tuxxy

33 ms·

301.
Using Bandcamp as a hacky backup solution(medium.com)
3 points by tuxxy 9y ago|0 comments
302.
by tuxxy 9y ago
I've never understood the focus on explicit services for Bitcoin mixing. I made a comment on a different post a while ago and I'll paste it below: You're implying that mixers and tumblers are ONLY dedicated malicious services
303.
by tuxxy 9y ago
I don't believe this for a minute. Sure, lots of Enterprise apps use Python 2 because that was what they could build with. I'm a Python developer and I don't know anyone who doesn't use Python 3 by default. I understand
304.
by tuxxy 9y ago
I have seen the code of a Bitcoin startup. Believe me, security is the last thing on their minds. Personally, I find it exceptionally naive that these startups think they can handle payment processing, payment storage, and their core produc
305.
by tuxxy 9y ago
This is neat, but I can't help but feel it's not going to work. It would work if you encounter a movie that you wanted to watch, decide you want the money instead, and you report to Custos. This is not how piracy works. Instead, a
306.
by tuxxy 9y ago
I really like mpv. https://mpv.io/
307.
by tuxxy 9y ago
Instead of hiding the window, why don't you look into using terminal colors to hide the password? That way the passwords aren't visible until you highlight them.
308.
by tuxxy 9y ago
I agree with Schneier's quote, but you're also forgetting about password hashing. If it takes 10 seconds to derive the key (assuming the use of a strong hash function), anything with a good enough amount of entropy (60-90 bits) sh
309.
by tuxxy 9y ago
When I was 20, I was a lead engineer on a project with an upcoming deadline. There was a disagreement on how to implement something. As the lead engineer on the project, it was my job to break these "ties" so to speak, especially
310.
by tuxxy 9y ago
I would love to show him MITs scratch haha
311.
by tuxxy 9y ago
Airlines don't need military systems which are used more for confidentiality and OPSEC than other things. In the field, militaries tend to avoid radio communications for various tactical reasons. Submarines are a great example of this.
312.
by tuxxy 9y ago
I'll add in why I dropped out of college (current software engineer making six figures). My dad made just enough money to get us past the point where Pell grants were denied because of my Dad's income. Unfortunately, my family sti
313.
by tuxxy 9y ago
Not much in the realm of Linux, to be honest. You'd probably get more security maintaining a SELinux setup on your system and running a hardened kernel.
314.
by tuxxy 9y ago
To add, I love Bitcoin, but this is why Proof of Stake/Ethereum is also not that great in my opinion. The DAO hardfork was nothing but a bailout.
315.
by tuxxy 9y ago
There's a bar nearby that has a "People Hate Us On Yelp!" sticker. I ran into the owner there one day and I asked him about it and he claimed that he immediately got it after the third or fourth call from the Yelp sales reps
316.
by tuxxy 9y ago
You're implying that mixers and tumblers are ONLY dedicated malicious services. What you're forgetting is that hot wallets used on popular bitcoin services also serve as tumblers. The distinction between a "malicious tumbler&
317.
by tuxxy 9y ago
I completely agree. My favorite framework is Flask, but I have to work with Django professionally. I find that using Flask produces much cleaner, readable code (depending on the engineer, of course). When I'm working with Django code,
318.
by tuxxy 9y ago
Location: Salt Lake City, Utah Remote: Yes Willing to relocate: Yes Technologies: Python, Golang, Linux, Bootstrap, Cryptography, Flask, RESTful APIs, AWS, Resume/CV: https://goo.gl/FhTcc8 Email: me |at| johnpacific.co
319.
by tuxxy 9y ago
Really? We're going to blame NSA for the companies leaving SMBv1 open to the public?
320.
by tuxxy 9y ago
You know, I took about five minutes to write this. I couldn't figure out what to say, and this is what I meant to say haha. It was a long day.
321.
by tuxxy 9y ago
Mind sharing some of the tips/practices for those of us interested in keeping our OPSEC and PERSEC up to par?
322.
by tuxxy 9y ago
> can be deployed after PoS hits. Why is this considered a solution? All it does is formalize Vitalik's control over the network. If he doesn't like it, it gets forked. Not to mention, do you know how few Ethereum nodes there a
323.
by tuxxy 9y ago
Ethereum will not scale. /Every/ single node will have to run these contracts. Not your node, not ten distributed nodes, but /every/ node has to run the contract. I wouldn't trust anything with my money that works t
324.
by tuxxy 9y ago
When you overwrite the disk, you say you should use dd if=/dev/random, but the reason why this is much slower is because /dev/random blocks. Use /dev/urandom because it doesn't block -- Before you ask, yes
325.
by tuxxy 9y ago
They offer a local instance of GitHub actually.
326.
by tuxxy 9y ago
Keccak256? Isn't that just SHA3 with a digest of 256 bits?
327.
by tuxxy 9y ago
How would this work for a private individual? Would this help create a precedent for private security researchers where they might be held liable for not disclosing 0days? I agree that this would definitely curb potential damage, but I&#x27
328.
by tuxxy 9y ago
My solution for ransomware is to have a canary file. Write a script that automates the backup and hardcode a known SHA digest of the file (I like to make it a photo). Before the backup happens, compare the SHA digests. If they match, go ahe
329.
by tuxxy 9y ago
Well, your behavior and appearance isn't logged in some computer somewhere available for someone to look at whenever they want. Not to mention, face-to-face interaction means you know someone else is watching. This allows someone to do
330.
by tuxxy 9y ago
The FSF recommends the GPL for libraries now.

More ›