News for hackers. Stuff that matters.

krrose27

Re:Chase did a bad thing, so we did a good thing on Tuesday June 11, 2019 @06:59PM (#20160285)
With a better understanding of how VGS works I really just fall back to my weakest link in the chain questions:

Does Lob hold any PCI level certifications? It appears they hold HIPAA but I see no mention of PCI?

Does Lob provide any interface that shows sent mail and the content (it appears they do)? If so and they don't hold any PCI certifications what benefit do we really have with ever getting a VGS token?

What stops you from scraping this data from Lob's API?

---

Original comment below.

I'm confused on how this data lands at Lob with an account number if you never get it.

Correct me if I'm wrong but the letter you send includes the account number and not the VGS token?

All of my following questions assumes an affirmative answer.

How is the account number landed in Lob? It appears something must be calling the Lob API with an unencrypted account number? What is making that call?

Does Lob hold any PCI level certifications? It appears they hold HIPAA but I see no mention of PCI?

Does Lob provide any interface that shows sent mail and the content? If so and they don't hold any PCI certifications what benefit do we really have with ever getting a VGS token?

Re:Securing a travel iPhone on Saturday July 09, 2016 @07:45AM (#12061012)
Just a heads up security questions can be reset with a call to AppleCare.

That's why this https://support.apple.com/en-us/KM205083?cid=acs::applesearc... article states to contact them.

Re:Securing a travel iPhone on Saturday July 09, 2016 @07:38AM (#12060996)
They don't need to restore or power on to check activation lock.

You go to https://www.icloud.com/activationlock/

Re:SpaceX CRS-5 Launch on Saturday January 10, 2015 @05:06AM (#8866451)
https://twitter.com/elonmusk/status/553855109114101760

"Rocket made it to drone spaceport ship, but landed hard. Close, but no cigar this time. Bodes well for the future tho."

Re:Amazon Echo on Thursday November 06, 2014 @12:26PM (#8568223)
Since you mention fresh:

https://fresh.amazon.com/dash/

It still requires a jump to the pc to order; but no reason they couldn't add a way to initiate an order from it. It's also a tad less privacy intrusive then echo.

Re:Geode from iCache (2012) on Sunday November 17, 2013 @08:56PM (#6752074)
http://www.zdnet.com/icache-geodes-spectacular-crash-and-bur...

tl;dr: Quality(?) issues; then iPhone 5 with Passbook, new form factor, and lightning connector.

Re:Rackspace accused of patent infringement for hosting Github on Tuesday September 18, 2012 @02:04PM (#4539568)
Using PACER it appears all of the 2011 cases are still active and are in discovery. They are all set for trial in November of 2014.
http://www.wholivesnearyou.com/

Ok so I am stretching this one but it seems to have been around since 2004.

Re:Java IAQ on Friday April 13, 2012 @11:54AM (#3837321)
The thing is String.length() doesn't do any re-computation. All it does is return a variable defined in the String object that is modified when the string it contains changes.

See my other comment saying you should ignore any speed suggestions by the article.

Re:Java IAQ on Friday April 13, 2012 @10:19AM (#3836816)
Goes directly to "What other operations are surprisingly slow?" and attempts to write micro benchmark with the same results.

Fails....

Most of the general stuff is accurate and dandy but I don't believe you should listen to many (most likely any) of the speed related statements as this article appears to have been written in 1998.

Topic should be "Java IAQ circa 1998".

Re:Caller ID Made Simple on Monday April 09, 2012 @12:29AM (#3815836)
I definitely find it interesting.

As somehow it pulls up my (not) apparently unlisted home phone; also, it pulls up family members names for cellphones which are under my name on the contract.

So I am definitely interested in finding out where this data is being taken from?

Originally posted on your blog.

A sworn affidavit should work in a courtroom. (Not a lawyer!)

So at this point I would send a nicely worded certified letter telling them to stop harassing you.

At that point they have limited options (in my opinion). 1) Sue you because they can prove you own it in court. (At which point a simple affidavit should end your part in said suit). 2) File a John Doe suit and actually find out who runs it.

Best option would of course be to obtain a lawyer and head it off sooner than later. Also once you have yourself a lawyer you won't have to deal with their lawyers at all as they should be bared from contacting anyone but your lawyer.

Re:Linode Reduces Transfer Pricing (Incoming Data is now Free) on Thursday September 01, 2011 @07:39PM (#2952270)
I swear another cloud provider did this recently..

Oooh yeah. AWS did back in July. http://aws.amazon.com/about-aws/whats-new/2011/06/30/aws-ann...