ygjb

61 ms·

631.
by ygjb 11y ago
Do tell, how badly are things failing? Do you have data besides "look at all the vulns!"? Do you have clear evidence of a negative economic trend that is linked to insecure software?
632.
by ygjb 11y ago
Poor muffin. I too don't have the same opportunities as other folks, but it never stopped me running hard and achieving my goals ;) Don't waste your time and energy worrying about what other folks have, and focus the same into ac
633.
by ygjb 11y ago
> but it depends a lot on the context No. It was unwanted contact. It is, at a minimum harassment, and at worst assault. Arguing context about one bit of behavior in the context of a pattern of harassment is insulting to a victim of ha
634.
by ygjb 11y ago
Your example is ridiculous; in this case Trend Micro took a a year old product missing several patches, turned off the single most important exploit mitigation in a modern browser, and slapped a sticker that said "Secure Browser"
635.
by ygjb 11y ago
Clearly you have a nuanced legal argument to support the notion that a company that does business in a jurisdiction doesn't have to adhere to their laws? What about companies that have subsidiaries or employees in the jurisdiction of
636.
by ygjb 11y ago
SMS is an awful point of failure to inject into a protocol. It is plain-text, monitored in many countries, and can be unreliable and expensive in emerging markets, and just no. "But users will forget/loose their reset number!&quo
637.
by ygjb 11y ago
Eh, I think you are underestimating how many people are interested in this. One of my friends who does small business web design and hosting has had several customers ask him about Let's Encrypt. SSL is a pretty big market, and the im
638.
by ygjb 11y ago
Here are some: communication, loneliness, isolation, timezones, discipline It's really great that working remotely (anecdotally) works well for your team. It also doesn't work well for some folks. Like any other approach to busi
639.
by ygjb 11y ago
Linux does work out of the box if you buy hardware from a company that has a very large corporate install base (Dell, Lenovo, etc). Linux also works really well if your hardware isn't bleeding edge. The part where Linux becomes hard to
640.
by ygjb 11y ago
The biggest issue is economics; it's a UK based study, but similar studies and findings have been reported elsewhere as well - http://www.cam.ac.uk/research/news/price-gap-between-more-an... It's hard to
641.
by ygjb 11y ago
Yep, but knowing that smart researchers are finding more evidence for why people are overweight despite running and cycling regimes, and trying to maintain a relatively strict balance of nutrition sure makes my efforts feel a little less fu
642.
by ygjb 11y ago
Safebrowsing protects you from more than tricky websites - it blocks sites and services that are known to serve malware. It doesn't matter how clever a user you are, if your browser (doesn't matter which one) navigates to a site
643.
by ygjb 12y ago
> Your anecdote doesn't apply here so it isn't a counterpoint. Sure it does. When I was 16, despite knowing what I wanted to do, I succumbed to pressure from my parents and other family to 'try different things', whi
644.
by ygjb 12y ago
As a counterpoint, I started programming when I was 5, and have known what I wanted to do since I was 7 (shortly after writing my first program that someone else used). I did my first commercial software project when I was 16, and got stuc
645.
by ygjb 12y ago
Why? If there weren't enough customers to support the business model with the way he was approaching it, then there isn't enough business to sustain it. If one of his customers is interested in the platform enough that they want
646.
by ygjb 12y ago
Not at all, the decision was made to release the information necessary to help people decide if action was needed. As you can see from this thread, we are happy to provide relevant details, and like most of our other tools, Kuma, the platf
647.
by ygjb 12y ago
Not on hand, those decisions were made years ago, and done in email discussions and in person meetings. That said, the password length requirements were driven by the cost of performing effective brute force attacks against properly hashed
648.
by ygjb 12y ago
Because our privacy policies state that we won't disclose personally identifiable information about users, and IP addresses can be personally identifiable. Unfortunately security incidents happen, but we won't violate the commitme
649.
by ygjb 12y ago
To provide a bit more context, in early 2011 we made a conscious decision to move towards the password storage methods described here : https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines While we were moving i
650.
by ygjb 12y ago
also the feature was built a long time ago. current standards for sites not using persona are here: https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines
651.
by ygjb 12y ago
Sha256+salt. See https://github.com/mozilla/kuma We are still working on the rest.
652.
by ygjb 12y ago
This is terrible advice. What if he invests $28,000 then earns $2,000, then talks to his accountant and finds out that if he had filled in some paper work that $28,000 could be a tax deduction? Talk to an accountant, or at least find the l
653.
by ygjb 12y ago
| You're not denying the users anything by refusing to implement EME Mozilla is if they claim to be an open source, standards based browser that promotes user choice. If Mozilla doesn't adhere to standards, and users are denied co
654.
by ygjb 12y ago
Improving and defending the open web is not just about fighting the good fight on DRM. The Mozilla mission also calls for us to fight for users right to make choices[0] as well. Mozilla could choose not to implement EME, and draw that lin
655.
by ygjb 12y ago
You got [0] wrong. It is an open source wrapper around a closed source CDM.
656.
by ygjb 13y ago
ask away. also if you want to see the passion come through, go to reddit and search for AMAs from many of our teams there!
657.
by ygjb 13y ago
nope, the verifier implementation was always (and still is) open. we recommended against standing up your own verifier since the best practices and processes for securing a verifier weren't known, and the verification process hadn&#x2
658.
by ygjb 13y ago
They don't until either they lose all of their email, or they lose their email account.
659.
by ygjb 13y ago
No, just that the paper trail generated by purchasing a car from a dealership is undesirable for a criminal. This is why conventional financial institutions and services are undesirable for most criminals.
660.
by ygjb 13y ago
Not really, you can still pay what you want for the content, they just offer an incentive to meet a threshold. Note that you can still direct the entire amount that you pay the way you choose, so you could donate the entire purchase if you

More ›