News for hackers. Stuff that matters.

Benferhat

I might even incorporate the request rate into a bot detection algo, maybe have it trigger temporary hellbans.
I've used GAE since its inception, never even heard of anything like this happening. Any updates?
Re:Hacking PayPal Accounts with one click on Thursday December 04, 2014 @10:13AM (#8699568)
I believe he's talking about Diablo 2 (the timeframe works, and the game is notorious for duping), in which Blizzard provides shady third party companies with items, which are then sold to users.
If I'm not logged into a site a that I regularly use, I'm probably not logged into my email, either. In order to log into my favorite site with Passwordless, I have to log into my email as well. With my password. One login for the price of two, and I'm still using a password.
Re:HTTP vs. HTTPS on Monday December 01, 2014 @02:26PM (#8683081)
Each plugin is a potential confounder.
Re:“No-CAPTCHA” reCAPTCHA on Wednesday November 26, 2014 @12:48PM (#8663543)
They seem to have done a small early beta over the summer, I guess they got in early.
Re:“No-CAPTCHA” reCAPTCHA on Monday November 24, 2014 @07:30PM (#8655630)
I'd like to hear arguments for why it would be unfair competition for Google to put spammy ad agencies out of business.
Re:“No-CAPTCHA” reCAPTCHA on Monday November 24, 2014 @07:22PM (#8655598)
Thanks for the heads up, I missed it due to adblock. I made the link non-clickable and added a warning.
Re:“No-CAPTCHA” reCAPTCHA on Monday November 24, 2014 @05:51PM (#8655178)
I found a demo[0] via this old forum thread from August[1].

Obviously there are privacy concerns. That being said, this looks like a boon for anyone interested in bot detection, as you can periodically challenge your users' humanity without getting too much in their way. Nice one, Google.

From the thread:

Implemented it successfully for a website. I have to say, it works great!

it also checks if html pages are changed at runtime and how many times you "reload" the page where the captcha is. When it thinks you are a bot a captcha popups, when entered, it got checked on googles servers if it's right and fills in a hidden input. When the user submits the form, the filled in captcha coded, again, will be verifed. [sic]

[0] http://www.google.com/recaptcha/api2/demo

[1] Edit: don't go to this url without adblock (see comment below). http://forum.ragezone com/f144/googles-captcha-recaptcha-1023607/

Re:Marijuana helped shrink one of the most aggressive brain cancers on Wednesday November 19, 2014 @09:45AM (#8630266)
McKenna is more famous for his excessive use of psychedelics.

Terence McKenna: "There are only about 1,000 of these GBMs a year, so it's a rare disease. I never won anything before - why now?" Like everybody else, he suspected a lifetime of exotic drug use may have been to blame. [0]

[0] http://archive.wired.com/wired/archive/8.05/mckenna_pr.html

Re:For Sale: 29,656.51306529 Bitcoins on Thursday June 12, 2014 @05:49PM (#7886188)
The price of bitcoins has already dropped 10% since the news.
Re:TigerDirect.com Now Accepts Bitcoin Payments on Thursday January 23, 2014 @04:21PM (#7111289)
>> In the checkout flow it is best practice to offer as many payment options available because it increases the likelihood of a successful conversion.

Are you sure about that? Too many choices sometimes leads to no choice at all. [0]

[0] http://www.ted.com/talks/barry_schwartz_on_the_paradox_of_ch...

"My bitcoins are stored in our safe deposit box, and my son and daughter are tech savvy. I think they're safe enough. I'm comfortable with my legacy."
Re:We’re About to Lose Net Neutrality on Sunday December 29, 2013 @07:18PM (#6982297)
You love the phrase "regulatory capture", don't you? :)
Re:We Need to Talk About TED on Tuesday December 17, 2013 @10:40AM (#6921666)
> This Event Has Been Deleted

mirror, please?

Re:Tor Appliance on Wednesday November 27, 2013 @09:21PM (#6812654)
How are users protected from malicious exit nodes, assuming they're visiting sites unprotected by SSL?
> "Commercial" means the site contains ads

Your idea started out good. Sometimes I want to research a product before I go looking for a merchant. Blocking all sites that contain ads? Just use adblock if you're that fanatical.

Re:That 60W-equivalent LED: What no one will tell you on Friday November 22, 2013 @09:17AM (#6780778)
tl;dr: LED bulbs get too hot, lowering their life expectancy. Manufacturers need to include cheap thermistor circuits, which automatically dim the light to a safe thermal equilibrium.
add &yt:cc=on to the YouTube URL [0] to enable subtitles.

[0] https://www.youtube.com/watch?v=gHGDN9-oFJE&yt:cc=on

Firefox is more performant on my Ubuntu box than Chromium, even for things like Gmail and Google Docs.
Re:Apple maps: how Google lost when everyone thought it had won on Tuesday November 12, 2013 @11:53AM (#6718889)
I'm not even asking for automatic alternate routing. How about letting me switch to a better route manually, without exiting navigation?
The new Google Maps on Android is terrible, as well. It's missing features, most notable of which is the ability to search for alternate routes when you hit traffic.
Re:iPad from T-Mobile with free monthly 200MB data for life on Sunday November 03, 2013 @08:41PM (#6666204)
Why throttle them? Let them hit the caps and pay for more data.
Re:Anonymous releases NSA documents on Friday June 07, 2013 @10:52AM (#5839218)
Did you mean: recursion
Try something like this, off the top of my head: http://pastebin.com/srYteiXQ
Re:Users don't like social login on Thursday March 21, 2013 @01:39PM (#5417199)
Sure, sometimes their usernames are their primary keys. Even if the actual primary key is arbitrary, the primary identity is still exposed to the user, in that they know what their user account is, and which email addresses are linked to it.
Re:Users don't like social login on Wednesday March 20, 2013 @09:29PM (#5412132)
> But it's one that's never exposed to the actual user.

Why not expose it to the user? Because then they'll want to change it? Are you talking about browser fingerprinting?

We already expose this on the user/email level, where users can link and log in with as many email addresses as they like, under one account (identifier).

Re:Don't learn how to code, learn how to make things on Wednesday March 13, 2013 @10:29PM (#5372723)
I blame ruby for being a great way to go for people that don't know a single thing about programming.

Older »