News for hackers. Stuff that matters.

cyber

Careful which countries you go to with that VPN. You don’t want to intentionally circumvent an access control restriction. ;)
I wouldn't be surprised to if this was largely accounted for in supply side contamination issues. It appears that Amazon treats all SKUs identically, sourcing the closest one to fulfill and order, regardless of how that SKU arrived at Amazon.

A concrete example: No Starch Press customers are receiving counterfeit books when ordered from No Starch Press' Amazon store.

Even if this scam is caught, it's still cost Amazon money in dealing with the issue. (And cost legitimate vendors no end of frustration with legitimate customers receiving fake books.)

Re:Biomedical companies bleed 500k horseshoe crabs a year on Monday April 17, 2017 @05:49PM (#14134730)
Both of these require active threats.

"Stand your ground" laws just mean there is no duty(law) to seek retreat above all else before actively defending yourself.

"Castle", in California, simply means that if an intruder has bypassed a control (picked a lock, broke a window, etc) to gain entry then one can proceed on the assumption that they are there to do grave bodily harm. (And thus act accordingly.)

I've for a while said that a _unique_ password is better than an _awesome_ password.

_Bad_ passwords are still bad, however.

(And for $DIETY's sake, don't use your work email address for non-work sites!)

Excepting that in SF the "everyone" does not want the land owners to make productive use of it: they want the status quo. (Well, the status quo of what the remember as being the "high point".)

Having witnessed protests that occurred midway through the reconstruction of offramps, (meaning an existing ramp was torn down, and they were half done rebuilding it), it's not so much NIMBY, but NBAA: Never Build Anything, Anywhere.

The only way that higher taxes would be beneficial is if SF landowners were actually allowed the freedom to upgrade their properties. Zoning, especially height restrictions (40' max over most of SF), as well as endless red tape, make it really hard to make productive use of prime land. Regardless if it's the original owner or new buyer.

( A new buyer is granted some slight advantage, but not enough to be meaningful.)

One also needs to take into account how these larger companies' internal groups function.

"Brian" probably looked into it, knowing that obscurity != security, but got a response back from the group responsible that was the way they intended it to work, and that group's management wasn't going to do anything about it. "Brian" may have even put messages in the right ear up the management chain such that it would actually effect the outcome.

The fact that the email exchange lasted 2 months before "Brian" said "Sorry, not a case." probably means that "Brian" was trying to make it happen and had actually done an analysis.

* Note: I'm NOT Brian. I've never worked for Microsoft.

If only there was a way to allow a people to hold power over their government.
Re:Show HN: Micro – a microservice toolkit on Monday March 21, 2016 @06:25PM (#11332678)
"""Micro was a way of creating a foundation for writing and running distributed systems. It's a pluggable architecture so that the underlying systems can be swapped out based on preference."""

At what point do we just admit that we've re-invented the large co-ordination frameworks of years past? Like CORBA? Is it the point where we add a JSON schema validator? or switch to Protocol Buffers or some variant?

"""One of the terrorists pulled out a laptop, propping it open against the wall, said the 40-year-old woman. When the laptop powered on, she saw a line of gibberish across the screen: “It was bizarre — he was looking at a bunch of lines, like lines of code. There was no image, no Internet,” she said. Her description matches the look of certain encryption software, which ISIS claims to have used during the Paris attacks. """

Possible explanations: 1. POST 2. Linux 3. Elm/Pine/Mutt

There are enough hints in her description that the woman they talked to would be 100% content with an OS that booted directly to the browser, and furthermore, she wouldn't know the difference.

Re:This is why we have Stuxnet on Monday March 21, 2016 @06:05PM (#11332527)
The issue is that it needs to be explained in terms that they can understand: ... or part of your line will fail, randomly, and may take over a day to repair, IF your maintenance procedures are current, if not, you'll lose 4-5 days of line time.

Note: not one mention of "security", or good neighbor, or infection, only cutting to the point.

For the people complaining that it's slow: what plugins are you running?

My contribution: Community packages used most often: api-workbench, fonts, language-sql-mysql, term3, vim-mode Others: dash, export-html, language-docker, linter, markdown-pdf, markdown-preview-plus, markdown-preview-plus-opener, markdown-scroll-sync, markdown-writer, stash-tabs

Re:How to Build an Electronic Bee Counter on Monday January 25, 2016 @07:22PM (#10971079)
I was really hoping they would tackle the harder problem of dealing with a production hive. Temperature and weight are fairly easy to monitor, but knowing activity would be useful in tracking hive health.

Oh, well, maybe a project for this summer.

Re:NetBSD support for psutil on Friday January 15, 2016 @03:03PM (#10911715)
Odd that it won't boot. What hardware are you running and which kernels have you tried? Any way for you to capture a trace?

