News for hackers. Stuff that matters.

hahainternet

Re:Getting Google to ban our entire company on Monday May 21, 2018 @07:37AM (#17117610)
No you completely lied and are now trying to save face.
Re:Android P on Tuesday May 08, 2018 @07:48PM (#17026358)
https://github.com/damonkohler/sl4a has been around in one form or another for a decade or so.

It looks dead in that repository though.

Yours is the only post in this entire thread adding the needed context.

The article doesn't either. Yet somehow you were at the bottom of the page for me. I don't understand why.

Re:Apple refused to Fix our iMac Pro on Tuesday April 17, 2018 @07:01PM (#16863061)
Is it appropriate for you to be trying to attack the guy's credibility?

Seems odd that it would be the first and only response given this video.

Re:Google loses ‘right to be forgotten’ case on Saturday April 14, 2018 @01:39AM (#16836073)
It's clear you're not looking at this from a neutral perspective. Given that the situation is significantly different than you imagined and your view has not changed.

> Many defendents refuse a plea bargain of "guilty" because they don't want to be put on that list.

This is not the US.

> Non-police residents can inquire about felons on the list because of Sarah's Law

This is no different than an extended check which any company allowing you to work with children can carry out. The difference is here that vulnerable new partners of the person can enquire if they see fit.

It is about keeping people safe, not punishing people. It's literally a criminal offence to reveal information about someone having to sign the register.

Re:Google loses ‘right to be forgotten’ case on Friday April 13, 2018 @03:14PM (#16833074)
> why do they have a sex offender registry?

We have a Violent and Sex Offender Register: https://en.wikipedia.org/wiki/Violent_and_Sex_Offender_Regis...

It is not public, it exists to facilitate Police intelligence.

Except that if you click the link, that's not what this means.
Re:Breaking the Ledger Security Model on Wednesday March 21, 2018 @11:11AM (#16638667)
> I was willing to tolerate Ledger's issues here ... if they fixed them

> Unfortunately, the Ledger team appear to be asshats, so there's every reason to fear using them in the future, even if they've fixed this specific issue

Your first two lines completely contradict each other.

The Nano S is #3 in your list.

Re:Lightning on Stellar: Technical Spec and Roadmap on Tuesday March 20, 2018 @02:22PM (#16631147)
Perhaps someone could help me.

Lightning seems quite sound in theory, but I have misgivings about the order in which a fresh transaction is signed, and the secret to the old transaction revealed.

It would seem that by interrupting this chain before both old secrets are revealed, the attacker could safely claim all coins in the channel.

I'm probably wrong, but I'd like to know why.

Re:First Lightning mainnet release on Friday March 16, 2018 @04:28PM (#16603793)
The link you've posted

a) Does not work b) Seems to be specific to Ethereum c) According to a mirror, has its information sourced from an unverified Reddit post.

Is there anything but FUD here?

Re:First Lightning mainnet release on Friday March 16, 2018 @03:12PM (#16603212)
> 3 days? In contrast, your liability is capped at $500 if you inform your bank of debit card fraud within 60 days.

Unless your bank considers the fraud to have been caused by a lack of care on your behalf, in which case you will not be refunded and have virtually no means of appeal

(note: Obviously depends on your country and local laws)

Re:First Lightning mainnet release on Friday March 16, 2018 @03:10PM (#16603202)
You need to physically connect your premesis to the middlemen.

In lightning, you need only virtually connect them.

There's a literal world of difference between the two.

Re:First Lightning mainnet release on Friday March 16, 2018 @03:09PM (#16603195)
I noticed you've posted the same thing in many different posts with increasing inaccuracy.

> instead they have to be given permission to transact by monolithic liquidity hubs

Completely false

> who of course must take their own fee

May, and routes aren't prescribed so they may take a fee on a payment that may be routed through them.

> I would want a rate of return similar to stocks but times some multiple to account for the very high risk of my hot wallet getting hacked and losing all my money.

What. This is completely disconnected from Lightning's functionality.

Please stop spreading FUD.

Re:First Lightning mainnet release on Friday March 16, 2018 @03:03PM (#16603145)
> lol, with lightning you have to rely on a small number of centralized payment hubs

There is no requirement for this. This is FUD.

Re:Homebrew 1.5.0 on Friday January 19, 2018 @09:47AM (#16186534)
Is what `end-users should care about` any business of yours? I don't mean that insultingly, I mean genuinely.

I think renaming a bunch of packages with a prefix is probably silly, but your response also strikes me as incredibly prescriptive.

I like brew, but I don't like that attitude.

I wasn't really asking for a suggestion, more pointing out that it isn't some previously solved and agreed upon issue.

It's something that has to be picked, and the parent poster will undoubtedly count as 'arrogance' for choosing a workaround.

> Except it's less than clear that this is an "invalid username"

Indeed, and once that was pointed out his response was equally polite and accurate, offering a workaround which keeps everyone happy.

Literally, what more do people expect?

> The fact the software doesn't do what any sensible user would expect is completely irrelevant to Poettering.

Logs and error and continues? I think you're confused by Systemd exposing all sorts of frailties of traditional software. How do you propose that it differentiate between UIDs and user names?

> "Trolls" have not forced anythings - just standard systemd developer behavior.

They've had to delete multiple posts from the thread which are nothing but trolls, hell YOUR post is nothing but a troll.

Are you reading the same thread as me? He replied explaining precisely why this is an error and received nothing but hate for it, 40 thumbs downs.

On the other hand, you come here to uselessly complain and have the temerity to complain that poettering doesn't write exactly the code you want him to write.

How do you justify your ridiculous attitude?

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @02:20PM (#11153478)
> Brining up the most horrible of crimes to justify a particular argument for increasing the powers of law enforcement is an obvious attempt to appeal to emotion, rather than to experience.

