Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
totony
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
89 ms
·
871.
▲
by
totony
12y ago
Too much NK bashing. Just because a state is recluse and has barely any relation with other states doesn't mean we can just speculate and blame them for everything without real proof.
872.
▲
by
totony
12y ago
Even so, reddit does not reflect the tech working field. Especially when it is a top post, it will just bring more trolls.
873.
▲
by
totony
12y ago
I'm not sure to understand HN's ranking system. This is top page and is an article extrapolating sexism in a particular field from being trolled on reddit , which seems to me quite common. (Also, the article had 5 points and one
874.
▲
by
totony
12y ago
That's true, but this hack is a (clever) way to shortcut doing user commands (if you have access to the USB port and the logged user's unlocked screen, then it is conceivable that you should be able to do such a thing without such
875.
▲
by
totony
12y ago
Ahah, that's quite true But I was more thinking about corporate computer systems where such an exploit should only last one session (except for privilege escalation, as OP mentioned).
876.
▲
by
totony
12y ago
This exploit is mitigated by the fact that the keyboard/mouse normally only have user permission (not admin)
877.
▲
by
totony
12y ago
I don't know specifics about Indian law, but in Canada, any "personal caracteristic" (varies on a province basis) is protected under the charter. This is defined as "individual characteristics that are permanent or diffi
878.
▲
by
totony
12y ago
NSA doesn't need to mitm you, they just have to ask the IP you are communicwting with what you did.
879.
▲
by
totony
12y ago
Then, if there are sessions too, <form> was just an example. You're right for the path though, but for a majority of users, this doesn't matter, that is because a website often has a specific subject (porn, warez, etc), so i
880.
▲
by
totony
12y ago
A better approach would be, in my opinion, to only show insecurity when a <form> or user input is requested, i dont really see the use in https everywhere for small static websites. DNS will still leak most of the websites you visit,
881.
▲
by
totony
12y ago
I would argue that this is a very bad analogy. One is only a photo of yourself (okay, in a setting you might not like, but still just a picture), while the other is something someone can use to fuck you up : put you in financial trouble, b
882.
▲
by
totony
12y ago
What's with people assuming TPB is only for porn and movies? There are SO MANY THINGS that can be found on TPB: books, code, courses, videos. I don't understand why people on HN only focus on one thing. Shouldn't information
883.
▲
by
totony
12y ago
If the man was aquitted, why is background check even mentionned? You can't refuse someone because he was accused of something, right? That'd be very discriminatory
884.
▲
by
totony
12y ago
Most operating systems will not idle on a sleep() call, as far as I remember. Since the server is executing multiple applications, it is very likely that the processor will be assigned to another running application. The only way to really
885.
▲
by
totony
12y ago
Thank you for answering, it is true that if someone has access to the server you might be in trouble, but if he has access to a cpu monitor, he might also have access to RAM and could just get the data from there. For the precision of sleep
886.
▲
by
totony
12y ago
I imagine the strlen() function is not constant-timed, so I'd remove it, but it might work yes (but you'd have to check PHP's source code and have a deep understanding of it to really be sure).
887.
▲
by
totony
12y ago
Thank you!
888.
▲
by
totony
12y ago
The for loop duration here will vary depending on the length of the string
889.
▲
by
totony
12y ago
I don't know how to do [code] tags
890.
▲
by
totony
12y ago
Interesting article, I never took the time to really think about this. For optimal security, OP mentions that we should fix the underlying code, but I kind of disagree. Understanding all the underlying code is a lot of work and, except for
891.
▲
by
totony
12y ago
Depends on what you like, I guess. Some people find playing video games worthless why others would rather do this than innovate/participate in OSS/etc. It's all about how you perceive it.
892.
▲
by
totony
12y ago
Would this be analogous to self-defense? A server was trying to hack into his computer (his honeypot). Logically, taking measures to stop the intruder would be legally acceptable. Yes, the server could just have been blacklisted, but stoppi
893.
▲
by
totony
12y ago
#1 is some guy i went to high school with which I never talked to that much... weird, #2 is some guy I don't particularly like. My girlfriend is at ~30 and my exes are in the top 20. I don't think that app is particularly revelent
894.
▲
by
totony
12y ago
Imo there is a difference, as the motive for not allowing the person is different. Morality is majorly about motives.
895.
▲
by
totony
12y ago
Here, the ramp is a specific accomodation for the disabled person. A better analogy would be a scenario where law would require every stairs accessing the building (driver) to have an associated ramp (allowing dogs). For Uber, in my opinion
896.
▲
by
totony
12y ago
The article keeps stating that the drivers are declining the disabled person access. In my understanding, they are denying the presence of an animal in their car, not necessarily the disabled person. This is an essential difference. Discrim
897.
▲
by
totony
12y ago
Privacy is relative. In Weev's case, AT&T considered the information of its users to be sensible, private information, while, in SR's care, the IP address is a very sensible and private information, considering that tor was us
898.
▲
by
totony
12y ago
Someone hacks such a website? Why for?
899.
▲
by
totony
12y ago
It is fairly easy to do such animations (if you talk about the animations) with jquery alone. A lot of simple fades in/out and background color changes compose the website as far as I have seen. The site is slightly unresponsive, but t
900.
▲
by
totony
12y ago
I agree with you, not taking legal action against this person is not a "respectable decision" and will, indeed, encourage people to report more rapes, but not necessarily real rapes ("hey, I can say whatever I want people won
More ›