News for hackers. Stuff that matters.

SmallPeePeeMan

Re:Cracking WordPress passwords with 20 lines of Go on Saturday May 30, 2020 @10:04PM (#23366581)
Realize that the attacker must first possess the user/password database for this to work. This is because the author takes the salt from that information. Without the salt, it will take much longer to brute force... even though it’s md5 hashed.
Re:Mozilla’s Fix-the-Internet Incubator on Tuesday May 26, 2020 @11:24AM (#23312293)
> that now is deprecated

It is not deprecated. It is completely dead. Try connecting to irc.mozilla.org — you can’t because it’s permanently offline.

How is this done? I mean, are they original animations or mapped from videos in some automated way?
> To give you an idea of how intact the mummified nodosaur is: it still weighs 2,500 pounds!

Why is that relevant? Tissue has been replaced by minerals which presumably are much denser than flesh.

I’m an extension reviewer at adding.mozilla.org. Extensions that request certain permissions are manually reviewed. Others are automatically approved. Recommend extensions are ALWAYS manually reviewed for each update.
Re:How Nextdoor courts police and public officials on Thursday May 21, 2020 @10:44AM (#23258954)
What do cops get out of NextDoor? Please help me to understand
Re:How Nextdoor courts police and public officials on Thursday May 21, 2020 @10:38AM (#23258880)
I don’t understand the problem with law enforcement. Can someone explain the risks/problems? Because I’ve only ever used NextDoor to get referrals for plumbers, handymen, electricians, gardeners, etc.
Re:The End of Podcasting’s Innocence on Wednesday May 20, 2020 @11:08PM (#23254460)
Why is this news? Anyone who thought podcasts weren't going to be commercialized probably also thinks netscape navigator is a good browser in 2020.
Re:15 years later: remote code execution in qmail on Wednesday May 20, 2020 @04:12PM (#23251207)
> Not to excuse it, but to understand it.

Indeed. I don’t have to abide such people, and neither do you. Now if he had found a cure for cancer, would we have more tolerance?

Re:Why Is This Website Port Scanning Me? on Wednesday May 20, 2020 @04:09PM (#23251183)
the real question is: Why do people write websites to behave more and more like native apps? In order to prevent a client-side install?

For applications that want special access to my machine, there SHOULD be a barrier to entry or inconvenience like a client-side installation.

Re:Why Is This Website Port Scanning Me? on Wednesday May 20, 2020 @11:03AM (#23247681)
How is this different than the admin page for any other router brand? (SPA does not seem relevant to this discussion)
Re:Why Is This Website Port Scanning Me? on Wednesday May 20, 2020 @10:58AM (#23247609)
Native applications.
Why would I do this:

1. Research the latest settings I need to change in about:config to ensure telemetry & tracking are disabled, and privacy settings are optimized (and hope I got them all).

2. Install ublock origin and possibly other privacy-related extensions (e.g. to block finger printing)

3. Do this on every device which I use... I don’t know about you but I have dozens of devices between myself and my family

4. every time i re-install Firefox or create a new Firefox profile, repeat step #1 and #2.

5. Read the release notes for every Firefox update to ensure there aren’t new or changed about:config settings I should change.

When I can just use Brave instead?

You seriously do all 5 of those steps religiously? Because if don’t, you’re a step or 3 behind Brave’s our-of-the-box defaults.

It’s my default mobile browser. It does NOT replace ads with its own — this complete nonsense. It blocks ads unless you opt-in to see them and the whole Brave Points thing is stupid. I’ve never opted-in.

It is well-known that Firefox and Chrome do their own tracking. no extension, ublock or otherwise, can change that.