News for hackers. Stuff that matters.

kazazes

Re:How much did a tunic cost in the Roman Empire? (2021) on Thursday January 27, 2022 @09:17PM (#30109964)
Enticed by the wiki, I went to buy of off eBay and ended up finding the author's personal library copy with his bookplate.

Will find a friend when I'm finished, as well.

https://www.ebay.com/itm/304333942417

Password managers aren't implicated in the compromise of the OS X keychain or your browser... this is FUD.

Your browser's native store is probably unencrypted [1], and the OS X keychain password can be snatched with a clone of the native password prompt. Neither is true for any respected password manager. They keep you safe.

[1] https://news.ycombinator.com/item?id=10884000

Re:A practical guide to securing macOS on Wednesday November 23, 2016 @11:49PM (#13028202)
I've run 1Password in wine on Arch for years. Both the app and the browser plugin are styled like Win95 applications (even after changing the winecfg settings), but otherwise run flawlessly.

I have wondered if running 1Password through wine would introduce some not-considered attack vector, but I've yet to hear it.

Re:Launching the Electronic Frontier Alliance on Saturday March 26, 2016 @12:34PM (#11366257)
The ACLU specifically was on the opposing end of plenty of Bush-era legislation and got labeled as such. My childhood memories are pocketed with soundbites of Bill O'Reilly denouncing the ACLU as a bastion of American liberalism.
Re:Transmission BitTorrent app contained malware on Sunday March 06, 2016 @07:04PM (#11236285)
Would brew cask have helped you here? It doesn't build from source, it just downloads a precompiled binary.
Re:The kids are all right on Sunday February 14, 2016 @12:31PM (#11099080)
I took this survey in 2011. Teachers were not allowed to be present while we took it. There was no moral pressure to be honest beyond "answer to the best of your abilities" so as not to alienate the group. The entire room openly read the questions and people answered with varying degrees of absurdity. Whatever the results of that room were, they were not representative of the group's risk taking behavior.

Take this anecdote as you will, but it will take me a lifetime to be convinced that a faceless government form can poll the group of cards closest to a teen's chest with any aggregate accuracy.

Re:Show HN: LogDNA – Easy logging in the cloud on Wednesday February 10, 2016 @01:21PM (#11074717)
Are there any client libraries for LogDNA or does it just stream /var/log/* and other logs to LogDNA? Also, you provide APTs and RPMs, but no sources. Is there any way I can build LogDNA and run it on Arch Linux?
Re:Department of Homeland Security Devices on SF Streets on Monday February 08, 2016 @04:52PM (#11061145)
These have been in New York City for years, but are labeled as EPA devices here. You can always find them on the block of a police precinct (sometimes right next to the front door) and in other major tourists spots (I've noticed them in Times Square and Grand Central).
Wouldn't it be more reasonable for browsers to not cache them at all and universally reject missing intermediate certificates? (IIRC correctly, Chrome doesn't mind but Firefox will give you the train conductor)
Re:FlapIt: A physical counter for all your social accounts on Wednesday February 03, 2016 @11:48PM (#11032058)
If they made it hackable or released an SDK with a published spec at launch (instead of waiting for the community to reverse engineer it), I would be way more interested and I think a lot of others would too. Prefab digitally addressable flipboards aren't something I've seen.
Re:2^74207281-1 is Prime on Tuesday January 19, 2016 @12:37PM (#10932282)
Apparently a $3,000 GIMPS research discovery award. What's the practical utility of knowledge of a prime, especially considering that upon announcement it's immediately disseminated?
It's not any of those. Are you sure it's running linux? Also, you're off by a few orders of magnitude. 191mm records * 1kb each is 191 gigabytes.
A well crafted shodan.io search given the already public information (approximate size, in the US, no password, etc.) should give you a good start. It's already been found once.
Yes, my point is that the author did not care to redact the other booleans for the other years, but did redact those two specifically.
That's the question: why are the "primary_2000" and "general_2000" fields redacted strings? http://www.databreaches.net/wp-content/uploads/DataFields.jp...
Re:Show HN: Swifty – Learn to code in Swift on Thursday December 10, 2015 @03:39PM (#10713281)
The lessons and exercises are limited in scope enough that they are entirely static. The work the app needs to do is limited to parsing, stylizing, checking (simple) syntax and matching user input to the task, not executing it. The lessons themselves are no more complex than a programming PPT presentation that looks prettier.
Re:Signal Desktop on Wednesday December 02, 2015 @04:21PM (#10665922)
In the same vein, the signup form allows you to trivially tell who and roughly when someone has signed up for the beta.
What's the second phone doing in that scenario?
He's most likely saying that while the MAS is broken, you can still download something via git and build it yourself.
The existing Android solution only works for Qualcomm chipsets [1], so it must require some radio-level access to verify the presence of an IMEI device. You won't be seeing it in the iOS App Store. Maybe someone can find the relevant private APIs to make it happen.

http://www.slate.com/blogs/future_tense/2014/12/31/snoopsnit...

Re:How New Long-Range Radios Will Change the Internet of Things on Thursday October 29, 2015 @06:34PM (#10474868)
If you haven't lost your faith in Kickstarter yet, this project has $180k committed. A €40 pledge will get you a LoRa board and €200 for a LoRa gateway and what is essentially a demo dongle.

https://www.kickstarter.com/projects/419277966/the-things-ne...

Edit: fat thumbs, on mobile.

Re:Bitbucket is down on Thursday October 15, 2015 @06:18PM (#10396380)
On the flip side, whatever the point of failure is, it's probably pretty high up in their stack.
A refurbished Thinkpad. Can anyone confirm if this is included in the factory install?
Re:Snapchat Discloses $650M Private Placement on Friday May 29, 2015 @02:06PM (#9626273)
Some of the more fanatical users I'm acquainted with have a 200+ second story, every single day. Three minutes a user gets you to 45 pretty quickly.
Re:Privacy Behaviors After Snowden on Monday May 25, 2015 @11:59AM (#9600504)
FastMail isn't scanning your emails to generate a profile of you in order to serve you highly targeted advertising all over the web.

https://support.google.com/mail/answer/6603?hl=en

Except United States' technical definition of war, which must be authroized by Congress.

https://en.wikipedia.org/wiki/Declaration_of_war_by_the_Unit...

I have faith in the power of the judiciary, still. While putting illegal surveillance programs to bed may feel like a half century long game of wack-a-mole, precedent still has power in American courts.
Re:Instagram engineer delves into emoji madness on Wednesday May 06, 2015 @10:58PM (#9503060)
"In the IT world, regular expressions searches justifiably have gained a reputation for being fiendishly complicated. Instagram’s regular expressions for finding emojis may be the most complicated yet."

This stack overflow post [1] and Perl module [2] both come mind.

[0] http://stackoverflow.com/questions/1732348/regex-match-open-... [1] http://www.ex-parrot.com/pdw/Mail-RFC822-Address.html

Re:Google Says More Searches Now on Mobile Than on Desktop on Wednesday May 06, 2015 @10:51AM (#9499046)
It may seem obvious, but check the proxy's logs. Perhaps you're not the only one connecting.
Re:On Mozilla's forced SSL on Friday May 01, 2015 @12:00PM (#9472339)
Chromium/Chrome have already proposed a step in the same direction, pushing your market share figure up to 37.4%. [1]

[1] https://www.chromium.org/Home/chromium-security/marking-http...

Older »