zenexer

7 ms·

31.
by zenexer 3y ago
Some of them are at least giving back a little: https://archive.ph/CMpee
32.
by zenexer 3y ago
Doh! The article I posted even linked to that HN post, and I just didn't notice.
33.
by zenexer 3y ago
Superconductors will typically levitate if placed above a magnet, and vice versa. Magnets are weird --superconductors even more so. I assume that's what they were referring to? Edit: Judging by Fig 4, which has a large object conspi
34.
by zenexer 3y ago
A while back, there was a leak of some sort whereby many of these pole cameras in Massachusetts became accessible to the public. While this is anecdotal, it seemed to me at the time that the cameras were more than capable of peering through
35.
by zenexer 3y ago
I think they did their math wrong. If we assume an iron operates at 1000 W (probably about right), then 21 hours of ironing is 21000 Wh, or 21 kWh. Someone probably got a little confused and ended up off by a couple orders of magnitude.
36.
by zenexer 3y ago
While we’re at it: 1. Don’t use a wet sponge. If you have a good soldering iron with good tips, you’ll want to use something that looks like a ball of metal shavings instead. It’ll work better, and you won’t oxidize your tips. They’re cheap
37.
by zenexer 4y ago
> I thought if a victim wanted to press charges, then police process it and the process starts. In the US, victims can’t press criminal charges; only the government can. > what's the prosecutor got to do with it? Isn't it a
38.
by zenexer 4y ago
Citizens don’t get to decide whether to press criminal charges; only the government can decide that. They may take the victim’s request into consideration, but that’s the extent of it.
39.
by zenexer 4y ago
They can and should—that’s their area of expertise. I’ve had pharmacists catch dangerous but obscure drug interactions that my doctors failed to catch, typically because the two interacting medications were prescribed by two different types
40.
by zenexer 4y ago
Yes: if it’s the sabbath, that’s an argument with which I’m familiar. My counter-argument is that I don’t want to be forced to practice someone else’s religion. If your religion already imposes those rules on its followers, why does it need
41.
by zenexer 4y ago
> But I've always been skeptical that the human body would be completely unaffected by higher doses of non-ionizing radiation beyond baseline, for extended periods of time. Well, what would you consider to be baseline? The overwhelm
42.
by zenexer 4y ago
Original Tweet rather than an archived version: https://twitter.com/vxunderground/status/1635427567271329792 There’s since been an important follow-up tweet: > Ring denies being a victim of ALPHV. Ring has stat
43.
Anatomy of a Bank Takeover (2009)(npr.org)
3 points by zenexer 4y ago|1 comments
44.
by zenexer 4y ago
The target site is intermittently experiencing the HN Hug of Death, so if you have trouble accessing it, here's an archive link: https://web.archive.org/web/20230309144317/https://www.da.vi...
45.
by zenexer 4y ago
You don’t need to. Your registrar tells the registry which nameservers you’ve chosen. You specify the nameservers that belong to your DNS provider, which causes DNS clients to query that DNS provider. There’s nothing stopping you from payin
46.
by zenexer 4y ago
Ring circuits are terrible, but fused plugs are not. > In the US and elsewhere, equivalent protection comes from correctly sized breakers in the panel. That’s a common misconception. Your circuit breakers are rated to protect the wires i
47.
by zenexer 4y ago
This would affect switched outlets in the US, too. When we install light switches in the US, we usually only use a single pole switch that breaks hot, not neutral. But yeah, British outlets do have switches directly on them. And fuses in al
48.
by zenexer 4y ago
> I even checked my electricity 'pen' reader on an HDMI at work to see if it was the reader. It's not the pen. It's my wires. Ah… there it is. Stop using those; use an actual multimeter. See, the problem with measurin
49.
by zenexer 4y ago
Fixed: https://github.com/OWASP/CheatSheetSeries/issues/1089#issuec...
50.
by zenexer 4y ago
They start the email bomb just prior to performing the rest of the attack. It’s possible the rest of the attack failed. I went through every email by hand, as I wasn’t willing to take any risks.
51.
by zenexer 4y ago
That was my guess, too. However, Apple seemed to think there was no relevant session activity on my account at the time. They stopped short of confirming that the payment and shipping info was entered manually. When I asked directly, they i
52.
by zenexer 4y ago
I had very similar questions for Apple, but they refused to answer most of them. I’m confident my Apple account wasn’t compromised directly: - Apple confirmed there were no login attempts around the relevant time period - I have 2FA enabled
53.
by zenexer 4y ago
While that’s possible, I don’t think that’s what’s happening here. This looks exactly like the behavior of an email burying attack ( https://news.ycombinator.com/item?id=34868298 ). Notice that the email addresses appear legi
54.
by zenexer 4y ago
I recognize that IP address! Your site is being used as a pawn in a rather sneaky attack, and I was hit by it recently. Those email addresses belong to the victims—like me. Let’s say I’m a hacker. I’ve gotten into Alice’s Amazon account and
55.
by zenexer 4y ago
They didn’t reintroduce the error; it was never completely fixed. I created an issue for it. https://github.com/OWASP/CheatSheetSeries/issues/1089
56.
by zenexer 4y ago
> That said, if my password can't contain emoji, I don't trust your system. Note that most emoji are outside the BMP and will take four bytes per code point with both UTF-8 and UTF-16. Many are comprised of multiple code points
57.
by zenexer 4y ago
Good. If anyone can get access to all my info by merely sending a photo of my passport, I would be very disappointed. Anyone could forge that with minimal effort.
58.
by zenexer 4y ago
There’s nothing wrong with pointing out that a standard technique for disarming a bomb seems counterintuitive to a layperson. That’s the sort of observation that fuels curiosity and interesting discussion. I don’t think the OP was suggestin
59.
by zenexer 4y ago
On the other hand, `notify.trafficmanager.net.`, the domain name used for Edge push notifications through Azure Traffic Manager, currently points to `notify1.ontario.ca.` with a CNAME record. This resulted in an Edge push notification outa
60.
by zenexer 4y ago
Greater Boston does not mean Boston. These aren’t people living in cities.

More ›