wepple

70 ms·

931.
by wepple 10y ago
Yeah I thought the same thing. Although, if Telegram is any indication, mass market is not a matter of how strong your implementation is, more of a marketing/business problem to be solved.
932.
by wepple 10y ago
2FA. As much as I like password managers, I feel like they're solving a problem that has come about because our method of authenticating users hasn't kept up with developments in tech. some kind of 2FA variation (probably not what
933.
by wepple 10y ago
if I'm not excited/motivated by it; yes. if I am excited about it, I'll dive in and only get distracted by the sun coming up having forgotten to sleep.
934.
by wepple 10y ago
who said any of this has anything to do with a corporate job? do it in the morning, the weekend; then use the benefits of increased cognitive potential at work?
935.
by wepple 10y ago
I'm curious, you don't agree that the complexity of an access vuln + privesc vuln is a better defender position than a single vuln to ring-0? It kind of seems to fly in the face of the multiple layers of userland and kernel separa
936.
by wepple 10y ago
Looks like they do use L3, alongside an number of other intel x86 features (not surprisingly things like AES-NI) https://privatecore.com/wp-content/uploads/2014/02/pr-privat... Sorry couldn't copy&#
937.
by wepple 10y ago
yeah, I love ttys0 blog, it's great. Perhaps a good strategy would be to still offer an interesting read despite a lack of "hey i found epic 0days and hacked everything": - here's my methodology - here are some cool ways
938.
by wepple 10y ago
There were a few stories a while back, although IMO they were fairly light on details and data to back up their claims: http://au.idigitaltimes.com/malware-found-pre-installed-xiao... More generally however, a lot of tech m
939.
by wepple 10y ago
I think you nailed it: hackers don't want to write blog posts saying "damn, this thing was pretty well made". Perhaps an open-source effort to document & track what work has been done, even if it's just pulling fir
940.
by wepple 10y ago
I'm not convinced that "posh designer suits" is at all a necessarily positive drawcard, but I really like the general gist of what's happened. I'm surprised there aren't more countries looking to invest in this
941.
by wepple 10y ago
interesting, do you feel that the lack of idle periods was because it was being used for tasks that truly demanded and could not be performed without that compute power? Or was it a combination of that with "well its there, and we want
942.
by wepple 10y ago
There are two things that are rapidly becoming negligent not to offer: - 2FA (mobile, yubikey, duo) - basic monitoring and notification when login patterns change These are both relatively simple and effective. You needn't force 2FA,
943.
by wepple 10y ago
this is a general class of problems that is only going to get bigger. When I returned my lease car I had to have a bit of a think about what might be sync'd from my phone via bluetooth with it, and what functionality existed to erase t
944.
by wepple 10y ago
this is what I loved about beaglebone - onboard flash with OS pre-installed with SSH enabled and no setup required. 20 seconds from opening the box to bash$
945.
by wepple 10y ago
I appreciate your response! knowing that there's definitely no one single unbiased good book/source is actually a very useful thing to keep in mind - I'm currently reading "a peoples history of the united states" an
946.
by wepple 10y ago
can you recommend a book for someone who wants to understand more about the US - IE what the declaration of independence and constitution are, and how the US got to where it is now? covering history and politics and anything else useful to
947.
by wepple 10y ago
They may've checked the password from the breach against your twitter password. If they match, they know that the password breach data could be (and will eventually) be used to access your twitter account.
948.
by wepple 10y ago
Yeap I need to coffee before I try to math, not sure how I got to 4^32. Thats an interesting point - I wonder if anyone has the numbers on how long it would take to poke each tcp port on each IPv4 address? or has done it? One could argue th
949.
by wepple 10y ago
My biggest concern with security through obscurity is that it begins to be relied upon as a significant defensive mechanism. the incredible rate at which I see "but we have X" as a reason not to do good security is depressing.
950.
by wepple 10y ago
I don't think this is realistic at all. The first wave will hit 22. A second wave maybe 2222. Are you suggesting botnets will eventually scan 4^32 * 65536 using a scanner which performs multiple-packet connections? Nope. SSHd running o
951.
by wepple 10y ago
I think it's somewhat negligent to recommend people use the only browser that doesn't have a sandbox. You're trading privacy for security, and where you have less security your privacy is long gone.
952.
by wepple 10y ago
it can be configured to use strong TLS, making it at least as good as a regular browser. That configuration isn't particularly straightforward, unfortunately.
953.
by wepple 10y ago
Yep, and add +4 to get to NZ and +2 being in "not London" in the UK for me.
954.
by wepple 10y ago
for me living ~30 hours flight from my nearest family, getting short snapchats of whatever things they're up-to, however trivial, makes them seem so much closer. And given that they're less likely to be 'staged' instagra
955.
by wepple 10y ago
Absolutely. For starters, LEA are aware that if you're using tails/TBB there is an increased chance you're doing something they'd like to be aware of, over say a standard windows/chrome combination. Secondly, the ta
956.
by wepple 10y ago
This relates to my "does depend on how it's actually implemented in hardware, however." comment. This can be implemented in secure hardware (and without getting into attacks against that ), you can make a password attempt, b
957.
by wepple 10y ago
westerners do; locals not so much.
958.
by wepple 10y ago
What about session tokens to cloud services you likely use?
959.
by wepple 10y ago
a 256-bit AES key might take eternity, but if it's derived directly from 8-char ASCII the search space is tiny. Somewhat does depend on how it's actually implemented in hardware, however.
960.
by wepple 10y ago
This would be even cooler if you could expand a specific branch and continue going into further and further detail. IMO the TLS section would be one of the most interesting pieces, but it gets near-zero attention.

More ›