theboss

21 ms·

1. 151.▲
   by theboss 13y ago

   I didn't try to get in shape actually, I succeeded. On topic though I don't even know what you're talking about. There are plenty of other mathematicians lined up to work for the government from thousands of schools around th
2. 152.▲
   by theboss 13y ago

   This is stupid. You severe ties with the NSA but what about the FBI, CIA, DEA, DISA, DIA, the list goes on. What about contractors who do business for the NSA? The big primes. Lockheed, Grumman, SAIC, CGIFederal, BAE, Booz, etc.etc. It&#x27
3. 153.▲
   by theboss 13y ago

   Exactly. My brother in law RE Snapchat to save all images it reads to his SD card. It took all of 10 minutes. Even if they could lock down the phone and successfully implement a DRM I could just take a dang picture of the picture....
4. 154.▲
   by theboss 13y ago

   Yeah but who is doing that here? For the most part, a lot of people here just need an HTTPS cert with RSA 2048. I guess I may be wrong and it might help with efficiency if you have 10,000 connections HTTPS request per second and you're
5. 155.▲
   by theboss 13y ago

   I've seen a lot of talk about ECC on hacker news in the last few weeks and people seem really interested. My question is why? Are you guys about to roll out ECC as your crypto-solution? Nobody really encrypts large amounts of data RSA&
6. 156.▲
   by theboss 13y ago

   The best part of java is it's a good language where beginning programmers can learn design patterns and program design. I like java for this because it has single inheritance. Android is a good example of strict use of design patterns
7. 157.▲
   by theboss 13y ago

   Except there are a few added difficulties of EC that don't exist in DH due to the maths. There is also the matter of mapping your numbers to points on the curve. Lot's of extra maths for saving time and space. The important take-a
8. 158.▲
   by theboss 13y ago

   My original point exactly. They get all these rails cloud heroku iOS guys and then how aren't the startups trapped? Ive never seen a job posting for an infrastructure all-around-guy
9. 159.▲
   by theboss 13y ago

   Maybe in 2004 but this is 2013. Rails, iOS, Digitalocean, heroku, aws, with a front-end designer. You no longer need to know anything about infrastructure.
10. 160.▲
    by theboss 13y ago

    My question is this: Startups I see here are usually looking for the same kinds of people to help build their products (Rails, iOS, UI/UX, etc.). They look to really only hire people who are really good at things like this to build the
11. 161.▲
    by theboss 13y ago

    This is really cool. My first thought was it is probably just a clever little convolution kernel trick but it seems harder after reading about it.
12. 162.▲
    by theboss 13y ago

    Hashing is the correct way but big companies commonly do things wrong. If they had a sqli vulnerability in their site without knowing it's also possible that they didn't even know this database existed.
13. 163.▲
    by theboss 13y ago

    Using the same key 3 times would be equivalent to using 1 key and performing 1 encrypt operation. It is almost certainly not the case that adobe is using the same key for all 3 operations. It's probably more effort to do anyways
14. 164.▲
    by theboss 13y ago

    Most bug bounties encourage responsible disclosure, which was not done in the original blogpost. With that said, it's kind of a grey area. Some may reward you but others may not. Google for example asks for responsible disclosure. They
15. 165.▲
    by theboss 13y ago

    I can vouch for this guy and Cigital. Good and Smart people who really like software security.
16. 166.▲
    by theboss 13y ago

    I'll probably get buried here but that's okay. The graduate school and university I go to churns out employees to three letter agencies probably at the highest rate that I know of. I also have grad classes with many current employ
17. 167.▲
    by theboss 13y ago

    Google is bluffing... They never would end online cooking tracking because that is how they effectively target ads. If people stop getting their money's worth with advertising on Google then Google will lose money.
18. 168.▲
    by theboss 13y ago

    Aha, very good find. Okay then I am pleased.
19. 169.▲
    by theboss 13y ago

    I hope to see this magic new mystery protocol as something similar to TextSecure, where we have forward secrecy from the OTR protocol. The current e-mail protocols are far too centralized, which doesn't make sense. Mail is delivered, a
20. 170.▲
    by theboss 13y ago

    Didn't know it existed (the whole reason I wrote the dang thing). Ill check it out thanks.
21. 171.▲
    by theboss 13y ago

    easily... Relink an executable for something and throw it on rapidshare....people dl and add themselves to your botnet...repeat this process until you have a big ass botnet
22. 172.▲
    by theboss 13y ago

    I wrote a chrome extension to analyze the websites I visit on certain days and track how long I spend looking at each one and graphs it. It's called melytics and it is pretty buggy but it does the job. Honestly I think this is too much
23. 173.▲
    by theboss 13y ago

    Who cares. You can buy a botnet to use and shoot down small websites, like HN BB SO CCI and Buffer. Or you can build one yourself easily. The only difference is someone picked targets that people on HN use instead of the regular targets.
24. 174.▲
    by theboss 13y ago

    DDoS it would seem..... AKA...Nothing to see here move along.
25. 175.▲
    by theboss 13y ago

    Capitalism will also say that I'm most likely to succeed if I can do all three.
26. 176.▲
    by theboss 13y ago

    You're right that it is a luxury but you are wrong that it is unfair to expect startups to set a higher standard. Startups have fewer assets than big companies. If you can't secure 1 webserver or you have a security breach with on
27. 177.▲
    by theboss 13y ago

    One thing I hate seeing is startups and security. Not that mongo is bad or anything this is just a good time to say it. Build your product correctly from the start and have a security policy early. Don't leave XSS in your website, don&
28. 178.▲
    by theboss 13y ago

    Yeah, I does sound like that but it also says persistently DNS poisoning or ARP poisoning isn't very persistent. So there COULD be something here...but I don't think so In my experience, most mobile apps use cert pinning or regula
29. 179.▲
    by theboss 13y ago

    This is because you can pay to have humans resolve captchas. It is really sad, but worth it I guess to the spammers....
30. 180.▲
    by theboss 13y ago

    These kinds of things always remind me of everyone's favorite game exploit. Good ol MissingNo from pokemon and the rare candy trick. http://en.wikipedia.org/wiki/MissingNo.#Characteristics http://bulbap