This probably isn't the best forum to give you a hand. Can you hit one of the IRC channels or mailing lists?

Re:YC Updates and Additions on Friday January 08, 2016 @03:46PM (#10868090)
> In my opinion, companies like Google build one hit after another

Wait, what? Do you have any idea how many ideas they've churned through to get the relatively few hits they've had? Wave didn't do all that well. Orkut had a decent run before they dissolved it (almost 11 years) G+ is still in question.

Yes, they've had some success with some products. And made some excellent purchase decisions (you didn't think they wrote everything they released, did you? Urchin? Writely?).

They've also killed software instead of fully developing it: notebook, reader.

And that is to say nothing of the large numbers of 20% projects. I've personally heard engineers (as a whole) at Google being chastised because the success rate of 20% projects was too high.

Re:The WTO rules against “dolphin-safe” labels on tuna on Wednesday November 25, 2015 @08:44PM (#10630855)
You have it backwards. The farmed has been found to have higher mercury content.
Re:Google self-driving car pulled over for driving too slowly on Friday November 13, 2015 @12:04PM (#10560881)
Road speeds need to be re-evaluated every 5 years. They take into account the speeds of traffic that are currently flowing on the road.
Re:Google self-driving car pulled over for driving too slowly on Friday November 13, 2015 @11:55AM (#10560824)
Yes, it was: http://www.leginfo.ca.gov/cgi-bin/displaycode?section=veh&gr... states:

"360. "Highway" is a way or place of whatever nature, publicly maintained and open to the use of the public for purposes of vehicular travel. Highway includes street."

https://www.dmv.ca.gov/portal/dmv/detail/pubs/vctop/vc/d11/c...

"22400. (a) No person shall drive upon a highway at such a slow speed as to impede or block the normal and reasonable movement of traffic, unless the reduced speed is necessary for safe operation, because of a grade, or in compliance with law."

Yes, shocking. (Also, El Camino is a State Route, I'll let you look that one up.)

Re:Google self-driving car pulled over for driving too slowly on Friday November 13, 2015 @11:52AM (#10560804)
See CVC 360

"360. "Highway" is a way or place of whatever nature, publicly maintained and open to the use of the public for purposes of vehicular travel. Highway includes street."

http://www.leginfo.ca.gov/cgi-bin/displaycode?section=veh&gr...

Re:Firefox’s New Memory Tool on Thursday November 12, 2015 @03:47PM (#10555991)
For a look into how disabling/enabling privacy trackers impact sites, try out the Privacy Badger plugin. It's got some granular support, and crowdsourced guidance. With a button to report when it broke a site!

Privacy Badger is an EFF project.

Yes, it means that some states can allow rampant piracy, and other states who are aggrieved can not block the import from the offending stats. Which is precisely what some of those states want.
Re:Why DevOps Fails at Application Security on Wednesday November 04, 2015 @05:06PM (#10510144)
Until security is treated similarly to QA this will never improve. Along with quality, robustness, performance, etc; security needs to be treated as a first class feature.

That said, it's a tradeoff. I've seen releases with P1 bugs being released. In those situations it was a discussion between Eng, QA, and Client Operations to determine what was the best course of action. Technically a P1 went out the door. Technically there were 2 additional releases before it mattered to the client that would have been affected.

Might as well disclose that Sentry is commercial-ware with a limited free tier:

What happens when my free trial expires?

When your trial expires we'll downgrade you to our free tier. Our free tier is limited to a single user and 250 events per day.

Re:A reimplementation of NetBSD using a Microkernel [video] on Wednesday June 17, 2015 @07:16PM (#9735878)
This is pretty cool. It would be neat to seem some of this technology folded back into NetBSD (potentially with the already existent modules infrastructure.)
Yes, the first book set was to test the "bandsaw" protocol and getting it back into electronic format.

IIRC, they also tweaked the font for better OCR.

Ideally, you should be using a unique password at every site. There are plenty of secure password storage tools to help you keep track.

That way, even if there is a site breach, your other accounts are not at risk.

Re:Dear YC companies, I responded. You could do the same. on Tuesday April 09, 2013 @01:52PM (#5519784)
Unfortunately, it's also a learning experience of those padding their resumes.

If all it took was to apply, there would definitely be an opportunity for a data market: I would create submissions for the sole purpose of getting the credential response. From there I could build a map of what the industry is hiring. With that I can sell resume coaching services. (Amongst other data sales.)

Re:Automatic - Your car and smartphone, connected (YC S11) on Tuesday March 12, 2013 @01:08PM (#5363171)
I'd always been jealous of a friend's realtime gas metering on his BMW (up until the time I had to bring him gas at the side of the highway.)

I was intrigued, I hit the buy button. We'll see how well it actually works. I'd been meaning to get a code reader anyway. ;)

Older »