Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
ryanlol
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
63 ms
·
541.
▲
by
ryanlol
6y ago
If you look at their implementation the balance of probabilities definitely leans heavily towards “backdoor” rather than “not a backdoor”. You aren’t going to find any cryptographers anywhere who’d be willing to repeat your “They didn’t bac
542.
▲
by
ryanlol
6y ago
She offered Swartz 4 months for his crimes, why should she have any difficulty sleeping at night over this?
543.
▲
by
ryanlol
6y ago
Let’s not forget that Telegram backdoored their encrypted chat implementation and got caught.
544.
▲
by
ryanlol
6y ago
> The prosecutors office was working to pile on even more charges for a theoretical max of 50 years The theoretical maximum is utterly irrelevant. > guaranteeing him years in jail if he did not accept So you acknowledge that he defini
545.
▲
by
ryanlol
6y ago
Most federal CFAA penalties have been far lower than 5 years.
546.
▲
by
ryanlol
6y ago
Not in this universe anyway, nothing close to 35 years was ever on the table. To suggest otherwise is deliberate disinformation. The prosecutors had offered Aaron 6 months , he could’ve got less.
547.
▲
by
ryanlol
6y ago
Aaron never received any penalty at all. The government offered him 6 months in jail, with the opportunity to argue for further leniency. There’s a very good chance that he would’ve walked away with essentially nothing.
548.
▲
by
ryanlol
6y ago
You might want to open up a dictionary and look up the definition of “terrorism” again. Just doing something illegal with guns doesn’t quite qualify.
549.
▲
by
ryanlol
6y ago
The vast majority of servers on port 80 are not public websites that you want indexed by search bots.
550.
▲
by
ryanlol
6y ago
This is not a helpful message in the vast majority of cases. Lots of servers out there that always return 200
551.
▲
by
ryanlol
6y ago
Privacy, there’s no need for this information to be public. You could already sue the anonymous shell company if you wanted to.
552.
▲
by
ryanlol
6y ago
Yeah, porn is much more accessible on new reddit.
553.
▲
by
ryanlol
6y ago
The key touch is mostly irrelevant, much bigger win is that the protocol actually verifies the domain it’s authenticating against. A key touch on fakegoogle.com can’t be proxied to authenticate on google.com
554.
▲
by
ryanlol
6y ago
It’s always possible to come up with an extremely unlikely scenario where the data would he be extraordinarily valuable, but nobody is going to bet hundreds of thousands (or millions, to actually make it worth it for the ransomware gang) to
555.
▲
by
ryanlol
6y ago
Again, that’s only good for extortion. Only worth tens of thousands if you’re going to sell them.
556.
▲
by
ryanlol
6y ago
Most stolen data is very hard to sell for meaningful amounts. Such an “exit scam” would be a waste of time, you’d make more money by just ransoming one more company. When you’re earning (tens of) millions by extorting companies you aren’t g
557.
▲
by
ryanlol
6y ago
Chromium?
558.
▲
by
ryanlol
6y ago
Bitcoin is a “hobby currency” because drug dealers also use USD?
559.
▲
by
ryanlol
6y ago
Is venmo a “hobby currency” then?
560.
▲
by
ryanlol
6y ago
> Are you up to speed on the dark net markets? Yeah actually. If you think Empire was “the last one in use” you obviously have no idea what you’re talking about. There are more DNM transactions happening now than ever before. There are c
561.
▲
by
ryanlol
6y ago
Most studies seem to suggest that the evacuation ended up being much worse than doing nothing at all, no? For example: > “With hindsight, we can say the evacuation was a mistake,” says Philip Thomas, a professor of risk management at th
562.
▲
by
ryanlol
6y ago
> Fukushima like event What was the impact of the nuclear reactor there?
563.
▲
by
ryanlol
6y ago
There are vast amounts of professional drug dealers making their living from transactions using this “hobby currency”.
564.
▲
by
ryanlol
6y ago
In 2017 Doxagram made well over 100k selling a emails and phone mumbers associated with a relatively small list of instagram accounts.
565.
▲
by
ryanlol
6y ago
He’s really not. https://www.zdnet.com/article/unsecured-mongodb-databases-ex... You’d think that basic critical thinking would keep anyone from putting their name on this story.
566.
▲
by
ryanlol
6y ago
This is easily defeated by registering your car overseas, as is the case with most fast cars you see in London.
567.
▲
by
ryanlol
6y ago
This is an obfuscation technique, it’s not supposed to make sense.
568.
▲
by
ryanlol
6y ago
You can see the code in the tweet linked earlier. The hackers injected a small JS snippet on the page that fetches the value of —script from the CSS and evals it.b
569.
▲
by
ryanlol
6y ago
The purpose of the code is to steal credit cards. > why would you eval() CSS? It’s really as simple as “because you can”. This is just an obfuscation technique.
570.
▲
by
ryanlol
6y ago
Because the skimmer developer wanted to obfuscate their code a little?
More ›