.
by ryan-c 11y ago
ISTR it was more like: Server: I support the following auth methods ["password"] Client: Cool, let's use "none" Server: Okay.
713.
by ryan-c 11y ago
If someone spoofs a CNAME to evil.com in response to DNS query for google.com, your browser will not accept a certificate from evil.com as valid for google.com, whereas if you send mail to gmail.com and someone spoofs an MX record for mx.ev
714.
by ryan-c 11y ago
Certificates for SMTP servers are meaningless without DNSSEC because crossdomain email servers are a thing.
715.
by ryan-c 11y ago
San Francisco has something like this as well; http://www.sfgate.com/news/article/Parking-tickets-by-the-tr...
716.
by ryan-c 11y ago
> I swear I've seen a similar project like a decade ago, somewhere. Probably "Flo Control"[0]. There was a system to get a silhouette of the cat's head to identify whether it was carrying anything. 0. https:/&#x
717.
by ryan-c 11y ago
There was recently a case where someone tried to claim a violation of the third amendment, but that claim was rejected. Some interesting arguments. https://www.washingtonpost.com/news/volokh-conspiracy/wp/201.
718.
by ryan-c 11y ago
I have no idea what the legality of it would be, but it probably wouldn't make sense to accept or keep someone with an expensive-to-treat condition in small pool like that because there may not be enough other members to absorb the cos
719.
by ryan-c 11y ago
From what I'm reading, it sounds like the p2p insurance is intended to cover a portion of the deductible. This would allow the members of the pool to choose higher deductible plans than they would otherwise be comfortable with. If some
720.
by ryan-c 11y ago
Is there any way to unblock enough to allow contributor to work, but still block any actual ads? I'm not willing to fully unblock it unless they will promise that I will see zero ads.

More ›