News for hackers. Stuff that matters.

jmediast

Re:Show HN: Nowcation - find spontaneous travel deals on Sunday February 03, 2013 @08:28PM (#5161968)
heh, the devs were telling me about an issue they solved with caching, sounds like a side-effect
Re:Show HN: Nowcation - find spontaneous travel deals on Sunday February 03, 2013 @09:43AM (#5159781)
Looks nice!

I'd like to see a feature where I give it a budget, maybe a temperature preference, and it books me a random trip.

Re:Petition to reform the Computer Fraud and Abuse Act on Wednesday January 16, 2013 @01:56AM (#5065737)
I'm not sure I'd worry about that... if the proposed laws were worse, then I think you'd see another SOPA/PIPA style reaction.

And then you have to consider the chances that a response from the administration will actually start an investigation / reformation.

For better or worse though, I guess I'm willing to see where it goes.

Re:Leak of Multiple University Databases on Tuesday October 02, 2012 @05:49PM (#4604561)
If it's anything like ours, they don't like to touch systems that 'work'... They don't have the resources to audit, update, and re-train everyone to use the current version.

Then there are the students hired to build internal tools who wouldn't know SHA1 from Bcrypt/Scrypt...

Re:Leak of Multiple University Databases on Tuesday October 02, 2012 @04:17PM (#4604048)
It's not my dump, so I can't say. I've only been able to verify the university of michigan data is real.

Doesn't look like anything too critical was hit though.

Re:Pandora doesn't hash their passwords on Friday September 21, 2012 @02:15AM (#4552563)
It seems like they "fixed" people being able to read the passwords by replacing the the form value with __USE_EXISTING__...

It's still trivial to automate account takeover though. Here's a PoC to take over pandora accounts on your network using MITMProxy and Tornado: https://github.com/JackWink/Pandora-Account-Takeover-Tool

Re:Pandora doesn't hash their passwords on Thursday September 20, 2012 @08:04PM (#4551456)
Re:Site Lets You Simulate a Facebook Hack, Goes Viral at PennApps on Wednesday September 19, 2012 @02:25PM (#4544800)
Facebook banned the app when the point was to hack another account.

They put the app back up under a new name / context to comply and demo the app.

I'll check that out after work today. I was hoping I wouldn't have to ditch CM to get ICS
Running an older CM7 build on my evo4g, vulnerable to ZurgRush :(

Ask HN: Does Pandora Store Plaintext passwords?

If you check out your account on pandora.com, you can see your plaintext password in the password box (value="MY_PASSWORD").I don't think Pandora would store it as plaintext... rather I hope they wouldn't. My guess is that they may encrypt it, but not hash it? Or it's potentially saved from the POST and not kept in their database?Is there ever a good case to encrypt a password instead of...

( Read More... | no comments | 19 points | on HN )
Re:Ask HN: Hacker looking for Ann Arbor Housing on Thursday March 01, 2012 @11:59PM (#3655442)
Yeah, but I'd rather end up with someone with a shared tech interest. I'm not saying that it's not possible with Craigslist, but definitely more likely via HN.

Thanks for the padmapper suggestion! I'll give that a shot next.

Ask HN: Hacker looking for Ann Arbor Housing

Hey HN,I've got 14 days left to renew my lease on a 2br apartment in Ann Arbor (North Campus). My roommate just let me know he is taking off and won't be renewing his part of the lease.Any local hackers looking for cheap housing (~$460/mo including utilities for your own bedroom)? Or is anyone in A2 looking for a roommate this coming year? I am a student, so the closer to campus the better,...

( Read More... | 3 comments | 2 points | on HN )

Older »