tonyztan

48 ms·

481.
by tonyztan 9y ago
> What good would that header do? It would protect against MitM attacks where the attacker has fraudulently obtained a non-EV certificate, such as through CA compromise or a BGP attack, especially since EV certs are required to have CT l
482.
by tonyztan 9y ago
Note that in this setup, the connection between Cloudflare and GitHub is plaintext / not secure, because by default Cloudflare uses "Flexible SSL". It is possible to make it more secure by changing the setting to "Full S
483.
by tonyztan 9y ago
We need an 'Expect-EV' header, just like 'Expect-CT'. Or maybe all websites that request certain info (like SSN or credit card) should be required to have EV. EV is more expensive and onerous but it has the potential to
484.
by tonyztan 9y ago
State DMVs usually offer ID cards for those who don't or can't drive.
485.
by tonyztan 9y ago
I posted this a few hours ago: https://news.ycombinator.com/item?id=15207727 . Shows you the steps to sue Equifax in small claims.
486.
by tonyztan 9y ago
I submitted this a few hours ago: https://news.ycombinator.com/item?id=15207727 . Basically the steps to file a small claims lawsuit.
487.
by tonyztan 9y ago
North Carolina already mandates free online security freezes with all credit bureaus. Now if only we can get this passed nationwide... http://www.ncdoj.gov/freefreeze
488.
by tonyztan 9y ago
> The payment processor can use 2FA (this is actually done by a number of banks in Europe, when you enter the payment information, you get a text message with a code from your bank to confirm the transaction). I think 3-D Secure is the p
489.
by tonyztan 9y ago
No, I don't have one either. Where do I find it?
490.
by tonyztan 9y ago
https://news.ycombinator.com/item?id=15207727
491.
How to Sue Equifax(howtosueequifax.com)
13 points by tonyztan 9y ago|1 comments
492.
by tonyztan 9y ago
I would be happy to help out as well. I am not a lawyer, but I just filed in GA small claims court today. Contact info in profile.
493.
by tonyztan 9y ago
They already have your credit card numbers. Banks report the numbers to them.
494.
by tonyztan 9y ago
A "fraud alert" is valid for only 90 days. A "security freeze" remains in place until you lift it with your PIN code, which is provided when you place the freeze. FTC: https://www.consumer.ftc.gov/article
495.
by tonyztan 9y ago
I've received $20.43 from the Perkins v. LinkedIn class action settlement. Personally, it's not about the money, but rather about trying to hold companies accountable for their actions. ( http://www.addconnectionssettlem
496.
by tonyztan 9y ago
That means you are affected. If you enter a non-existent name and SSN, it will say that you are not affected.
497.
by tonyztan 9y ago
He has been consistently posting in-depth articles about his code base and business for years. People like him and his wacky business the same way we like Levels.
498.
by tonyztan 9y ago
They do allow users to indicate their preferences. "Memorialization is our default action, but we know that some people might not want their account preserved this way. They might prefer that we delete their profile. Recognizing this,
499.
by tonyztan 9y ago
Looks like parent is not a ProtonMail employee. ( https://news.ycombinator.com/item?id=15032948 )
500.
by tonyztan 9y ago
Looks like parent is not a ProtonMail employee. ( https://news.ycombinator.com/item?id=15032948 )
501.
by tonyztan 9y ago
Looks like parent is not a ProtonMail employee. ( https://news.ycombinator.com/item?id=15032948 )
502.
by tonyztan 9y ago
It looks like ProtonMail released new account management features just a few weeks ago, including the capability for "organization admins to access the emails of other organization users" while still preserving end-to-end encrypti
503.
How one hot sauce seller hauled Uber into small-claims court and won $4,000(arstechnica.com)
15 points by tonyztan 9y ago|2 comments
504.
Pwned Passwords – Have I Been Pwned?(haveibeenpwned.com)
2 points by tonyztan 9y ago|0 comments
505.
by tonyztan 9y ago
Even though the different transactions on a debit card may have the same legal status by law, banks typically apply "zero liability" to transactions processed by Visa/MasterCard, while holding users accountable for fraudulent
506.
How to Rob an Airbnb: flaw could put 1.2M homes at risk(medium.com)
5 points by tonyztan 9y ago|2 comments
507.
by tonyztan 9y ago
This. I've had the exact same experience with support accepting "a long string of random crap" as an answer. Now I recommend people to use diceware to generate their security answers with actually readable words. ( https:&#x2
508.
by tonyztan 9y ago
The Twitter thread doesn't seem to have any substantive information regarding a Signal "compromise." This looks like another rumor that doesn't have much basis. The only known "compromise" that I can think of i
509.
by tonyztan 9y ago
Most Wikipedia/Wikimedia domains have HSTS preloaded in browsers, preventing redirection without a valid certificate.
510.
Mark Zuckerberg calls for government to give everybody free money(cnbc.com)
1 points by tonyztan 9y ago|0 comments

More ›