No it's actually an appeal to both. The increase in powers here if any exists whatsoever is minimal. I'm advocating Apple comply with them.

> If your argument is any good, it will be just as good when talking about why the police should be able to search your phone for evidence of tax evasion as it is for talking about why the police should be able to search your phone for evidence of child rape and terrorism.

If they can search your home for it, they should be permitted to search your phone for it. Both should have the exact same expectation of privacy and the exact same judicial oversight.

> Otherwise, we go to a place where we say, "Well, the shouldn't summarily execute people who steal cigars from convenience stores, but when it comes to terrorists, we shouldn't let laws get in the way of their need to do what's expedient."

There is no evidence that there is any legal protection for Apple here and strong evidence that indeed the FBI can compel them. Nobody is advocating breaking the law or even going around it.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @01:55PM (#11153295)
> Can we not drag this down to the media scare tactic that is child pornography?

You mean can we not use the crime Apple has essentially made impossible to secure a conviction on? No, I'm sorry. Kids being raped matters.

> For every sicko who's trading child porn there's dozens, if not hundreds, more who're trying to escape an abusive partner, leaving gangs, getting away from sexual slavery, or whistleblowing on government or companies breaching the law.

None of which is remotely related to phones being unbreakable by law enforcement.

> If Apple create this ability its use will extend past the immediate issue and affect people who genuinely need this security

A fallacious slippery slope. If you let the Police search my house, they will search everyone's house without a warrant and therefore it's bad to have any searching ever.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @01:31PM (#11153085)
> Likewise, there are cases where someone has encrypted the only evidence against him, and the State has no right to compel him to decrypt that evidence.

My country does.

> How often is any crime perfect, anyway?

Significantly more often if Apple gets their way, as they provide guarantees backed by the richest company in the world. Taking a photo of your rape victim used to be idiotic and a way to get caught. Now it's a way to keep power over your victim as Apple will protect that photo.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @01:30PM (#11153073)
> Are you also in favor of DNA typing and fingerprinting everyone at birth into a national database?

Yeah this has a lot of benefits and helps catch criminals extremely quickly. It has virtually no privacy implications. I'm fine with it and some nations do it.

> How about requiring all citizens to carry a GPS locator, camera and microphone which are always recording into a national database? We could always just limit access behind a warrant, right?

This is about the most disproportionate act I can imagine. If you have to reach this far, you don't have any point to defend.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @01:28PM (#11153052)
> Bad guys use cars, but we don't require cars to come with remote kill switches.

Nobody is asking for a remote kill switch. Searching a car is a common task, searching a phone should be the same.

> Let's think about the implications of punching a hole in the security of those devices.

Nobody is talking about uploading new software to every device. This is wildly misleading.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @01:21PM (#11152992)
> Should we put in place ubiquitous video and audio surveillance in every square foot of the country just in case the FBI ever wants to review something that happened?

In public areas that are often visited? Absolutely yes, an unbiased source of evidence available to the public? Excellent.

> Law enforcement has apparently lost the ability to do on the ground investigation work in favor of whiz bang-ery

Apple has provided a child porn trading network protected by the very principles of mathematics and their refusal to cooperate with the FBI.

What they're doing is precisely what any law enforcement agency would.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @01:01PM (#11152807)
> If the needs of the many don't outweigh the needs of the few, then why does the total number of criminals matter?

Because the victims matter.

> If I want to buy strong encryption with no backdoor, and I'm not a criminal, then why would the issue of crime matter at all?

Being a criminal isn't an attribute of a person, it's the actions the person carries out. I don't give a shit about jaywalking, but I care about rape victims. This is not inconsistent.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @01:00PM (#11152793)
> So you are saying Apple is only helping criminals with encryptions?

No I'm saying that arrogantly the people behind these decisions cannot imagine a scenario in which someone else could hold information about them that would be harmful just by its existence.

They can only imagine their secrets being revealed, such as Tim Cook being outed before he was satisfied.

> you don't fear encryption being used against the average person?

I'm confused as to what you're asking, that's exactly what I fear. A rapist taking photos of his victim, the evidence being insufficient for a conviction, Apple now protects that rapist and his access to his victim's photos at the cost of the victim's mental health.

> For example if the police would search your phone in a traffic stop, that would be okay?

If they had good reason, that's the basis of the legal system after all.

> The amount of cases you could solve with a crypto backdoor

Crypto backdoors are ineffective. Service provider accountability is. This is why Apple is fighting it.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @12:55PM (#11152748)
> I disagree with your healthcare analogy. It is in the interest of the many for the US to have widespread, cheap, available healthcare. It would give our citizens longer, healthier lives, which from a purely economic standpoint would allow them to work longer and increase GDP.

I agree it is, but my point is that despite this, it is not implemented in any way. The needs of the many in the US do not outweigh the needs of the few. Nor in most cases should they. Individual healthcare has no significant harm to it, but prohibiting the searching of communications and data on someone's primary computer has major harm implications.

Re:Answers to your questions about Apple and security on Monday February 22, 2016 @12:54PM (#11152735)
> Nonsense! Believe it or not, prior to the existence of smart phones it was possible to convict people of abuse and rape; in fact, it happened quite regularly. The evidence against such criminals need not be on a smartphone; after all, there are the victims; there are witnesses; there is forensic evidence.

So this means it's OK to withold access to evidence, even if you are simply a private company with no legal standing? No of course it doesn't.

Please, tell me how a paedophile I know exists and uses an iPhone can be prosecuted for the contents of that device. I'm fairly sure he has taken illegal photos of children he may be abusing, but he lives in Cambodia.

What can be done?

Older »