shiado

19 ms·

151.
by shiado 8y ago
Pro tip if you are a startup and want free security advice. Just sign up for all the bounty sites and for every single bounty just tell the submitter that it is a duplicate bug and pay them nothing, then hot patch it immediately and when th
152.
by shiado 8y ago
Given any arbitrary stored sequence of bytes, one can always devise an algorithm which converts those bytes into other meaningful sequences of bytes. This is interesting because it would appear that the liability of possessing CP on the blo
153.
by shiado 8y ago
Somebody should make a movement called 'serverful' that builds technologies that allow you to deploy a web service on any arbitrary server in any cloud that scales to the amount of resources the server is capable of consuming. You
154.
by shiado 8y ago
Perhaps their NSA PRISM code got mixed up with their user facing code? I'm not just joking, we all know Apple only pays lip service to privacy and got caught red-handed during the Snowden leaks. VOIP is indeed listed. https:/&#x2
155.
by shiado 8y ago
Wow it's such a mystery why American 'tech' sites would run propaganda like this. https://www.opensecrets.org/orgs/totals.php?id=D000041920&cy...
156.
by shiado 8y ago
The political power afforded to those who get to make calls about the psychological state of individuals is almost endless. I fully expect social media giants to use their data to classify the mental state of their users for political and s
157.
by shiado 8y ago
Looking at the commit, I am wondering if there is still a vulnerability in sending error messages. What if the malicious server DOS'd the client by sending an extremely long error message crashing the client when it tries to render it.
158.
by shiado 8y ago
Read up on Bourbaki, the original Satoshi. https://en.wikipedia.org/wiki/Nicolas_Bourbaki
159.
by shiado 8y ago
How does this work with JSON.stringify? Could I convert an object to a string and then scan the string to get the value of the private fields? (I am not great at the details of JS correct me here)
160.
by shiado 8y ago
Interesting site. Only thing I would change would be to find the attack cost based on block time. Ethereum has a block time of 15 seconds whereas Bitcoin has a block time of 10 minutes. This changes the amount of damage that can be done in
161.
by shiado 8y ago
If you ever want a fun simple math problem. Calculate how much hashing power you need to accumulate in order to 51% attack some of the lesser quality cryptocurrencies. It is very feasible for the right actor.
162.
by shiado 8y ago
I was trying to figure out what exactly this bill says. I encourage people look for themselves. https://www.aph.gov.au/Parliamentary_Business/Bills_Legislat... It is utterly and completely incomprehensible and it offer
163.
by shiado 8y ago
This is the best idea here. What's funny is that the news sites in their typical technical incompetence are actually way far behind in this battle. Spoofing user agent does not work anymore on most 'techy' sites who have qual
164.
by shiado 8y ago
That site isn't even served over TLS. I don't doubt somebody easily compromised it.
165.
by shiado 8y ago
Why stop with Gab? The CIA has a fucking verified account on Twitter. Why should a platform which not only tolerates but tacitly endorses organizations which perform extrajudicial torture and murder be allowed to keep their domain?
166.
by shiado 8y ago
Bogosort. It doesn't work (until it does).
167.
by shiado 8y ago
DNS, it is always DNS.
168.
by shiado 8y ago
Napster, Gnutella, etc... There are a lot of modern improvements such as much faster internet, much more storage, etc... Bittorrent doesn't quite achieve the easy discoverability of new content. I think it is time for a new piracy para
169.
by shiado 8y ago
As with any breach it is always interesting to see how the scope gets broadened day by day. Tomorrow there might be some headline like "Hackers actually took all of your location data, a timestamp of every breath you took in the last w
170.
by shiado 8y ago
If Facebook cares so much about influencing elections and interfering in democracy, why do they do it themselves? https://www.opensecrets.org/news/2018/04/fbook-lobbyists-gav...
171.
by shiado 8y ago
Apple was added to PRISM in 2012 and we have no reason to believe the programs they have been required to cooperate in have been dismantled, if anything we should assume they have been strengthened.
172.
by shiado 8y ago
It breaks how the web is supposed to function. There is no consensus on the utilization of subdomains and which ones are considered to be trivial. I could write an app which maps usernames to subdomains and Chrome would break this if a user
173.
by shiado 8y ago
Very few people can say they have built something as interesting as TempleOS. It was incredibly tragic to watch Terry's condition deteriorate over the years.
174.
by shiado 8y ago
From a legal perspective the idea of blocking companies from using open source code seems pretty interesting. It says 'subsidiary thereof', but aren't there fancier relationships between related business entities that can be
175.
by shiado 8y ago
I once found a bug for a company and reported it on Hackerone. Then they said it was a duplicate bug report and paid nothing but also immediately fixed it. My problem is most bug bounty programs put the power completely in the hands of the
176.
by shiado 8y ago
Find a way to contact the owner of the site and bait them with something like an acquisition offer, you might be able to use the email in the whois data if there is one. The point is to get the owner to click a link you provide, behind this
177.
by shiado 8y ago
I find articles such as this one to be absolutely fascinating. It seems that people like those in this article appear to be trying to gentrify what is mostly unskilled labour, adding some sort of intellectual doublethink that they pulled of
178.
by shiado 8y ago
Hopefully he wasn't bullshitting with those insurance files. I have been waiting for some quality leak drama for a long long time now.
179.
by shiado 8y ago
It would definitely be hard to do. And my personal suspicion is that Satoshi is a group of individuals, making such an analysis almost impossible. However there is the possibility that there is some sort of "linguistic fingerprint&quot
180.
by shiado 8y ago
Now try Satoshi Nakamoto with bitcointalk posts and papers in cryptography.

More ›