sihil

4 ms·

1. 1.▲
   Paradise papers: massive offshore leak includes details of Facebook and Apple(theguardian.com)

   5 points by sihil 9y ago|0 comments
2. 2.▲
   Band uses Facebook Live as a looping device(youtube.com)

   2 points by sihil 9y ago|0 comments
3. 3.▲
   by sihil 10y ago

   At some (hopefully in about a year) we hope to list theguardian.com in the preloaded HSTS list that ships with the browsers. This would prevent many of these attacks. Unfortunately this is some time away as there are a handful of other subd
4. 4.▲
   by sihil 10y ago

   Our HSTS header is set with an expiry of a year. Provided you've visited the Guardian in the last year then you will not be able to click through an invalid certificate, nor can an attacker intercept an HTTP connection as none will be
5. 5.▲
   by sihil 10y ago

   We're working on it! We're in the process of switching to a dedicated certificate that only contains Guardian properties.
6. 6.▲
   by sihil 10y ago

   An interesting attack and something that we'll consider. HTTP/2 should add a significant amount of noise to this, but ultimately adding random padding to every response or padding that compresses to a consistent length would be th