4mnt

The thread is in the body of the tweet. Here is the start: https://twitter.com/axi0mX/status/1313620262768635904

They decided to skip a year for some rooms to allow other interesting topics to have a room.

https://twitter.com/fosdem/status/915543798763139074

Sure, LetsEncrypt can issue certificates for that domain. If you have a webserver you control that runs on port 80, you can use Certbot[1] to get a certificate for that domain. [1]: https://certbot.eff.org/

> If the cookie is set through HTTPS, the browser won't send it when loading HTTP resources.

If the cookie is set through HTTPS and does not have the Secure flag set, the browser will happily send it along when loading HTTP resources.

It seems it is fixed now,.

    $2,506
    last 24 hrs ($104.41 / hr)

Seems somewhat more reasonable

If you read the article, you would know that it is a terminal emulator written in javascript that gives you access to the computer the webserver runs on.

There is no change to the browser itself at all, just plain javascript that shows a terminal running on a remote computer.

> In the case of md5, creating a pair of inputs with the same hash is easier than creating another input with the same hash as something else which you didn't yourself generate.

This is the case with all instances of seeking a collision, due to the birthday paradox [0]

0: https://en.wikipedia.org/wiki/Birthday_attack

You do not ask for an extension of an SSL certificate, but you get a new one signed with another expiry date.

I think it is theoretically possible to change the expiration date, and ask a certification authority to sign that new certificate, but I have never heard of that happening anyways.

It might be a good idea to delete this thread since this bug is in the openssl client, which is not as widely used as the library.

The site cannot detect that you have an extra root certificate lying around on your computer. If you visit the website without the Superfish program installed, you just evaluate the SSL settings of your browser.

That is: MITM SSH connections to these devices without getting any warning. Of course you first have to get in a position to MITM the person who connects to these devices.

Yep, she published too soon. http://www.frsag.org/pipermail/frsag/2015-January/005727.htm...

That would be very interesting to watch (albeit a bit annoying for the people trying to chat)

Function Oriented (~ OO: Object Oriented)

Snowden was not introduced until after OP posted this link

> The second is because there isn't any way I know of to have Chrome start in clean mode (with no bookmarks, etc. from personal use).

Chrome has user profiles [1], which are even easier to use than what Firefox uses.

[1]: chrome://settings/createProfile

Of course not. It is a wireless keyboard :)

Yes they are. But only after they get dropped from the reflog, after 30 days by default.

I'm pretty sure $login can be set to true/false somewhere on top of the file as 'configuration'. Only it gets overwritten by the call to extract().

It was not meant to be user input

Nope, the cert is valid till 2016, but the root certificate is not trusted.

No sound, as it does not travel far enough and is easily disrupted by any other sounds in the area of the detector. I think it is just waiting for input of an electro-magnetical wave, then timestamps it and sends it to the server. The server can calculate the position with just the difference in arrival time to each station, and the position of those stations.

With small receivers that are run by volunteers

http://www.blitzortung.org/Webpages/index.php?lang=en&page=3

That is basically the default of git push

Do you mean a directory name cannot contain a hyphen (-)? Or perhaps you did mean a slash (/)? I have never heard nor encountered about a package manager or filesystem that does not allow the use of hyphens.

Google has that too on the app page, right below the download button.

Why not just disclose it responsibly to github without using it on other people's accounts?