News for hackers. Stuff that matters.

coworkerblues

The reason iOS 11 sucks in my opinion, is that Apple has a finite number of iOS developers, and this year, they needed to invest tons of work in iPhone X UI + Gesture work + Hardware support + Face ID + New GPU (while in the previous years, things were kinda stable / iterative on most fronts).

Since they work on one iOS for all devices, they had much less attention for bug fixes and stabilization, and they have a 1 year limit because of the new device cycle.

This update model sucks, because when there are big hardware changes, the software is less mature even for older devices, and they don't back port security issues, so you have no choice but to update...

Re:Why ProtonMail is more secure than Gmail on Monday October 23, 2017 @02:23PM (#15535573)
Is it actually legal to not log anything ? They specifically claim they don't log IPs, so if someone wants an email data, all they can give him is just encrypted email dumps ? how can that be a possibility ?
Re:Writing a Bootloader on Friday October 20, 2017 @04:53PM (#15519044)
Yes in the 80s PC monitors had CGA and MONOCHROME mode, and if you switched fast between them in DOS (you could do mode mono, and mode co80 in a loop) and it fried my GPU :)
Re:IGN acquires Humble Bundle on Saturday October 14, 2017 @10:07AM (#15472220)
Is there any possible way to make all my Humble Bundle e-mail and information not be shared with IGN database ?
Please don't try looking at MySQL's python connector... from a quick inspection there are quiet a few memory copies going on there... just in Python it does not end in GC, but needless wasted CPU / memory cycles (and less performance, depending on what yo do).

Apple allows apps to share information between them without asking permission

Currently apps from the same company can share information between them in iOS without you knowing about it. For example:1. Logged in Linkedin? the SlideShare app already knows who you are. 2. Logged in any Google app? all other Google apps know who you are. 3. Facebook + Instagram, Google + Waze, etc...That is ultra-annoying, besides login, apps can share information between them without you...

( Read More... | no comments | on HN )
Re:Reverse-engineering the Starbucks ordering API on Saturday July 15, 2017 @04:04PM (#14778649)
Which email provider allow opening an account from a known tor exit node ?
Re:Seeing AI for iOS on Saturday July 15, 2017 @08:14AM (#14776294)
Does this mean RIP OrCam (the other startup form mobileye creator which basically does this as a full hardware / software solution) ?

http://www.orcam.com/

Re:Reverse-engineering the Starbucks ordering API on Saturday July 15, 2017 @01:59AM (#14775220)
Nice (altough the URL does not work) unfortunately in our startup nation there are 0 programs like this :(
Re:Reverse-engineering the Starbucks ordering API on Saturday July 15, 2017 @01:49AM (#14775199)
Besides telling me to use tor (which I know in general what it is), is there a guide I can use ? (i.e. how to send / recv anonymous email on tor from a non tor address ?) or something ???
Re:Reverse-engineering the Starbucks ordering API on Thursday July 13, 2017 @01:59PM (#14763572)
I would rather contact them anonymously first, also I don't understand exactly how Tor would help me with this.
Re:Reverse-engineering the Starbucks ordering API on Thursday July 13, 2017 @01:59PM (#14763569)
I don't want to contact them in a way that they can trace me, since I'm pretty sure that they will try to covert up / threat me (I would hope that someone there already knows this is an issue....).
Re:Reverse-engineering the Starbucks ordering API on Thursday July 13, 2017 @12:40AM (#14758764)
I want to write a similar write-up for a company which basically does everything over HTTP with their own half-baked hardcoded AES key in app for sending credit card info. and that their confirmation checkup is stupid (for SMS) and can be bypassed.

The problem is that their site TOS forbids reverse engineering, and I am afraid their lawyers will go after me instead of fixing the security issues (even if I just contact them), any tips for me ?