snowwolf

19 ms·

151.
by snowwolf 9y ago
Fair point. I can see the purpose of "right to be forgotten", but I think in some circumstances it is going to be abused. Any service that "bans" users for fraudulent/abusive activity and stores data about the banne
152.
by snowwolf 9y ago
Soft deletes as you describe aren't allowed under GDPR. But a possible solution may be to disassociate the data from the customer (as long as the data itself isn't considered 'personal data'). For example, if the reason
153.
by snowwolf 9y ago
I've been thinking about this recently. I have multiple Echo's in the house with really good microphones, as well as smart smoke alarms with farsight[0] which senses motion. This could be turned into a pretty sophisticated home se
154.
by snowwolf 9y ago
Minimum password length is really only a protection against brute force attacks. And if the site in question has good protections against that (i.e rate limiting login attempts) or requires 2FA then password length could be relatively short
155.
by snowwolf 9y ago
A slight loophole - If you can find a way to pay your Spotify subscription through a supported country (e.g. US card/billing address), then there are no restrictions on where you use it[1], unlike Netflix for example who do geo blockin
156.
by snowwolf 9y ago
This may be part of the reason it is in trouble. https://www.nytimes.com/2018/01/31/technology/bitfinex-bitco... Somewhat coincidental that the price start dropping dramatically just as Bitfinex starts g
157.
by snowwolf 9y ago
I suspect this may have a lot to do with it: https://www.nytimes.com/2018/01/31/technology/bitfinex-bitco...
158.
by snowwolf 9y ago
I find it interesting that a lot of people seem to feel that this isn't Strava's fault, but the fault of the users who didn't manage their privacy settings correctly. Having done a lot recently related to GDPR in the EU I&#x2
159.
by snowwolf 9y ago
This is a great feature and I’ve used it extensively when travelling too. Word of warning though. It does not take into account the Avoid Toll Road setting when route planning without a signal. Which I found out the expensive way.
160.
by snowwolf 9y ago
All data now collected directly or indirectly that can identify an individual or is linked to an identified individual now needs careful consideration - do you have explicit consent to collect and use that data for that specific purpose? Ho
161.
by snowwolf 9y ago
This has also led to an interesting social experiment based on a theory developed by the University of California ( http://www.sciencedirect.com/science/article/pii/S0272494414... ) where household water consum
162.
by snowwolf 9y ago
Its just been announced that from Feb 1st the daily limit is going to be 50l and the drought tax is off the table. https://www.timeslive.co.za/news/south-africa/2018-01-18-de-...
163.
by snowwolf 9y ago
I know. I'm commenting more on the state of the industry where password complexity requirements are still a thing despite expert consensus that they make things worse.
164.
by snowwolf 9y ago
Because the ONLY requirement should really be > 8 (or more) characters. Any other requirement will generally lead to users creating passwords with predictable patterns. https://www.ncsc.gov.uk/guidance/password-guida
165.
by snowwolf 9y ago
That does kind of confirm to the attacker that the credentials are valid on your system though. And do you do this for every different IP? Kind of annoying for users with dynamic IPs.
166.
by snowwolf 9y ago
Somewhat related, but anyone have any best practices or can recommend a service to protect your users who have been pwned in another sites data breach? Rate limiting login attempts for an email address or ip address is all well and good for
167.
by snowwolf 9y ago
I suspect you are looking at the original repo. It has since been forked and has a few contributors now https://github.com/sshuttle/sshuttle
168.
Understanding the root cause of account takeover(security.googleblog.com)
2 points by snowwolf 9y ago|0 comments
169.
by snowwolf 9y ago
You mean like LinkedIn (SHA1 hashes without salt), Adobe (Poor Crypto), Dropbox (half of them SHA1), etc., etc. [1] https://haveibeenpwned.com/PwnedWebsites#LinkedIn [2] https://haveibeenpwned.com/PwnedWebsi
170.
by snowwolf 9y ago
So your password has a root password and probably 2-4 pseudo random characters appended/prepended/replaced? That means once it has been leaked in 1 breach, your 'true' algorithmic password is only 2-4 characters long. Wh
171.
by snowwolf 9y ago
Nope. https://securityequifax2017.com/ is the site referenced in your linked article https://www.equifaxsecurity2017.com/ is the official site
172.
Equifax was breached using a two month old vulnerability(arstechnica.com)
15 points by snowwolf 9y ago|2 comments
173.
Equifax hacked using two month old vulnerabilty(equifaxsecurity2017.com)
2 points by snowwolf 9y ago|0 comments
174.
by snowwolf 9y ago
Double press to bring up the wallet, then leave your finger on until the fingerprint changes to a phone with the message "Hold Near Reader to Pay". Then you don't need to leave your finger on when making the payment. Handy wh
175.
by snowwolf 9y ago
I think the most likely explanations are that the hackers either exploited an unpatched application using Apache Struts or exploited a SQL injection vulnerability in an application using Apache Struts.
176.
by snowwolf 9y ago
The "president of U.S. information solutions" had no knowledge of a massive information breach. Sure...
177.
by snowwolf 9y ago
I actually do this, but annoyingly for quite a few (postgres/redis), the client tools are not separate packages so you still need to install the full db locally to use them.
178.
by snowwolf 9y ago
Previous discussion on Walmart doing something similar (vendors can't run on AWS) https://news.ycombinator.com/item?id=14602836
179.
by snowwolf 9y ago
Isn't Slack on AWS? So effectively it is self-hosted for them :) https://aws.amazon.com/solutions/case-studies/slack/
180.
by snowwolf 9y ago
Is this because they actively want to discourage any revenue going Amazon's way from Wal-Mart related business activities, or because they don't trust Amazon not to look at the data hosted on their platform? If the latter, then I

More ›