spacefight

12 ms·

61.
by spacefight 12y ago
"if the money runs out the data will disappear." I wouldn't expect anything else - data storage is cheap these days but not free. The same can happen when physical archives (private and/or state run) are not properly mai
62.
by spacefight 12y ago
" Those "Nazi tunnels" shown are clean, dry, and equipped with modern fluorescent lights. Those are not recently discovered tunnels." That picture is from a site nearby. The newly discoverd site is connected to the one d
63.
by spacefight 12y ago
"Incidentally, PCI-DSS 3.0 went into effect today, so anyone using Heroku for commerce became non-compliant today!" Can you elaborate a bit on that? Thank you.
64.
by spacefight 12y ago
+1 for using the term "weaponize".
65.
by spacefight 12y ago
He had to shut it down - but as far as I remember, they got the SSL key anyway. None can tell me that providing it in a font size of 4pt would have stopped them. I think that typing 2560 chars is not that hard.
66.
by spacefight 12y ago
But 5.4.36 came out Dec 18th.
67.
by spacefight 12y ago
Well, 14.04 is still showing 5.5.9 built Oct 29 2014. Am I am wrong to assume that the newest fixes (CVE-2014-8142) are not in there yet?
68.
by spacefight 12y ago
Nope. Each leg can be oversold, hence their complain is only about the lost money. And control.
69.
by spacefight 12y ago
Yes, it's within a restricted area ('R'): http://skyvector.com/?ll=39.34010380401439,-76.1800231869041...
70.
by spacefight 12y ago
Marketing. Buying IP to protect future growth.
71.
by spacefight 12y ago
So many "diplomats' certs" are used in machines by Crypto AG from Switzerland. And guess what, they had one major incident years ago - and even people working there have simply no clue who owns and control the company. I&#x27
72.
by spacefight 12y ago
Can't you see the pattern? Take all, break the crypto later. PFS might be next, who knows. Yes, for now OTR and PGP is fine. There must be a big speculation on future breakthroughs regarding breaking crypto - otherwise they wouldn&#x27
73.
by spacefight 12y ago
Also, most docs are from 2012. Who knows what happened since then. There is a reason, they have an army of mathematicians at hand. I look forward to the day when they walk away from their jobs.
74.
by spacefight 12y ago
When will you guys all wake up? GCHQ does the full take on the cables, and there is no document yet, that claims NSA doesn't. So, all your sessions are hosed at some point in time. Either now or in the future. And yes, sensationalize i
75.
by spacefight 12y ago
One goodie is how they break VPN, inclusive some targets: http://www.spiegel.de/media/media-35515.pdf Airlines: - Iran Air - Royal Jordanian - Transaero Airlines Govs: - Mexico - Pakistan - Turkey - Afghanistan Slides
76.
by spacefight 12y ago
That sounds still like crap. Has anyone defeated that already with still picture?
77.
by spacefight 12y ago
In other words: biometric identification is still broken.
78.
by spacefight 12y ago
It has. 4 out of 4 network operators in Germany closed (some of) the gapping holes already. One brave network engineer even came forward to complete that list (2/4 -> 4/4) after the talk of Karsten Nohl.
79.
by spacefight 12y ago
I have no proof obviously, but I somehow think that those 3000 new GCE instances have not been registered according to the TOS of Google, most importantly in regard to real name and accountability policies.
80.
by spacefight 12y ago
So the question is, why is Google not shutting them down now.
81.
by spacefight 12y ago
Sure, if the license permits that.
82.
by spacefight 12y ago
A grace period for the case that you forget to manually update the canary. Say you forget it, but after x amount of days you (or someone else) notice, then you update and continue. That grace period needs to be well defined, announced and p
83.
by spacefight 12y ago
"Obviously this changes if someone is months late with an update." That's what I was asking before - what is a reasonable timeslot for being "late"? Is it "months" or "weeks" or the <deltaManu
84.
by spacefight 12y ago
So it looks now, that the canary got updated. No other information given, at least not within the canary itself. https://canary.silentcircle.com/
85.
by spacefight 12y ago
Security guidelines to not have any 3rd party JS.
86.
by spacefight 12y ago
I might be a potential target of your SaaS for one of my not yet fully localized web based applications. But there is just no way that I can src="" your .js directly into my web application and therefore access to the DOM. Could I
87.
by spacefight 12y ago
We're back on page one. This is exactly what some of us have said hours ago already and others have been doing: they watched the canary "die" (in terms of the mining analogy).
88.
by spacefight 12y ago
That's what I exactly tried to convince the parent before and I even got downvoted for it. So it sure looks like, someone has to explain everyone here why Silent Circle has a warrant canary and how we should interpret it....
89.
by spacefight 12y ago
Yes - dang, plesae put that discussion back up where it belongs.
90.
by spacefight 12y ago
Right. He has no clue on how the warrant canary setup works normally. http://en.wikipedia.org/wiki/Warrant_canary "A warrant canary may be posted by the provider to inform users of dates that they have not been se

More ›