sasas

15 ms·

121.
by sasas 9y ago
Thomas, I'm sure I'm speaking on behalf of many on HN - your ability to tirelessly battle through incorrect information on HN revolving around security related posts is commendable and always appreciated. As they say, patience is
122.
by sasas 9y ago
There is a big difference. A compromised device would mean that _everything_ you do is being open to surveillance. Passive taps limits the eavesdropper to rely on either the transport being unencrypted or vulnerabilities in related software
123.
by sasas 10y ago
Amazing work! Was the audio synthesis also done in the GBA in the above demo?
124.
Researcher who posted bank DNS details threatened with jail for computer fraud(gofundme.com)
2 points by sasas 10y ago|0 comments
125.
by sasas 10y ago
> or that someone can pwn a tech-literate person with a phishing email when he's expecting it. It appears the phishing email attempted to target the fact that he was in a more heightened state of being 'security aware' at
126.
by sasas 10y ago
Your link certainly addressed the question! Thank you.
127.
by sasas 10y ago
> But I do not agree with the claim that this is interesting in this context as it seems irrelevant to the discussion The discussion appears to be on the topic if we assume the topic is VX or nerve agents in general. I assume this is in
128.
by sasas 10y ago
Interesting tid-bit from Wikipedia [1] In fiscal year 2008, the US Department of Defense released a study finding that the U.S. had dumped at least 124 tons of VX into the Atlantic Ocean off the coasts of New York/New Jersey and Flori
129.
by sasas 10y ago
It already exists - https://shodan.io
130.
by sasas 10y ago
Don't leave us hanging! What happened ?
131.
by sasas 10y ago
> A big discrete GPU box that works over thunderbolt is just a gimmick. A valid use case for this could be someone travels a lot who wants a thin, lite laptop but when they are home, they want to play AAA game titles. How heavy are gamin
132.
by sasas 10y ago
Based on your comment, is then Nokia, Ericsson, Siemens, ex-Nortel, Huawei, Cisco are all responsible for mass murder? Who in these organisations is responsible? The systems engineer, the project manager or the CEO? Or the developer who wro
133.
by sasas 10y ago
Foreign companies are now facing the implications of this now. The penalties for non compliance can mean managers can face detention or monetary penalties. Now that Airbnb moved some of their infrastructure into China for data sovereignty r
134.
by sasas 10y ago
The majority of telco products have traditional legal intercept baked in already, it's just a licensed feature. While there are additional costs (training, supporting infrastructure for storage, connectivity for government agencies to
135.
by sasas 10y ago
Thanks for sharing, really enjoyed the video. Isn't it amazing that Ericsson were achieving nine 9's (31.5 milliseconds downtime per year) [1], using Erlang in the AXD switch back in 1998 [2]. [1] https://en.wikipedi
136.
by sasas 10y ago
I know someone who was in a very similar situation and was getting turned down month after month. He made the decision focus on more enterprise technologies (.NET) and invested time in learning and building things with C#. Eventually things
137.
by sasas 10y ago
Thanks. Not looking at HA with DB. I took a look at Riak briefly - looks interesting.
138.
by sasas 10y ago
> Not too many companies have the sort of requirements you're looking at Telco is always the odd ball with redundancy. This requirement is somewhat relaxed. Generally mobile core networks are designed for 5 nines with geographical
139.
by sasas 10y ago
Looking at four 9s (4.38 min a month). Solution must be self hosted and not reliant on commercial cloud infrastructure.
140.
by sasas 10y ago
Thanks for the contribution. What is the preferred approach for geographical redundancy in an active/standby site configuration? F5 offer BIG-IP GTM. I'm wondering if there are good open source equivalents?
141.
by sasas 10y ago
Please do not plagiarise people's comments.
142.
by sasas 10y ago
In the words of Bruce Schneier - "Security is a process, not a product" [1] Process that could help mitigate this bugs - - Security / safe coding training - Code audits - Testing - static and dynamic - Policies that are commu
143.
by sasas 10y ago
There is a name for this cognitive bias - 'Baader-Meinhof Phenomenon' or 'Frequency illusion'. "The illusion in which a word, a name, or other thing that has recently come to one's attention suddenly seems to a
144.
by sasas 10y ago
Some ideas - - Outsourcing offshore to lower costs through a 3PP - Junior developers with inadequate training - Sheer incompetence Incompetence can be extended to management - i.e. a lack of policies and auditing to undertake due diligence.
145.
by sasas 10y ago
Being able to directly connect to internal addresses from your local dev machine can have it's advantages. Consider the situation where you need to connect to services across a multitude of hosts in an internal network. Using static SS
146.
by sasas 10y ago
Sure. There are also other instances where the Yubis keys maybe exposed, such as when using their OTP protocol which requires the keys stored in a validation server (either theirs by default, or your own [1]) [1] https://www.yubi
147.
by sasas 10y ago
If you program your own keys into the Yubi, then you know them and can archive them for reprogramming on another device. You can do this with the Yubi Personalisation tool [1] for a few modes the device supports. [1] https://www.
148.
by sasas 10y ago
Also a possible reflection on this fact; the site may not have been designed to handle the influx of traffic we just sent it from HN as it's now unreachable. Here is the archive.org mirror: https://web-beta.archive.org/
149.
by sasas 10y ago
Could you elaborate further on the situation without compromising details on the person? I.e. Who gave them the third degree and under what circumstances were they asked for their twitter account ?
150.
by sasas 10y ago
Further backing up the parent commenter's statement that people are generally nice to each other.

More ›