tonyztan

40 ms·

421.
Uber TCPA Settlement(ubertcpasettlement.com)
2 points by tonyztan 9y ago|0 comments
422.
by tonyztan 9y ago
Making apps request internet access privileges seems like a viable idea. Don't limit encryption though - that's the opposite direction from where we want to be. It is more important to secure the connections to our devices.
423.
by tonyztan 9y ago
Great idea. I wish Apple would consider this.
424.
by tonyztan 9y ago
The vast majority of people who write Wikipedia articles are unpaid. We are all volunteers, writing with our own time. In fact, paid editing must be disclosed: https://en.wikipedia.org/wiki/Wikipedia:Paid-contribution_
425.
by tonyztan 9y ago
If the topic is notable enough to have a Wikipedia article, anyone is free to go ahead and improve the article. The Wikimedia Foundation doesn't write articles or decide what topics to include; the Wikipedia community does that, at no
426.
by tonyztan 9y ago
Since Wikipedia doesn't derive any income from direct traffic, it is actually a good thing for Google and others to host copies of the data, so long as they comply with the Creative Commons licensing requirements. This reduces the cost
427.
Pinpointing Racial Discrimination by Government Officials(nytimes.com)
2 points by tonyztan 9y ago|0 comments
428.
Georgia Tech Researchers Show SGX Isn’t as Secure as It Seems(cc.gatech.edu)
1 points by tonyztan 9y ago|0 comments
429.
USPS ‘Informed Delivery’ Is Stalker’s Dream(krebsonsecurity.com)
112 points by tonyztan 9y ago|57 comments
430.
by tonyztan 9y ago
AFAIK Bitcoin mining difficulty adjusts depending on how much processing power is on the network, not how many transactions are being processed.
431.
by tonyztan 9y ago
I think the assumption is that the more Ethereum you hold, the more incentive you have to keep Ethereum valuable and thus not attack the currency or its transactions.
432.
Google Has Most of My Email Because It Has All of Yours (2014)(mako.cc)
3 points by tonyztan 9y ago|0 comments
433.
by tonyztan 9y ago
Interesting idea. Would there be any legal problems for the site operator, since they are sending people automated text messages without their consent?
434.
AWS Snowball: Move petabyte-scale data sets (by shipping storage devices)(aws.amazon.com)
3 points by tonyztan 9y ago|0 comments
435.
ACLU challenges DOJ request for info on 6,000 anti-Trump Facebook users(engadget.com)
5 points by tonyztan 9y ago|0 comments
436.
by tonyztan 9y ago
This is definitely a valid consideration. Perhaps they are replacing "2fa recovery codes" with a backup U2F key.
437.
by tonyztan 9y ago
It seems like U2F fits most of your criteria: open and free, standardized and easy to implement, foils phishing, etc. It can't be easily cloned though. https://en.wikipedia.org/wiki/Universal_2nd_Factor
438.
by tonyztan 9y ago
> The new service will continue to require a physical USB key in addition to a second physical key for greater protection. I look forward to more details so that I can understand the reason for having two physical keys. What threats can
439.
by tonyztan 9y ago
You're right. You have to set up SMS to set up other types of 2FA, but you can remove your phone number afterwards. I think Google just doesn't want less experienced users getting locked out.
440.
Unmetered Mitigation: DDoS Protection Without Limits(blog.cloudflare.com)
2 points by tonyztan 9y ago|0 comments
441.
by tonyztan 9y ago
> If only there was a way to proxy through google.com or some other popular domain too important to block. There is. Domain fronting is used in China to circumvent the Great Firewall. The concept you are talking about is collateral freed
442.
by tonyztan 9y ago
> An attacker with the STEK doesn't need to wait until session resumption is attempted. Session Tickets containing the current session keys are sent at the beginning of every connection that merely supports Session Tickets. In plain
443.
by tonyztan 9y ago
I believe you're correct.
444.
by tonyztan 9y ago
Gotcha. Thanks for the clarification.
445.
by tonyztan 9y ago
Diceware is memorable but not guessable. Source: https://en.wikipedia.org/wiki/Diceware https://www.rempe.us/diceware/#eff
446.
by tonyztan 9y ago
One solution would be to randomly generate security answers with human readable words. Diceware does this. You can use a dice, or you can use an open source tool like this one: https://www.rempe.us/diceware/#eff https
447.
by tonyztan 9y ago
Exactly. U.S. Customs and Border Patrol can't detain U.S. citizens indefinitely without charging them with a crime and trying them in court.
448.
by tonyztan 9y ago
What we don't know is whether Adobe or someone else revoked it, since anyone with private key can revoke.
449.
by tonyztan 9y ago
Looks like they've removed the compromised key and posted a new public key: https://blogs.adobe.com/psirt/?page_id=1498
450.
by tonyztan 9y ago
Just because it is the Federal government does not mean they can do whatever they want. The Bill of Rights limits government power, especially those of the Federal government.

More ›