News for hackers. Stuff that matters.

dyu

Re:How Zillow's homebuying scheme lost $881M on Friday March 18, 2022 @03:36PM (#30726540)
While it is true cash offers in the strict sense mean real cash, it may also mean no-contingency offers. You can go through mortgage underwriting first and commit to pay the gap between appraised value and deal value, and can make a no-contingency offer with minimum risk. Or, if you are willing to lose your deposit (usually 3-5%) you can also make a no-contingency offer to be more attractive.
US federal gov has their own PIV/CAC
Re:Robinhood Files Confidentially for U.S. IPO on Tuesday March 23, 2021 @06:56PM (#26561411)
A short is not an option contract
Re:They want us to be compliant, not secure on Saturday December 26, 2020 @07:24PM (#25547620)
I've had luck showing that the cloud provider fulfills the 'local backup' requirement as part of their compliance (provided they do meet the same framework that you're trying to meet), and us inheriting the control from the cloud provider.
Re:They want us to be compliant, not secure on Saturday December 26, 2020 @07:14PM (#25547570)
They could be referring to the list of FIPS-validated crypto modules.
Re:Ask HN: What's your quarantine side project? on Thursday May 14, 2020 @02:40AM (#23176171)
clquery, a SQL interface to cloud resources. Using SQL and tables to interact with AWS (and eventually others) makes it easier to quickly query and join across various resources and services without needing to remember how to make and parse the underlying API.

`pip install clquery` or https://github.com/dongting/clquery

Can it use an exportable/importable file as source of truth which you can then check into git?
Also worth looking into using ALB instead of API Gateway, and have ALB call Lambda (I think this is possible).
To be fair, this is exactly CUP's intent.
Re:Text Processing in the Shell on Tuesday March 17, 2020 @03:05PM (#22608873)
It appears sort has a --stable flag for order preservation. I actually thought sort was stable by default already, but now I know.
Re:Hacking GitHub's Auth with Unicode's Turkish Dotless 'I' on Monday December 16, 2019 @10:04PM (#21810129)
I believe you are correct. However, this particular example may not be the best one, see: https://en.wikipedia.org/wiki/Capital_%E1%BA%9E#Current_situ...
Re:Airbus hit by series of cyber attacks on suppliers on Tuesday October 01, 2019 @08:57PM (#21132522)
ISO27001 (the main security one) has annual reviews which are more lightweight. After two years, the three-year cycle restarts.
Re:Cybersecurity Pros Name Their Price as Hacker Attacks Swell on Wednesday August 07, 2019 @09:58PM (#20641139)
from your website: HIPPA should be HIPAA
Re:How many kinds of USB-C to USB-C cables are there? on Monday July 15, 2019 @06:23PM (#20445848)
Sounds like the Boeing 737 MAX problem (without the killing part).
Re:AWS Control Tower on Monday June 24, 2019 @08:50PM (#20270150)
You can also check out https://divvycloud.com/, which is similar and supports a few other clouds.
Re:Why people confess to crimes they didn’t commit on Sunday June 16, 2019 @06:39PM (#20198421)
I am not well-informed, but according to https://en.wikipedia.org/wiki/Miranda_warning :

>If you cannot afford a lawyer, one will be appointed for you before any questioning if you wish.

Re:Google Cloud Is Down on Monday June 03, 2019 @12:48AM (#20080477)
Different locations see different counts because of aggregation/de-aggregation.
Re:SaaS CTO Security Checklist on Thursday May 30, 2019 @06:11PM (#20056457)
the assumption is you do not come up with your own words, and pick words at random from the whole dictionary.
Also a nasty surprise when you travel to another country and realize your mobile plan cannot have roaming, and you have no service at all.
Re:Design Patterns for Managing Up on Saturday January 26, 2019 @04:57AM (#19005660)
Also used in research grant proposals
It's like editing a piece of code without fully understanding what it does, without unit tests, and your text editor may be buggy.
Re:Gravitee: Open-Source API Gateway on Sunday December 30, 2018 @03:03AM (#18788027)
I'd say it's lower in the stack, and probably for a different audience. If you really wanted to, you can probably implement BeyondCorp using (but not only using) this or one of its competitors mentioned in this thread; but it's only part of the equation and leaves out the authorization logic of BeyondCorp.
Re:Quora User Data Compromised on Monday December 03, 2018 @08:38PM (#18595096)
As an example, consider an army attacking a defending army. The defending side is as good as the weakest member, because you can presume the attacking side to be looking for the weakest part and attacking that. On the other hand, the attacking side is as good as the strongest member, and having a few weaker members is ok. It is generally harder to make sure you have uniformly good defense, than getting a few really good people to spend dedicated time attacking.

Of course, this model assumes that as soon as you have penetrated the perimeter, the rest becomes easy. This is the more traditional model. People are increasingly adopting a you-are-already-hacked approach, which makes it harder to move laterally once someone gets in. However, the general challenge still applies.

I think they provide the machines as an incentive, and in turn it can only dispense their brands.
Re:XSStrike: XSS detection suite on Monday November 12, 2018 @08:22PM (#18437599)
Interestingly, as of last year Azure no longer requires advance notice: https://www.microsoft.com/en-us/msrc/pentest-rules-of-engage...
If you are in California, the employer is now required by law to disclose salary range.
Re:Tesla Faces U.S. Criminal Probe Over Musk Statements on Tuesday September 18, 2018 @05:26PM (#18019292)
You can do a straddle and get the best of both sides.
Re:The Secret API of Banks on Wednesday August 08, 2018 @09:42PM (#17721105)
FYI if they enter the final amount incorrectly you can dispute the charge with your credit card provider. It's probably a stronger case if you kept your own copy with the final amount that you wrote down.
Re:PIN number analysis (2012) on Friday August 03, 2018 @04:54AM (#17678266)
If you are interested in this sort of analysis, I recommend reading into works by Joseph Bonneau: http://jbonneau.com/publications.html
Re:Let's code a TCP/IP stack, 1: Ethernet & ARP (2016) on Thursday June 14, 2018 @09:31PM (#17316829)
It might not be the author's intention, but I think there is now a push for MAC addresses to be 64 bits instead of 48.

Older »