theboss

24 ms·

181.
by theboss 13y ago
I've Used a toolkit like 3 years ago that completely beat the captchas. Recaptchas are harder though. Which did they beat?
182.
by theboss 13y ago
App is free. You get a fountain pen and an eraser. If you want a marker, pencil, or whatever, it is $1.99. And if you want the notebook? Not sure what they are going for here....
183.
by theboss 13y ago
In my examination last pass does a good job with what it does and I know it has held up under scrutiny from various infosec professionals (you can find some blog posts from nova hacKer's) You can also code audit them by installing thei
184.
by theboss 13y ago
Did any of you actually expect that you could share an account (a username and password) without one party knowing a piece of the information? Whether through burp or through Dom inspection there is not much possibility to share an account
185.
by theboss 13y ago
but he can do 1xxx from an unprivileged NOT ROOT and he requires root to do that with port 22, again
186.
by theboss 13y ago
If you are running the server and your server is compromised than the attacker can remove the ssh server you are running and put up his own malicious program to collect your password if and only if they port is above 1024, and they don&#x27
187.
by theboss 13y ago
I said above 1024 and picking on other than 22 is just Security Through Obscurity. I can banner grab you in less than a second and figure out which port is running an ssh server. If you really want to then go for it. But above 1024 is a no
188.
by theboss 13y ago
If you don't trust the other side, you aren't administering the server, in which case this article isn't written for you. If you are, then the author is 100% correct that it is not a good idea to run a SSH server above port 1
189.
by theboss 13y ago
I've implemented ECC and you are 100% correct. Nobody should implement ECC unless you really really know what you're doing. Mapping points to the curve, multiplying points, point addition, there is too much math stuff to mess up o
190.
by theboss 13y ago
Trying to say a source for a DDoS? Wtf? DDoS often uses DNS Reflection to amplify the bandwidth of the attack. The source of the attack will be a) distributed b) not the actual attackers. It's pretty but mostly meaningless.
191.
by theboss 13y ago
I really like this. I'm finishing graduate school and I can't tell you how disinterested I am in a company when I apply or send an email and they want to ask me math problems or puzzles....And sadly, more ask puzzles than don&#x27
192.
by theboss 13y ago
These people? I am one of them. I understand the in's and out's of just about the best you can do when it comes to living off the map. The article says they are living off the map, which they certainly aren't. Like I said, mi
193.
by theboss 13y ago
A horrible article. Offline? The lady has a tech-startup in SanFrancisco. Untracked? Still possible to track her. There is nothing you can do to prevent it. If you want to buy a house, you're going to need credit, if you want credit th
194.
by theboss 13y ago
Ha. Thanks. Isn't the point of this to save time or remember someone's name. Actually think about how your interaction with another person would go and how this app fits into that....It makes the interaction awkward and you probab
195.
by theboss 13y ago
Wait? These are TheCitySwig guys? Just to let you know your last website was so horribly insecure. It was like a whois who of Owasp Top 10 issues. Just letting you know in case you build something like that again... On topic of WeHighFive,
196.
by theboss 13y ago
Ha. I wonder. If there are only a couple nerds like us we might only get 5 dollars or something. A charity proxy would be cool though, that way people like us have the ability to only donate .0005 and the people with 10,000+ can donate too.
197.
by theboss 13y ago
I like to think of companies like a computer program. A startup isnt written in anything it is completely implemented in hardware. As the company grows it is necessary to add these different layers of abstraction until you end up with the C
198.
by theboss 13y ago
Exactly this. I have some nonzero amount when I mined for 1 afternoon. Technically I don't have zero but I shouldnt be in the same category as people with a thousand dollars worth. With that said.... I said I have zero in the poll.
199.
by theboss 13y ago
Well I will give it a try and see how it goes.
200.
by theboss 13y ago
I also have RSI from years of piano, typing, and then (this is almost embarrassing to say) high level starcraft. Changing your keyboard layout isn't going to fix bad habits and the things you have to do to stay healthy (stretching, tak
201.
by theboss 13y ago
I don't see what the point of changing your keyboard layout is. I don't know if QWERTY is even a good layout but what does it matter? Isn't the best keyboard layout the one you already know? Thinking about it now, I can'
202.
by theboss 13y ago
I don't think you're right. Even in professional sports, bad scouting reports happen just like when VCs make the wrong call. Sometimes a persons particular skill-set scales really well at the next level and scouts and VCs may not
203.
by theboss 13y ago
I have to at least somewhat agree with the article. I'm on the outside looking in, and to me it looks almost like working in the Federal Government, how once you're in then "you're in" for life with the Big League S
204.
by theboss 13y ago
It depends on severity but I believe at google the minimum is $1337. With that being said, $12.50 is $12.50 more than PayPal's. I don't know anyone who has reported a vulnerability to PayPal that has actually received a reward.
205.
by theboss 13y ago
I'm the coach of a high school Cyber Patriot team and it is really interesting. The high-schoolers are more hungry for information and more interested than the College CCDC team I work with (a very top team). With that being said, ther
206.
by theboss 13y ago
So is breaking into someones house to steal papers and passive eavesdropping. But the results are the same. You still end up with data you didn't have before
207.
by theboss 13y ago
Many people who download illegally would never dream of stealing from a store. Many people who may steal data would never dream of breaking in and physically doing it. It is much easier to steal 1s and 0s than it is to physically do it. Hum
208.
by theboss 13y ago
This soylent discussion that I constantly see on HN is what happens when computer nerds who know nothing about nutrition (and a couple who do) talk about health. This guy is going to make a ton of money but I think that people should be thi
209.
by theboss 13y ago
Is it cheap? If I was hypothetically an app company with many customers I could easily have a thousand private repos. When I checked github (I tried to check again now but their site is down) it would cost something like $1,500 bucks...It s
210.
by theboss 13y ago
Can I ask here? Why do a lot of companies insist on keeping their code on GitHub? It seems expensive and they have many service outages from DDoS attacks. It seems like someone could set up their 10 different git servers for a fraction of t

More ›