News for hackers. Stuff that matters.

lucastx

Re:Slack is down on Tuesday January 09, 2018 @03:36PM (#16109785)
Also no good for data capped connections
Fluid Concepts and Creative Analogies is a wonderful book. I wouldn't call the systems they build upon (such as lMetacat [1] and Tabletop [2]) "machine learning"...

[1] http://science.slc.edu/jmarshall/metacat/

[2] https://deepblue.lib.umich.edu/handle/2027.42/105891

I'd also like to see FARGonauts / Center for Research on Concepts and Cognition style software implementations around... I have run with success this python implementation of Copycat:

https://github.com/ajhager/copycat

Re:LastPass RCE vulnerability fixed on Tuesday March 21, 2017 @07:33PM (#13927277)
Keyringer is a software that does exactly what I think you need, in a similar way than the parent's suggestion (gpg over git):

Keyringer: encrypted and distributed secret sharing software https://keyringer.pw/

Re:Build a digital clock in Conway's Life on Saturday March 11, 2017 @05:09PM (#13847530)
Except gliders floating in infinite space. Maybe.
Re:WhatsApp backdoor allows snooping on encrypted messages on Friday January 13, 2017 @09:21AM (#13390934)
From the news article:

Boelter said: “[Some] might say that this vulnerability could only be abused to snoop on ‘single’ targeted messages, not entire conversations. This is not true if you consider that the WhatsApp server can just forward messages without sending the ‘message was received by recipient’ notification (or the double tick), which users might not notice. Using the retransmission vulnerability, the WhatsApp server can then later get a transcript of the whole conversation, not just a single message.”

I frankly didn't understand what was said here.

Re:The bank lent me $2m so I spent it on strippers and cars on Thursday December 15, 2016 @10:56AM (#13185412)
“What is the robbing of a bank compared to the founding of a bank?” -- Bertolt Brecht
Re:Why are websites sometimes “down for maintenance”? on Sunday November 27, 2016 @09:55AM (#13049428)
I see here two concepts of "being able to"
Re:Signal and Giphy on Wednesday November 02, 2016 @10:20AM (#12854974)
People underestimate a lot the power of "useless" features, if well designed, to attract new users.

Telegram's Stickers are probably one of the features that most people feel other messengers lack to make people enjoy using it. Lots of friends are actually communicating daily through GIF's.

Re:Search Risk – How Google Almost Killed ProtonMail on Thursday October 27, 2016 @11:51AM (#12806126)
Sure it is not the best tool -- but depending on what means "critical" in your context it provides great security. Not against the NSA targeted attacks, sure, but if you're not so concerned about your adversary using exploits and more sophisticated tools (versus just demanding data from the provider or something like that) ProtonMail goes a long way.

Anyway it is, for most cases I can think of, much better than Gmail.

Re:Search Risk – How Google Almost Killed ProtonMail on Wednesday October 26, 2016 @10:03PM (#12802386)
Google is supposedly hiding a direct competitor to one of its main product from its search engine, the main entry of the Internet for millions of people that aren't very proficient with computers.

Google's product, Gmail offer considerably lower security and privacy than this competitor and using it instead of ProtonMail may very realistically get someone (a journalist, whistleblower, LGBT activist...) in deep trouble or even killed in lots of places and contexts.

I think this is a pretty evil move. Not only for this but what it represents when, again, millions of people were educated for years to enter the Internet through this search engine and don't have any clue that it may not only tamper with the order of the results but also hide websites.

Re:Tor Browser Exposed: Anti-Privacy Implantation at Mass Scale on Wednesday September 21, 2016 @05:53PM (#12552606)
From /r/TOR:

"Old news. This was fixed in 6.0.5.

https://blog.torproject.org/blog/tor-browser-605-released

Interesting note: The author is part of the rotor browser fork that is going no where so far. Doesn't look like the reported issue has been fixed there. In fact, no commits since before this blog post."

https://www.reddit.com/r/TOR/comments/53u1cd/tor_browser_exp...

