snowwolf

18 ms·

121.
by snowwolf 8y ago
This is a steady trend that is down to numerous factors the least of which I’d ascribe to overprotective parents. I saw a map a while ago showing the reducing radius from the home children could range over the last 100 years. And a lot of i
122.
by snowwolf 8y ago
I think the point the parent is trying to make is why allow options 1-3 (disable protected mode) at all? Why not require only option 4 to accept non localhost connections? Although that doesn’t stop someone setting up an install script with
123.
by snowwolf 8y ago
They aren’t trying the same account multiple times. Well they may be conincidentally (if the user uses a unique password per site and has been breached from multiple sites so appears in the breach list multiple times with different password
124.
by snowwolf 8y ago
Perhaps an example will help. Lets say you have IP throttling/rate limiting. And you have it set to an extremely conservative limit - 1 sign in attempt every hour. This is great for the brute force threat - 24 passwords a day can be at
125.
by snowwolf 8y ago
Because the email/password combination is already known. From a previous breach where you used the same combination. So the attacker needs exactly 1 attempt to get into your account. And with the ease of using botnets now, they can get
126.
by snowwolf 8y ago
Because chances are, if you are using a password that is in the list, it's because either it's an exceedingly common password (and you really shouldn't be using it) or you've used it before multiple times and are probabl
127.
by snowwolf 8y ago
This is a common misunderstanding. GDPR makes no mention of citizens or residents. It just says “data subjects IN the union” https://gdpr-info.eu/art-3-gdpr/
128.
by snowwolf 8y ago
I think you are missing some context here. Firstly if the company is established in the union then they need to be compliant for all their users no matter where they are [1] (so US resident, EU resident, whatever are equally protected). So
129.
by snowwolf 8y ago
Equally, if they had meant resident, they would have stated that.
130.
by snowwolf 8y ago
The misunderstanding of this is widespread. GDPR does not make any mention of EU citizens OR residents. It only says "data subjects who are IN the Union". See my other comment for more detail: https://news.ycombinator.c
131.
by snowwolf 8y ago
As long as you are telling the truth about only sharing anonymous and aggregate data with publishers and advertisers, I can't see anything in your privacy policy that would preclude you from being GDPR compliant right now.
132.
by snowwolf 8y ago
That is incorrect. GDPR makes no mention of EU citizens or residents. The 2 main groups it applies to are: 1. activities of an establishment of a controller or a processor in the Union (so if the company is in the EU, ALL processing has to
133.
by snowwolf 8y ago
The closest I've come to true silence was trekking into the Sahara desert. At night I went about a km from the camp and sat in the dunes. No wind, no insects, no sound at all. And I have to say, it was unnerving. Your breathing, your h
134.
by snowwolf 8y ago
If you’re setup as a non-profit and you reinvest all profit, what do you do if you get to the point that you are making more profit than you can reasonably reinvest? Build up a large cash reserve?
135.
by snowwolf 8y ago
Maybe it's not such a big deal if someone hacks your account on one 'inconsequential' site, but what if they do it across 10, 20 'inconsequential' sites? You may not give much away on one site, but combine all that
136.
by snowwolf 8y ago
Yes. One of the key parts of GDPR is breach reporting. Assume you discover your company has been breached. How do you investigate the breach? Discover who was impacted, what was done and by whom? Is that significantly harder/impossible
137.
by snowwolf 8y ago
For the water challenge couldn't you just sail the 60th parallel south forever? https://en.wikipedia.org/wiki/60th_parallel_south Also could we challenge flat earthers to the same challenge and see who travels the
138.
by snowwolf 8y ago
> Since the Ireland office is in the EU, it is subject to the GDPR. So that means that everybody outside of the US will be covered by the GDPR Can someone explain this as my understanding is that only EU residents are covered by GDPR. So
139.
by snowwolf 8y ago
You don't need CloudFlare anymore, as Github are gradually rolling out native https support for Github Pages with custom domains (using LetsEncrypt)
140.
by snowwolf 8y ago
This is the intended behaviour and something Github Pages users have been asking a long time for: https://github.com/isaacs/github/issues/156 It's using LetsEncrypt under the hood, and only generating a
141.
by snowwolf 9y ago
Yes - Call and Text history are not required to make this feature work - only your contact list (which is all iOS sends). They bundled this extra invasive data collection into the consent request. And we are used to apps requesting access t
142.
by snowwolf 9y ago
Actually GDPR also applies to your personal information that a company holds about you as an employee. However GDPR doesn’t apply if there are other laws that also apply to the data, which will be the case in a lot of circumstances for empl
143.
by snowwolf 9y ago
How do you add that public key to the WHOIS register - Via your domain registrar (and it would have to be updateable/changeable outside of renewal cycles). Who is your DNS provider 90% of the time? Your domain registrar...
144.
by snowwolf 9y ago
Exactly. Domain verified certificates guarantee one thing and one thing only. The data transmitted is encrypted and cannot be tampered with. That's it. They do not guarantee you are communicating with who you think you are. But to be h
145.
by snowwolf 9y ago
Well I suppose they could, but they'd have to be very careful of someone else spinning up an app and adding your domain to it.
146.
by snowwolf 9y ago
I'm intrigued. What kind of app that you could host on heroku requires wildcard certificates? Bearing in mind that heroku can't really support wildcard subdomains for a single app. Each custom subdomain for an app needs to be adde
147.
by snowwolf 9y ago
How would you go about verifying the domain from who controls the "IP space"? A cloud provider/datacenter controls the IP space in the majority of cases. If someone owns your DNS, they can use almost any CA to get valid certs
148.
by snowwolf 9y ago
Why do they need to support Wildcard Certificates for this? They have already starting rolling out https for custom domain GitHub Pages using LetsEncrypt - check your settings for an Enforce HTTPS option. All my GitHub Pages have it now.
149.
by snowwolf 9y ago
Yes, this argument certainly doesn't absolve OpenTable of any wrongdoing. Especially in sales it should be fairly obvious what the outcome of these ridiculous targets will be. But sometimes it can be more subtle. For example, a deliver
150.
by snowwolf 9y ago
While it is possible that this was 'sanctioned' activity by OpenTable, I think it is more likely the result of sales/bonus targets. There is plenty of documentation on why targets/bonuses can lead to unintended consequen

More ›