thw0rted

36 ms·

121.
by thw0rted 7y ago
Denial of service is also a type of attack.
122.
by thw0rted 7y ago
I would define "rogue" as any AP intentionally using the SSID of my network to trick users into connecting to it instead of my own infrastructure.
123.
by thw0rted 7y ago
I suspect that your rules are also the ones that the GP is subject to in Germany, since you actually can buy video doorbells here and use them at least without an Überwachung sign -- not sure about registration since I don't have one
124.
by thw0rted 7y ago
Just to clarify: the attack depends on reading (unencrypted) management packets going from the AP to the device, and if PMF is enabled on the AP, it will only send encrypted management packets so the attack is not possible. Is that it?
125.
by thw0rted 7y ago
This thread seems to be forgetting that Google Maps didn't just replace the atlas (for looking up names of things) and the dedicated GPS (for routing / directions), they also replaced the radar detector (OK that's Waze, but s
126.
by thw0rted 7y ago
If you read the OP they say they were specifically crafting links that led to an image resizing webservice, so each load wasn't just requesting static content, it was consuming non-trivial compute cycles. Of course you can have a DDoS
127.
by thw0rted 7y ago
You should only have to store the self-signed cert exception once, at least on a given device. Now, if you're being targeted by a state-sponsored actor they might somehow be able to get you onto a honeypot network within the 2-minute
128.
by thw0rted 7y ago
Am I the only one who read this piece as a screed against having web standards at all? "The web is a messy, complicated place.... The end result is an enormously diverse and anarchic free-for-all where almost no two websites use the s
129.
by thw0rted 7y ago
> all the things you virtualize an OS for One of the main things I "virtualize an OS for" is to use software that requires Platform A on a system that runs Platform B. Running "legit" (authorized) virtualized MacOS d
130.
by thw0rted 7y ago
Based on the linked MDN page (from the current top-rated comment) it sounds like the main point of this is to have a rewind-able debugger.
131.
by thw0rted 7y ago
LOL forever @ "opened 19 years ago"
132.
by thw0rted 7y ago
I was on board with this, but doesn't more or less all of this apply to traditional hotels just as much as AirBnB? I don't make a habit of checking my hotel room for hidden perv-o-cams but how often are the housekeeping staff che
133.
by thw0rted 7y ago
The good news is that now there's a simple solution: if this happens in the future, you book a $200 Uber helicopter, $100-200 room at the airport, then another helicopter back in the morning, and you save ~$700. Easy! :D
134.
by thw0rted 7y ago
To be fair, I expect the major corporation to have the "resources of a hotel" and handle the rebooking/room swap. They get a big fee on every booking, right? Am I just paying tens-to-hundreds per booking for the privilege
135.
by thw0rted 7y ago
I've used them maybe 3 times since they launched, but I always assumed that I did have this protection with AirBnB. I have had hosts ask me to avoid booking through the site and arrange payment outside the system, but I hesitated to
136.
by thw0rted 7y ago
I worked in a government job that demanded strong technical expertise. We got two kinds of people: those who knew they could make a lot more money in the private sector but took the civilian job out of a sense of duty or a desire for stabi
137.
by thw0rted 7y ago
I don't remember a lot about Looper but I feel like more exposition of JGL's "downward spiral" would have really helped clear things up for me -- for example, how anybody can go from looking like JGL to looking like 2010
138.
by thw0rted 7y ago
> The ideal language would be one I can memorize, and then never have to look things up. If the language is so small I never have to look up anything when using it, it's also so small I'm going to have to spend ages re-re-re-im
139.
by thw0rted 7y ago
If it's in writing on the GP's "welcome packet" or whatever, then violating the guarantee is advertising fraud.
140.
by thw0rted 7y ago
The difference is that every prisoner in a private prison is an income source, so every law that creates fewer prisoners (such as drug legalization) is a loss of income. Are all public prisons run the same way? That is, are the prisons fu
141.
by thw0rted 7y ago
Do you know of any good resources talking about considerations for handling adversarial nodes in these networks? For example, what's to stop a rogue implementation from advertising that it has a low cost / short distance to every
142.
by thw0rted 7y ago
If I understood what little I read of the exploit details, it actually loads an opaque payload through WebGL calls, so simply crawling with an iPhone's user-agent wouldn't be enough to notice anything "fishy". The site
143.
by thw0rted 7y ago
Could it be that the nature of your day to day programming workload has an impact on your susceptibility to RSI? My current project is full stack dev almost exclusively in Typescript, and I find myself actually hands-on-keyboard typing for
144.
by thw0rted 7y ago
> Being local admin on the workstation doesn't really give you any more ability to do damage than just a regular user account That's dangerously untrue. On all the Windows systems at home, everybody else is a non-privileged use
145.
by thw0rted 7y ago
I agree that Family Sharing could be less restrictive but it's not quite as bad as you describe. You're already limited to the number of "Family" accounts on a single system, and I believe also to the number of systems