skuhn

118 ms·

451.
by skuhn 12y ago
Whether it was located in her home or not, that building is probably quite secure given who she is and is married to.
452.
by skuhn 12y ago
Yep. Time to give up on anyone using a browser that depends on XP's SSL support. Much like SSLv3, they will get the message when the entire Internet stops loading in their browser.
453.
by skuhn 12y ago
Well, DHE is the only PFS option for IE on Windows XP. Vista, 7 and 8 all support ECDHE. IE8 on XP is basically totally busted: https://www.ssllabs.com/ssltest/viewClient.html?name=IE&vers...
454.
by skuhn 12y ago
It did do something when I clicked the Search button, but the design is indeed a total mess. The generic header image that makes it look like a domain squatter's landing page certainly doesn't help. And a phone number in a promine
455.
by skuhn 12y ago
So they did, I wasn't aware of that. This sort of proves my point from another comment: they stopped updating the list shorting after it was posted, and so all of these domains are forever stuck on the shame list. Viewing domains from
456.
by skuhn 12y ago
The reality here is that the cost to operate doesn't matter to Google. They can keep subsidizing Drive with revenue from Search Ads long after they have pushed Dropbox out of business, if they choose to do so. This is why Dropbox (smar
457.
by skuhn 12y ago
That's true. Have they contacted them now? Do these places which will only fix a problem if they're shamed into it actually know that they are on the wall of shame? More to the point: has a widespread public vulnerability ever bef
458.
by skuhn 12y ago
I think it's particularly misleading because some sites only run redirector services on domain.blah for the purpose of sending you to www.domain.blah. Yes the problem should still be remedied, but no customer data flows through this se
459.
by skuhn 12y ago
The guidelines on Server Side TLS are pretty good, and it is pretty similar to my own cipher list that I use in production. It and the config generator are a great resource to give to people who are less informed about TLS config. My only r
460.
by skuhn 12y ago
google.com was never going to be on the list, because the researchers specifically talked to Adam Langley at Google ahead of the public disclosure [1] and thus provided advanced warning. Some companies will always receive early warnings abo
461.
by skuhn 12y ago
Details are sparse, but the text file is literally bare domains and an IP that in my testing is always the A record for domain.blah. I don't think they're even looking at www.domain.blah, let alone actually crawling these sites or
462.
by skuhn 12y ago
Oddly, I've seen different results on subsequent visits to their site with the same browser (Chrome 40).
463.
by skuhn 12y ago
They have been known to be weak literally since their inception. The entire reason for export cipher suites was to create encryption that could be broken by the US government. No one should have permitted them since the export control was l
464.
by skuhn 12y ago
I really disagree with your perspective here, but I do concur that a fast fix is desirable for any impacted site. Notifying impacted sites ahead of public disclosure would have been a better move, and particularly ahead of public shaming an
465.
by skuhn 12y ago
I can't believe that they are outright naming vulnerable sites, that is really classless. Even if the data could be gathered by an attacker now that a vulnerability is known, you don't need to go the extra mile to provide it.
466.
by skuhn 12y ago
The GPU instances use Nvidia GRID K2 cards, which cost $3000 in qty 1. AWS only runs two GPU instances per card, so they need to recoup the cost from fewer instances than typically share components. Nvidia's high end cards (GRID, Tesla
467.
by skuhn 12y ago
Cloudfront is cheaper, that is true. The same 500mbit/s outbound via Cloudfront is $381,173 for 3 years at list prices. I think that this has given Cloudfront an enormous pricing advantage in the CDN market, considering that using any
468.
by skuhn 12y ago
It's difficult to top AWS just based on an apples-to-apples comparison of buying servers versus turning up EC2 instances. EC2 is pretty price aggressive if you know what your needs are, identify an instance type that fits well, and res
469.
by skuhn 12y ago
Well then, I look forward to it happening any day now.
470.
by skuhn 12y ago
It's not just taking traffic into account, which it can (sort of) already do. They need to actually use the accident data. Use a diverse set of routes to get to the same place, so that there isn't one path for every car on the roa
471.
by skuhn 12y ago
Uber is already hamstrung by their inexperienced drivers's reliance on Google Maps for navigation. It is in no way equivalent to actually knowing your way around. The difficulty of making an urban self-driving car aside, Google would h
472.
by skuhn 12y ago
No, and doing that would ultimately destroy Marriott's business. I think Airbnb's investors would be wise to think about that.
473.
by skuhn 12y ago
I think it's a bit premature to count Uber out. They have an absurd amount of money in the bank, and they take on a very small amount of the risk of their business. I don't think that this data breach will have the slightest impac
474.
by skuhn 12y ago
Airbnb's valuation seems totally irrational to me, given the nature of their business. Still, I would think any business would like to double their valuation in a year. Mariott should convert all of their hotels into apartments, fire a
475.
by skuhn 12y ago
It sounds like they realized the API was improperly exposed on 9/17/2014, but didn't necessary know if it had ever been accessed by an unauthorized request. I could see it taking a while to find one bad request in the entire
476.
by skuhn 12y ago
Makes sense, it does seem like they would have a harder time retaining people if they moved to Boise. That would be pretty sweet if a giant tech company like Google packed up and left Silicon Valley. It's going to take big moves like t
477.
by skuhn 12y ago
Yes, they will follow Google to Sunnyvale or Cupertino or any other of the five to ten towns within a 20 mile drive from Mountain View. No one is so beholden to their almost indistinguishable south bay suburb that they wouldn't venture
478.
by skuhn 12y ago
This is the startup secret weapon: they can hire people that Google (and other large companies) cannot. When there's no shortage of work to do, and hiring is a constant struggle, you can hire as many good people as show up at the door.
479.
by skuhn 12y ago
You really need at least one alternate (from a different company!), even though that reduces security. 2 is still better than 150. I'm surprised that Google would accept a one hash pin, but I guess they'll let you shoot your own f
480.
by skuhn 12y ago
I agree with you, from a day-to-day standpoint there really is nothing to be done and little point in worrying about it. The only solution is to stop using technology, and that proposition isn't very attractive. While the ideal solutio

More ›