bga
Re:Equifax’s Maddening Unaccountability
on Tuesday September 12, 2017 @07:58AM (#15226533)
Yet Equifax continues to evade giving details on the attack. That itself is damning evidence they weren't doing everything they should have been to protect their servers and data.
Re:The Equifax Breach Exposes America's Identity Crisis
on Sunday September 10, 2017 @12:33PM (#15212915)
Exactly. You can't have perfect trust in every citizen to keep track of these things. And if it's a government issued ID in the first place, I see no trouble with them having your private key as well. Just don't reuse that key.
This would take a lot of solid investment politically, and technically, to make it even slightly feasible to work for the average Joe.
Re:The Equifax Breach Exposes America's Identity Crisis
on Sunday September 10, 2017 @09:08AM (#15212069)
or a digital signature, or a MAC. Something where we could verify against a publicly-known value safely, and without giving that secret part away to anyone else. The secret would be between the Federal Government and the citizen.
Re:Equifax security freeze PINs are the timestamp of when you request ...
on Saturday September 09, 2017 @06:00PM (#15209374)
This isn't okay. Don't dox this guy.
Besides, lots of "hacker" hackers are self-taught.
Re:Equifax security freeze PINs are the timestamp of when you request ...
on Saturday September 09, 2017 @05:56PM (#15209358)
No, blockchains are magic technology that makes money appear out of nowhere and hides all activity from evildoers.
Re:Equifax security freeze PINs are the timestamp of when you request ...
on Saturday September 09, 2017 @05:51PM (#15209341)
Or Equifax became unresponsive while they investigated, but didn't reveal what was happening. Related, but not via inside info about the hacks.
Re:Identity Theft, Credit Reports, and You
on Saturday September 09, 2017 @10:26AM (#15207214)
I suppose the information is hidden to prevent gaming the system. As someone mentioned in another thread, they took out a loan for $1000, sat on it and just paid it off. Credit score goes up with zero risk for just the cost of interest. If the algorithm were exposed, it would be easier to game.
Re:Hackers who broke into Equifax exploited a flaw in open-source serv...
on Saturday September 09, 2017 @10:19AM (#15207196)
If you're just hashing with SHA2 and a salt, an attacker with a run-of-the-mill GPU could crack any given hashing quite quickly. It might still take quite a bit of time to get all 143 million, but that's fine. Sell off the score in blocks of 10,000 and let the customer know they have to reverse the hashes themselves.
BCrypt with lots of rounds would be best.
Re:JavaScript: The Curious Case of null >= 0
on Saturday September 09, 2017 @10:07AM (#15207153)
Right, which is where I think the actual return value ought to be "undefined" or something. Or an error. But I'm clearly in the minority on my thoughts of the js type system.
But then again, you can avoid having to make intertype comparisons in the first place by following reasonable guidelines. As funny as this case is, I can't imagine how I'd run into it in practice.
Re:Equifax Faces Multibillion-Dollar Lawsuit Over Hack
on Saturday September 09, 2017 @10:02AM (#15207124)
Bankruptcy is the strange other side of the US debt system. In this case, it would be an unfair get out of jail free card, a shirking of responsibility.
Re:Identity Theft, Credit Reports, and You
on Saturday September 09, 2017 @09:54AM (#15207095)
Okay, so never buy food again and tell me how that goes.
Re:JavaScript: The Curious Case of null >= 0
on Saturday September 09, 2017 @09:52AM (#15207085)
Did he seriously claim at the end that that made sense "mathematically"?
Re:Burying your dead code
on Thursday September 07, 2017 @05:46PM (#15196052)
Care to elaborate?
Re:Burying your dead code
on Thursday September 07, 2017 @12:45PM (#15193530)
And so in Ruby, we use test frameworks with advanced mocking, as well as runtime-reflection coverage measurement.
Metaprogramming: the cause of, and solution to, all of life's problems.
Re:The Cryptocurrency Singularity
on Wednesday September 06, 2017 @11:35AM (#15184469)
Bitcoin seems like an investment in proving the ideas that may eventually come to form a truly practical cryptocurrency.
Re:Hardware Architectures for Deep Neural Networks [pdf]
on Wednesday September 06, 2017 @10:54AM (#15184142)
Keep in mind the energy costs of the supporting hardware for that brain, though.