News for hackers. Stuff that matters.

Albuca

Re:'Suicides' over Ashley Madison hack on Monday August 24, 2015 @11:54AM (#10110685)
This topic is touched on in the Krebs article released today (which includes information from the Toronto PD press release), in that the Toronto PD are investigating...

[1] https://news.ycombinator.com/item?id=10110649

Well, yes and no. In the grand scheme of things, sure, there are more effective and secure methods of authentication. But like anything, you have to weigh security vs. usability. If you make things too secure (read: complex) then users won't use it.

There is also a huge difference between the $15 fingerprint reader you buy off of Amazon, and the "professional" scanner found in enterprise/secure devices (which in my experience, consist of a high resolution camera combined with software that detects (and looks for) movement of the finger on the scanner, "flattening" of the finger as its placed on the glass, among other things).

Further, there is the inherent need for someone (user or malicious person) to be on-site to present the biometric, as opposed 'remote' access using a username/password combination.

Like anything however, you also need to protect the core infrastructure, as well as the end-user interface. All authentication methods are useless if someone has direct access to the authentication server.

Just my $0.02

Re:Hyperlapse, Instagram's new video stabilization app on Tuesday August 26, 2014 @12:10PM (#8227917)
Thanks for the link Mike! I wasn't able to search for it on the App Store yet, but it is currently live on the Instagram, Inc. app page. Cheers!
I completely agree! A few seconds can certainly save one’s life. The main issue is how to broadcast this warning without suffering from any delay or latency...

For example, elevators in areas prone to earthquakes have sensors installed that can detect the movement of the building [1]. If it sways too far it will automatically move the elevator (up or down) to get the car as far as possible from the heavy heavy counterweight - as there is the possibility that it could break free and smush the car.

[1]Elevator Hacking: From the Pit to the Penthouse - https://www.youtube.com/watch?v=rOzrJjdZDRQ

Re:Researcher’s death shocks Japan on Wednesday August 06, 2014 @09:10AM (#8142251)
I took an emergency suicide first aid course a couple years back, and to this day still carry around the pocket-sized "workflow" in the wallet in the hopes I never need it.

That been said, one of the most important things I took from the course was the need to have the person with the experimental thoughts to agree to stay safe. That is, to agree not to harm themselves for a pre-allotted timeframe. You’re not convincing them not to do it, but instead delaying their feeling of having to do it now. This time gives you both the ability to seek resources to help each other through the crisis.

As said above, be supportive of the person. Hear them out. Pushing them away or making light of the situation is not something that that will benefit anyone. You may not agree with them, but you must understand in order to help them through this period in their lives.

Be honest and tell them you don't know how to help - but agree to seek out help with them. Perhaps they just need someone to show that they are cared for...

tl;dr get the individual who is experiencing suicidal thoughts to agree not to harm themselves for six hours (a completely arbitrary number) so that you both can seek resources for help. DO NOT try intervention unless you are trained to do so - you could make things much much worse...

Re:Harry Potter and the Methods of Rationality on Friday July 18, 2014 @12:36PM (#8053952)
Do you have a link you could share?
Re:Algorithm: The Hacker Movie on Monday July 14, 2014 @05:15PM (#8033297)
Fair enough, thanks anigbrowl!

I can definetly understand finding people is easier than paying them. I guess I didn't really factor the economy and indie movie scene into my response.

Experience never hurts - so long as you learn from it (and it is benifical to you (eg. connections and favors; as you pointed out)

Re:Algorithm: The Hacker Movie on Monday July 14, 2014 @04:50PM (#8033142)
Looks like it! Compared the length and first and last parts of the movie - its a match.
Re:Algorithm: The Hacker Movie on Monday July 14, 2014 @04:24PM (#8033011)
Now if only I wasn't at work right now...

The premise of the movie seems pretty interesting I love the profit-share model, and the motivation behind creating the film:

"At the core of ALGORITHM’s plot are the questions that are shaking up the tech world to it’s very core, and the nations of the world right along with them: privacy, human rights, the place of government in the lives of citizens, the value and power of technology."

There are already a couple big-name apps out there that do exactly this! (1Password, LastPass, etc.) And most have desktop and mobile versions too!
Re:Teens Access Operator Mode in BMO ATM on Monday June 09, 2014 @10:32AM (#7868619)
What I find really interesting is the lack in forethought by the BMO IT dept. A default password on an ATM... really???
Re:Ma’am, Your Burger Has Been Paid For on Sunday October 20, 2013 @02:27PM (#6580868)
I read the whole thing as well. So much good in the world -- I hope it keeps inspiring people to do the same =]
I agree. Which is why most TOS make sense when aimed that way. Sadly some ISPs find it easier to make broad legal strokes to cover their backsides later on.

For example: I run my own email server from my basement. Who uses it? Me. Maybe my dog... but mainly just me. Yes, it is technically a server, so yes technically my ISP could shut me down... but with a daily throughput of what, 10mB? I doubt it.

Re:Introducing Pulse for Web on Thursday August 09, 2012 @05:47PM (#4363442)
Ahh.. yes that would definitely be it! They are very anti-facebook.

Cheers!

Re:Introducing Pulse for Web on Thursday August 09, 2012 @10:12AM (#4361096)
Definetly looks interesting! However the corperate network I am on at the moment does not display the page correctly (could be anything from outdated html5 or just regular blocking).

Either way, I really enjoy the iPhone/Android app!

I agree though, I don't like the IE logo on the top right of the page. Call my crazy, but I am really fond of the simple, clean, eligant display on the iPhone/Android. Plus I just don't like IE.

As far as requiring an account - While I do see the merit in requiring registration, I think it should just load up the interface, and require registration if they would like to save their list of sources for when they visit the website later. Not to mention, noting that the sources and everything sync's across platforms is definetly a plus.

Good luck to you!

Re:Why Programmers Are Bad at Estimating Time on Thursday August 02, 2012 @10:15AM (#4328826)
Its everyone's problem.

Everything in life has a deadline, and at every point in your life you'll be asked to make and meet them.

From dinner to that assignment/project due, the pressure is always there.

I feel that most people underestimate the time things take, mainly because they want to look compitent. There are many things you just cannot put a deadline on; and yet you will be asked to.

Under promise, over deliver. Either way, they want results.

Older »