Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
wepple
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
46 ms
·
601.
▲
by
wepple
8y ago
This is precisely my point. The US allows people to Carry on two giant bags, and everyone pushes the boundaries absurdly. In other countries, the carry-on limit is strictly enforced. They have metal frames to test the size of your luggage,
602.
▲
by
wepple
8y ago
It’s absolutely a solution. Even if the airlines create an incentive to bring carry-on, if there’s a reasonable limit to the number of items and size, everyone’s luggage will fit! This is how the rest of the world operates airlines.
603.
▲
by
wepple
8y ago
To answer a different question of “why don’t we see more hacks of smaller orgs?” - Facebook is an incredibly juicy valuable target, worth investing time in - FB has a very complex application and massive codebase. Your Django web store is f
604.
▲
by
wepple
8y ago
So I won’t diss him for selling out for two reasons: A) Id possibly so some questionable things for $1b and B) he looks like he did put up a fight. That said, we all lost when WhatsApp was acquired by FB. I don’t think I stand a chance migr
605.
▲
by
wepple
8y ago
I read the $850m being well after acquisition. It was an attempt at hush money, and he didn’t sign on. He’s a multi-billionaire, and values being able to speak opening over a bit more money.
606.
▲
by
wepple
8y ago
Let me do my best: 1. If it hasn’t expired, the FCC callsign lookup should tell you 2. There have been developments into digital modes, as well as growth in DMR and DX competitions. But as a licensed amateur myself, I’m actually not sure wh
607.
▲
by
wepple
8y ago
Welcome to HN. You’ll find that kind of negative comment which doesn’t really add to the discussion isn’t valued here. It wasn’t wild nor uneducated; I have some experience with FPGAs and the challenges of complex circuit design - regardles
608.
▲
by
wepple
8y ago
> Modern ASICs are so complex that I'm sure that sneaking a tiny backdoor into the behemoth that's a modern CPU or embedded SoC would be almost trivial. I suspect putting in a backdoor would be difficult because they are comp
609.
▲
by
wepple
8y ago
Payment systems are typically better defended than by just a sticker. It’s not surprising to see a ton of tamper switches, vibration/shock sensors, even light sensors. And they’re all powered by an internal batter and separate MCU that
610.
▲
by
wepple
8y ago
I wonder if we can’t just all move toward “search”. It’s usually obvious from context, and with more and more search engines (whether they be whole-web or isolated to a given social network), it seems like a viable alternative.
611.
▲
by
wepple
8y ago
Well for starters, if you’re curiously plugging it in, you’re going to mount it aren’t you? Second, it can emulate an HID keyboard device and type keystrokes faster than you can react and pull it out, at which point it’s far too late - it’s
612.
▲
by
wepple
8y ago
I may be a bit confused. I apologize in advance if I misunderstood. With the desoldering the chip to read the data off, you’ll get an encrypted blob which is encrypted with a securely random 128-bit key, so it’s impossible to crack. the Key
613.
▲
by
wepple
8y ago
Aren’t these quotes contextual? I’m sure most people are prepared to give up the freedom of easy access to their house in order to require access with a key, as a fair trade off of security.
614.
▲
by
wepple
8y ago
“if my password is complex enough” - fine for you, the average consumer chooses weak passwords, especially on mobile platforms. “what is to stop someone desoldering the storage chip off my device and reading the data and bruteforcing that w
615.
▲
by
wepple
8y ago
Ok, that sounds reasonable. But how do you find this model? Do you not suspect that a lot of people would be happy to tell their boss to stick it as the state will take care of them - then who is funding the cost of all the state programs?
616.
▲
by
wepple
8y ago
Or the hundreds of license plate cameras on poles, or mounted on the trunk of a good portion of the 9600 patrol cars.
617.
▲
by
wepple
8y ago
I’m curious: this reads as if you think there’s a better model. How would that model work?
618.
▲
by
wepple
8y ago
> How anyone can still trust this black box concept Its truly awesome that you audited the whole Linux kernel and everything on top of it you run, mind sharing your notes?
619.
▲
by
wepple
8y ago
The point is, you could hopefully train users that a link in an email is an unusual and suspect behavior. And/or start disabling rendering of links in email.
620.
▲
by
wepple
8y ago
Not 2FA alone, but something that authenticates the site as well, such as U2F
621.
▲
by
wepple
8y ago
Yeah, for those of us with a very finite and easily depleted amount of energy for social interaction, it’s conpletely empty by the time you get home or Saturday rolls around. Net result is, you avoid even eye contact with the person who liv
622.
▲
by
wepple
8y ago
It looks like I may be alone in thinking that some variant of this would be welcome in my life. Not so much the faraday aspect, but putting some significant friction in between myself and my phone, so that every time I go to impulse check i
623.
▲
by
wepple
8y ago
Which is trivially remedied by taking screenshot/directory listings as evidence
624.
▲
by
wepple
8y ago
I’m curious, what’s wrong with storing this type of data in a cloud provider? Also, security aside wouldn’t a16z have invested because the business isn’t “do it more securely”, but “outsource PCI compliance entirely”?
625.
▲
by
wepple
8y ago
I disagree that it’s due to boredom, or that it is overrated. Learning about other cultures and other people’s way of life is incredibly important in an increasingly divided world. I strongly believe that if the average American spent time
626.
▲
by
wepple
8y ago
There are commercial tools for breaking iPhones. For example, $15k buys you 300 unlocks with this: https://www.forbes.com/sites/thomasbrewster/2018/03/05/apple... Of course, it’s Cat and mouse and I
627.
▲
by
wepple
8y ago
There are still folks doing it full time in expensive cities. The main aim of the game is to have extensive infrastructure and code to do asset identification & delta. When Facebook puts a new host live without ACLs, you’ve gotta wake a
628.
▲
by
wepple
8y ago
Yeah, shot using an iPhone. Using the iPhone’s minuscule sized image sensor, through its tiny lens, and built in image processoring engine. With an attached lens. Huawei used a large image sensor DSLR with dedicated processing chips and len
629.
▲
by
wepple
8y ago
disclaimer: I haven’t sold a single exploit, so am taking a few guesses here. Approx ~5 of my relatively close friends are exploit devs, and most of them don’t talk about anything beyond the name of the company they work for. There aren’t a
630.
▲
by
wepple
8y ago
Given that Apple set the standard by posting photos that are explicitly labeled as being shot on iPhone, it think it’s totally fine to expect an image with selfie-arm extending into the frame to have actually been shot on the device.
More ›