Re:The GNU Privacy Handbook (1999) on Sunday September 11, 2016 @11:41AM (#12473877)
For a much more gentle (and illustrated) introduction do public-key encryption, GnuPG and how to use it with email (Thunderbird + Enigmail), see FSF's Email Self-Defense:

https://emailselfdefense.fsf.org/

Tactical Tech's Security in-a-Box has more detailed, step-by-step, multiple platform guides for the same tools:

https://securityinabox.org/en/guide/thunderbird/windows

https://securityinabox.org/en/guide/thunderbird/linux

https://securityinabox.org/en/guide/thunderbird/os-x

SMS is the first factor in the case of Telegram. The 2-step authentication Telegram provides is through email.
Re:How Signal Beats WhatsApp on Saturday June 25, 2016 @09:46PM (#11979041)
I guess there is no point in arguing if you think this way. Paraphrasing Edward Snowden, if you don't work to protect privacy because the threat to YOU is not clear, you shouldn't work to protect free speech if you're not the one being silenced.

A big problem is that the threat to you exists, but is subtle: society gets worse when we allow this to happen to all those people that we would consider heroes years in the future but are deemed (sometimes by the letter of the law, sometimes not) criminals right now. Conformity for the forest by pruning the trees.

Re:WhatsApp is back online in Brazil on Wednesday May 04, 2016 @11:46AM (#11629147)
Re:WhatsApp is back online in Brazil on Wednesday May 04, 2016 @01:11AM (#11626340)
Here's my article summarizing the status and what can happen today (no time to translate unfortunately):

https://antivigilancia.org/pt/2016/05/cpiciber-o-que-pode-sa...

Re:WhatsApp is back online in Brazil on Tuesday May 03, 2016 @10:26PM (#11625730)
I'll work on a quick article today to explain this and adapt the page to reflect that. Thanks for the tips. Answering you quickly (I'm preparing dinner :-)):

- Tomorrow, the CPI decides their final report (after three drafts and a couple separate patches) on all the inquiries the commission made the last months. This report includes "recommendations" to some existing draft bills and proposes a number of other bills.

- Parliamentaries presented "destaques" that will be voted separately and may supress the "IP blocking for illegal content" and "notification-based removal of illegal content" bills.

- The final report as of now is the first link with a small patch on the Projeto de Lei 1.6 made by the second link.

http://www.camara.gov.br/proposicoesWeb/prop_mostrarintegra?...

http://www2.camara.leg.br/atividade-legislativa/comissoes/co...

EDIT TO APPEND:

TL;DR: The two bills that we may realistically remove through the help of friendly parliamentaries tomorrow are the ones about illegal website blocking (ISP blacklisting) and content removal through notification; both open the door for criminalizing remixes and using copyright infringement for censorship.

Re:WhatsApp is back online in Brazil on Tuesday May 03, 2016 @08:18PM (#11625295)
We dodged this bullet but here in Brazil but RIGHT NOW there is a much more dangerous risk: with the Parliamentary Commission on Cybercrimes (CPI dos Crimes Cibernéticos / CPICIBER) report a "combo" of bills will get "fast track" on Congress and, to list some things, expand data retention, allow access to IP addresses without warrant and allow judges to block "illegal" content, including copyright violations much like DMCA does (they use the "notice-and-staydown" terminology).

More details here:

https://www.eff.org/deeplinks/2016/04/battery-dangerous-cybe...

https://www.accessnow.org/access-now-delivers-petition-brazi...

https://theintercept.com/2016/04/26/brazilian-cybercrime-bil...

The final voting will happen TOMORROW, 9 a.m. Brasilia time (GMT-3), 5am in California I guess. If you can help raise awareness and use EFF's Action Center to message the parliamentaries through Twitter and Facebook around that time, it would help a lot.

https://act.eff.org/action/fight-back-against-brazil-s-draco...

In portuguese, this is the best starting point on the debate (disclaimer: I work on antivigilancia.org):

https://antivigilancia.org/pt/cpiciber/

Re:Left-pad as a service on Thursday March 24, 2016 @10:14PM (#11358074)
Poe's law for programming culture extremists
Re:The Research Pirates of the Dark Web on Wednesday February 10, 2016 @07:40AM (#11072318)
You pasted a HTTPS address, but the server doesn't answer to HTTPS (it is somewhat redundant when you use onion services anyway). The correct one is http://scihub22266oqcxt.onion/
> It has many tactics or tricks to cover or change the topics when facing difficulties.

This at start sounded like cheating for me, but thinking about it, developing these tactics to change the course of conversation seems like an important skill that all social people develop, especially with bigger groups of people in which the subset of topics that everyone understands and is more or less interested to is not very big.

Older »