tetrep

40 ms·

361.
by tetrep 11y ago
As the title doesn't indicate, this is a pretty big deal. Full host compromise from a guest that always works and doesn't leave any traces. Amazon is claiming it doesn't affect them[0], but they don't give any details as
362.
by tetrep 11y ago
> even if it means giving up a little temporary security While I appreciate your attempt to tie in the quote, in this context it's actually greatly improving security. In the short term, yes, attackers will be able to exploit things
363.
by tetrep 11y ago
I wonder if the various fitness apps would be willing to open their data to studies. It would be incredibly interesting to see an exercise heatmap overlayed with various other ones, especially housing prices.
364.
How to manipulate curve standards: a white paper for the black hat [pdf](bada55.cr.yp.to)
76 points by tetrep 11y ago|10 comments
365.
by tetrep 11y ago
>my understanding is that AWS itself does not migrate, replicate, or otherwise transfer data out of its EU regions. Not at all correct, the article is quite explicit that transfer out of EU regions is allowed: "This is possible beca
366.
by tetrep 11y ago
They have a reassuring security page[0]. It's nice to see they're enforcing good practices, I especially appreciate their "no-link email policy" where they will never send you links in emails, which seems like a great wa
367.
by tetrep 11y ago
> While this is, technically, just another memory leak... I wouldn't consider it a memory leak* at all, the memory is not lost as it is in a leak, space leaks get cleaned up if they are evaluated before you exhaust memory. Memory le
368.
Imgur bug exploited to execute attack on 8chan(arstechnica.com)
4 points by tetrep 11y ago|0 comments
369.
by tetrep 11y ago
> One more reason for publishing the source code to drive-line software in cars. How does this prevent VW from publishing inaccurate source code? Let's say we manage to force them to not only disclose full source code but also how t
370.
Imgur XSS(reddit.com)
6 points by tetrep 11y ago|1 comments
371.
by tetrep 11y ago
you're probably thinking of http://psdoom.sourceforge.net/
372.
by tetrep 11y ago
Neat. I needed to make very large PNG bombs recently and toyed with the idea of doing it "manually." In the end I decided to take the lazy route and use libpng[1]. [1]: https://bitbucket.org/tetrep/pngbomb&#x2
373.
by tetrep 11y ago
Is a library not a simple service? While they might not be intended to fill the role of helping you find government services it seems like they fill it appropriately.
374.
by tetrep 11y ago
no? I mean, it would be super nice for your terminal emulator to just automagically filter out escape sequences when you, the user, do not want them and to allow them for programs that you do. a whitelist would work but would be super annoy
375.
by tetrep 11y ago
> Removed all managers that would help decide what someone would work on > Stopped all 1:1’s and mentorship sessions to avoid top down interactions Why? Why remove such great areas of peer support and guidance? A flat structure does n
376.
by tetrep 11y ago
> I wish Google supported TOTP like Github does... Goid nees, they do! They even have an app for it. https://en.m.wikipedia.org/wiki/Google_Authenticator
377.
by tetrep 11y ago
Regardless of how the hosting provider feels about the content they're hosting, it's very unprofessional to terminate a contract so absolutely with no warning. They could have easily given the site a few days, if not weeks, to mig
378.
by tetrep 11y ago
> These are ideas that propagate rapidly until they become quite popular and then mysteriously vanish. This flies in the face of an inherent superiority driving the propagation of the idea. isn't that because fads become "locke
379.
by tetrep 11y ago
> 1Password works with Dropbox... Because it has the amazing feature of storing all your passwords in a file. It's nothing like the features offered by lastpass with respect to serving you your passwords from a remote host and if yo
380.
by tetrep 11y ago
This seems like it would leave a company with two options: 1. Losing employees who are better than others (i.e. deserve and want a larger salary) at the same job 2. Create a new role for every minute difference in skill level to allow bette
381.
by tetrep 11y ago
I wonder if we'll ever get to the point where projects start advertising what methods they use to weed out memory management bugs (i.e. static analysis, fuzzing, etc) because an adversary that can execute arbitrary code on my machine i
382.
by tetrep 11y ago
> It would just increase their workload... Not at all, a remotely descriptive name would be far easier to fabricate than a hideously contrived backronym. Naming something is nontrivial, as a developer I understand and appreciate that, bu
383.
by tetrep 11y ago
>Congress has very different constraints when naming bills, but the end result is the same... You speak as if they're making an honest attempt to give the bills meaningful and accurate names. They want the former, not the latter. Th
384.
by tetrep 11y ago
>Electron is the cross-platform application shell we originally built for the Atom editor to handle the Chromium/Node.js event loop integration and native APIs. Sounds pretty straightforward to me. They created APIs for Node.js to a
385.
by tetrep 11y ago
not only that, but Chrome can pin certificates: chrome://net-internals/#hsts
386.
by tetrep 12y ago
>Unable to Connect Securely Very odd. I'm using Chrome with chrome://flags/#ssl-version-min set to TLS 1.2, and I can connect just fine, although the certificate is signed with SHA-1.
387.
by tetrep 12y ago
Their website requires TLS but doesn't support TLS 1.2. What technology are they using to serve their website that cannot support a 7 year old standard?
388.
SMACK TLS – Message SKIPping Attacks(smacktls.com)
2 points by tetrep 12y ago|0 comments
389.
by tetrep 12y ago
>The speculation is a slippery-slope argument, and not factual. You don't need a slippery-slope argument, the immediate effects are anti-competitive. It adds a barrier to entry where in order to offer a service to a mobile user (wit
390.
by tetrep 12y ago
>There are times when geographic locality is the thing you want to filter on. Which has nothing to do with actually being near said locality. I think filtering on geographic locations is great, but even greater is that ability to do so w

More ›