wepple

130 ms·

811.
1Password moving from local storage to cloud subscription(motherboard.vice.com)
47 points by wepple 9y ago|17 comments
812.
by wepple 9y ago
Yeah I missed that one, although I've never heard it used voluntarily? Yankee maybe, but still not common.
813.
by wepple 9y ago
> would decrease their yearly profit (2016: 16.8bn USD) by only 0.6% > Stockholders would be foolish to vote no if this were proposed. I doubt that an improvement to security of the type you describe here would have a significant impr
814.
by wepple 9y ago
I had to explain this to someone recently, and I was surprised that no other country seems to have a voluntary demonym that is completely unrelated to the name of the place? In English anyway.
815.
by wepple 9y ago
Totally agree. I log in to Facebook on Thursday to see what might be happening on the weekend, and leave it at that. Once a week is more than enough.
816.
by wepple 9y ago
Agreed. The tactics they've sunk to in order to try grab attention are borderline signs over general descent toward turning into a pile of mess that something will soon replace.
817.
by wepple 9y ago
Thank you. This is exactly how I feel but I haven't been able to describe it before.
818.
by wepple 9y ago
The security industry is remarkably small. If you're going to spray your CV and hope for the best, sure, having as many certs as possible will get you past the first interview. But chances are if someone is browsing HN they're at
819.
by wepple 9y ago
I personally agree NetPen is the least demanding. Not because there aren't incredible netpen testers nor that it can be challenging, but generally you have a lot of attack vectors across a very complex piece of infrastructure, and you
820.
by wepple 9y ago
pentesting requires fast thinking, an ability to learn quickly, and solve unusual challenges on the go. It could be considered dangerous to become comfortable having lessons to teach you new skills, and fairly arbitrary exams that are a poo
821.
by wepple 9y ago
HR wall? You're applying at the wrong places. If a company needs to see letters on your CV, it's because they have no idea what/who they want. A decent company will have your future colleagues heavily involved in the hiring p
822.
by wepple 9y ago
You must've been lucky, if you check the forums there's a trail of people who had hardware issues, there was a known issue. And they simply stopped responding to anyone. I spent $80 and got thoroughly ripped off; it was a half ass
823.
by wepple 9y ago
I've got 5x edisons that sit at pretty high CPU util and give me no trouble, the Ci20 is the biggest piece of trash I've used; imagination deserve to go out of business (they'll beat intel to it). Raspberry Pi, can't rea
824.
Glitch attacks against an arduino using a $21 FPGA(djsec.wordpress.com)
4 points by wepple 10y ago|0 comments
825.
by wepple 10y ago
> assuming that an attacker cannot break out of a container is, at least, optimistic. Agreed. However as long as you don't look at it as your primary line of defense, it increases the cost to an attacker. And that's currently t
826.
by wepple 10y ago
I agree that rolling back an image to a "known good" state is not the appropriate solution; if you can do it efficiently, what's stopping you from doing it very regularly? Attacking a system that disappears and restarts on a
827.
by wepple 10y ago
I think I mostly agree with what you're saying. I'm under no illusion that things can actually be secured; I don't own a single device that I'm not even slightly suspicious is running malicious code or otherwise leaking
828.
by wepple 10y ago
I've definitely written bad code, for sure. I don't mean to sound disrespectful, I chose my words pretty poorly there. I'm arguing that this isn't research. There was no novel technique used or investigation into origina
829.
by wepple 10y ago
can we please not refer to a kid who exploits a 10-year-old known vulnerability as a "researcher".
830.
Remote unauthenticated attack allows code exec in jenkins CLI(jenkins.io)
2 points by wepple 10y ago|0 comments
831.
by wepple 10y ago
I feel this is a defeatist stance to take; LFI's are a solved problem and we should be looking to how and why this happened and prevent it in the future. Another angle: we're supposed to not do anything that requires any form of c
832.
by wepple 10y ago
firefox isn't included in these competitions; it was a while back but has been removed. not 100% sure why, but I figure Mozilla don't pay out significant bounties and compromise of the browser is relatively easy compared to other
833.
by wepple 10y ago
they do provide an interesting and useful datapoint about the effort required to attack a given target.
834.
by wepple 10y ago
these things would've cost next to nothing to make, and they figure they can sell a large enough volume at a low price that they'd net more than upping the price slightly and selling substantially less.
835.
by wepple 10y ago
they go into a randomized lottery which decides who gets to run their exploit first. They then have a set time to exploit the device (commonly 2 minutes), and if they can't do it the next team in gets to go. Generally once a target has
836.
by wepple 10y ago
Based on a talk at the recent blackhat 2016 conference, bootstrapping and communicating with a secure-enclave processor can be a huge task. If it is ever possible, it will require some fairly large engineering (and reverse engineering) effo
837.
by wepple 10y ago
Yeah actually you make some fairly valid points. In some ways, Trump reminds me a lot of Abbott (who's name escaped me so I googled "stupid australian prime minister" and was rewarded with the first result), and while organiz
838.
by wepple 10y ago
This. Recent exposure to the US healthcare/medical system has horrified me. The fact that it's majority for-profit enterprises and isn't equal-access leads me to conclude the US shouldn't be able to call itself a develop
839.
by wepple 10y ago
Camera releases are one of the most vivid examples of "these are my distinct, specific requirements; therefore this product will surely fail instantly."
840.
by wepple 10y ago
> I'm a semi-pro photographer, do commercial work from time to time, get flown to shoot weddings across the globe. I think this differentiates you fairly significantly from the target market of this camera. By way of example, I&#x27

More ›