secalex

11 ms·

61.
by secalex 12y ago
Android botnets are very valuable because they use mobile network IPs that confuse fraud and login classifiers that use ASN or GeoIP.
62.
by secalex 13y ago
Thank you for your data. I'm hoping to do a talk this fall with detailed stats after we have a whole year on this platform, but to a first order approximation your ratios do not look far off from our experience.
63.
by secalex 13y ago
Hey, HN, CISO of Yahoo here, typing on a phone at a kid's birthday, so excuse the formatting. We run a very progressive bug bounty program that allows bugs like this to be posted publicly. Every once in a while we might miss something
64.
CryptoCat iOS Application Penetration Test [pdf](isecpartners.github.io)
168 points by secalex 13y ago|131 comments
65.
Symantec pushes back on Certificate Transparency proposal from Google(groups.google.com)
3 points by secalex 13y ago|0 comments
66.
by secalex 13y ago
Almost certainly this means they are supporting ARMv8: http://www.arm.com/files/downloads/ARMv8_Architecture.pdf From the deck: -32bit RISC Instructions -64bit GP registers -64bit operands -64bit pointers
67.
by secalex 13y ago
Thank you for catching the spelling mistakes. The point of that slide is that trade secret theft is a very old problem, and that there is a long history of criminal and civil case law to look to when punishing that kind of action. Those ind
68.
by secalex 13y ago
Tom, I missed you at Defcon for multiple reasons, not the least being the opportunity to get your feedback on the talk as delivered. Maybe we can run a pan-NCC internal conference this fall and see what everybody else is working on. Chicago
69.
by secalex 13y ago
I don't remember what I got the first couple of times I answered honestly. I do remember manipulating the system to become a Paladin, which perhaps negates the entire point of the morality system and makes me a rogue in real life.
70.
by secalex 13y ago
Thanks. Still my favorite game ever.
71.
by secalex 13y ago
The EFF's CFAA reform letter. They had folks in the room to gather paper signatures from attendees, and remote folks will eventually get a chance to sign electronically. https://www.eff.org/deeplinks/2013/08&#
72.
The White Hat's Dilemma(docs.google.com)
255 points by secalex 13y ago|101 comments
73.
by secalex 13y ago
Original slide deck here: http://isecpartners.com/media/105564/ritter_samuel_stamos_bh...
74.
A Taxonomy of PRISM Possibilities (unhandled.com)
6 points by secalex 13y ago|1 comments
75.
by secalex 13y ago
At least tulips had some innate utility.
76.
Amazon's Quest for Web Names Draws Foes(online.wsj.com)
2 points by secalex 14y ago|0 comments
77.
by secalex 14y ago
Paypal is a long-time client of my consulting firm, and several of their trust and security people are good friends. They are not stupid or malicious. Unlike the author, they are cognizant of a basic truth about the Internet: In any situati
78.
The Truth About Aaron Swartz's "Crime"(unhandled.com)
837 points by secalex 14y ago|89 comments
79.
by secalex 14y ago
Try the Amritsar to New Dehli overnight. For the real experience, try second class, where my friend and I shared a small cubby with a family of five (all flights cancelled for weather, no first class left). That'll make you appreciate the
80.
Watch ICANN's Raffle for new gTLDs(newgtlds.icann.org)
3 points by secalex 14y ago|0 comments
81.
by secalex 14y ago
You clearly have never been to an ICANN meeting. The best part of that organization is that it is way too dysfunctional and inefficient to lead any kind of conspiracy.
82.
by secalex 14y ago
iOS is made out of Unicorn feathers and does not take any of the iPad's advertised space.
83.
by secalex 14y ago
To put it another way, you aren't going to see a lot of these at SXSW or at Ritual Coffee, but watch out National Association of Pharmaceutical Representatives!
84.
by secalex 14y ago
If that price included a full version of Office I would definitely get it myself. As priced, it's a no-brainer for the executive set who like to be seen with their iPads but get real work done on 5 pound, AD-joined, IT provisioned Dells. Th
85.
Amazon Announces new Data Warehousing Product(aws.amazon.com)
286 points by secalex 14y ago|93 comments
86.
by secalex 14y ago
What do you want to know?
87.
by secalex 14y ago
I've had mine for 3 weeks, and so far I haven't been any more distracted than I was in my last Japanese semi-luxury sedan. The most common actions (media pause, volume, skip and climate control) are on the wheel, and using the map with mul
88.
by secalex 14y ago
Liberty University is in no way a "microcosm of the US". If anything, it is a Christian version of the Islamic Republic, hidden in Virginia.
89.
by secalex 14y ago
Yes, the Tesla charging port has a data link that allows Superchargers to speak directly to the battery's firmware. There is almost certainly "Tesla DRM" built into the handshake between the S and the Supercharger, although like all DRM it
90.
by secalex 14y ago
That doesn't seem clear from the coverage so far. Obviously it has to be USB in the box, but the name hints that there would be a Thunderbolt option at least.

More ›