News for hackers. Stuff that matters.

bluetooth

Re:Switching Your Site to HTTPS on a Shoestring Budget on Monday September 04, 2017 @11:30AM (#15168884)
Yep, the article is a great example of why one would use CF over LE. I think LE is worth an honorable mention given the topic, but it's not a big deal.
Re:Switching Your Site to HTTPS on a Shoestring Budget on Monday September 04, 2017 @11:07AM (#15168725)
Cloudflare is a valid suggestion, albeit (IMO) inferior to letsencrypt in many cases. Surprised to not see it mentioned here, given that it also costs nothing, for arguably more security.
Re:HSBC is killing my business, piece by piece  on Monday September 04, 2017 @11:05AM (#15168706)
Did you read the article?

> HSBC aren't likely to be swayed by such an article.

The article is clearly aimed at small business owners. He's doing people a favor by steering them clear of HSBC. I never got the impression he was speaking to HSBC, or attempting to call them out.

> It's very easy to set up two or more business bank accounts and use them both.

This is literally second on his list of takeaways.

Heh, how do you delete a submission?
Re:Don't publicly expose .git (2015) on Sunday June 11, 2017 @08:45PM (#14534604)
Are you asking if this is a non-issue if you've... addressed the issue?
Re:OpenCV 3.2 on Wednesday December 28, 2016 @10:48AM (#13271204)
I've found the official documentation (docs.opencv.org) to be one of the best sources online. It goes into mathematics/theory often but presents the info in a way that you don't need it to get stuff done. I would also check out pyimagesearch.com. There's a ton of really cool projects and tutorials (mostly in python but the c++/python api are near 1:1)
Re:Media is ruining the NSA debate on Thursday June 27, 2013 @11:11AM (#5952704)
The same thing happened with Julian Assange. Thanks to the media, the only thing the average person knows about him is not what he helped uncover but instead that he is either a "villian" or "hero." Snowden is the new Assange.
Re:Let's deploy via Git on Sunday June 23, 2013 @11:26PM (#5930822)
> but are repository updates even atomic?

No, they are not. During the push, there will be a short amount of time in which some parts of the website will be operating on new code, while others will be operating on old code. If many components are in play (ie using libraries) you may end up breaking things if a new request comes in at the right time.

Re:My Boston T map used in “The Last of Us” PS3 game on Sunday June 23, 2013 @08:35PM (#5930236)
> You made a map, then someone used the map. Isn't that nice?

Yeah, if that map was free to use, then sure. But that's not the case.

It's become all too common I see this type of argument used in cases where big name studios rip work of others without attribution. This is an extremely weak (not to mention somewhat offensive) argument which is analogous to telling a rape victim "you should be happy the rapist found you attractive."

Re:NSA-Proof Your Email Without Encryption on Thursday June 20, 2013 @01:52PM (#5913589)
If GhostMail was compromised, the attacker would be able to read messages as they are being sent. Sending messages as images does not stop them from being copied or held for an indefinite amount of time.
Here's a similar project based on another similar project that's been around for quite some time: http://penturalabs.wordpress.com/2013/04/25/blue-for-the-pin...

Original project: http://hakshop.myshopify.com/products/wifi-pineapple

Re:16% of web vulnerabilities are still XSS on Tuesday June 11, 2013 @06:32PM (#5865168)
How did you test for YAML injection? From my past experiences with Ruby (hardly any) YAML injection is difficult to test from a blackbox perspective as you need an understanding of the source code in order to be able to craft the appropriate serialized YAML object to yield code execution.
Re:BitCoin is a public ledger on Monday June 10, 2013 @11:58PM (#5859593)
It might also be because this link has been posted at least two times recently:

https://news.ycombinator.com/item?id=5796935

https://news.ycombinator.com/item?id=5807149

Re:Rewarding Edward Snowden's Courage on Sunday June 09, 2013 @10:09PM (#5851873)
Maybe you're forgetting, but this is the real world. Ideally, the government should be afraid of its people, but the US is in a far from ideal situation right now.
Re:Rewarding Edward Snowden's Courage on Sunday June 09, 2013 @08:58PM (#5851606)
Two issues I can see arising from this:

1. You're funding someone who the government most likely has labelled a terrorist. I don't think the government will take too kindly to such a thing.

2. Snowden is in hiding. Not only might it be hard to come into contact with him, but how can we be sure our money will reach him?

I think #1 is not too difficult to solve via ways of bitcoin, but #2 is still a blocker.

Is this serious? This "news" website is making an outlandish claim, yet cites not a single source.

> "The White House can’t order all 20 million of its employees around. Someone will always talk to us, and help us understand the truth behind these troubling, but somewhat ambiguous conversations and other communications. All your PRISM are belong to us, and it’s going to be this way for as long as something like PRISM exists."

Where did this quote come from? Who are they quoting? There is just so much wrong with this article.

Edit: The more I browse, the more this site seems like a less funny version of The Onion. Here are some choice articles chronicle.su has published in the past:

    Stephen Hawking joins Illuminati, snubs Israel
    Amanda Bynes dead at 27, inventor of ‘lol’ signs off [she is still alive]
    Margaret Thatcher, Illuminati leader, dead at 87
    Fascist Zune Conspiracy Exposed
Re:Obama: No warrantless wiretaps if you elect me (2008) on Friday June 07, 2013 @11:00AM (#5839271)
It's almost as if he's speaking to a cult. Might as well have said something along the lines of "Obama is the savior of the US. Let him into your heart and soul and you will know it to be true. Go forth and vote!"
Re:Obama: No warrantless wiretaps if you elect me (2008) on Friday June 07, 2013 @10:21AM (#5839032)
> if government does nothing and we get attacked people will complain

Who says this? Do you honestly think warrantless wiretaps are a valid form of defense?

For some reason, comments on HN appear with seemingly random font sizes when viewed on mobile. I've seen it on both android and iOS.
Got a source? That sounds so incredible I almost want it to be true.
> However, would there be any security enhancements over using key based authentication

I think you're misunderstanding. Two-factor authentication is a layer of security on top of regular authentication to ssh (whether password or key based). It's not meant to replace anything or stand on its own. This is for added security; first you authenticate via password or key, and then you authenticate via google authenticator.

Older »