News for hackers. Stuff that matters.

obelisk_

Re:Where did all the HTTP referrers go? (2013) on Tuesday February 23, 2016 @07:29AM (#11158389)
I knew about what happened with the referrers when going from HTTP to HTTPS but had not heard about the meta referrer and have been wondering why, even though my own site is HTTPS I see so many bare domain referrers. Now I know. Thank you both to author and submitter.
Re:Telegram has now 100M Monthly Active Users on Tuesday February 23, 2016 @06:13AM (#11158053)
Is telegram truly secure?
Re:Linux Mint downloads (briefly) compromised on Monday February 22, 2016 @06:41AM (#11150130)
Personally I switched from Ubuntu to Fedora a couple of days ago because I've had it with Canonical. It was the first time I switched distro almost since I started using Linux (though I've admined servers with other distros and other OSes in the meantime). I am satisfied with Fedora thus far.
Re:Understanding Git for real by exploring the .git directory on Sunday February 21, 2016 @08:52AM (#11144489)
When I was still quite new to git, I attended a presentation based on The Git Parable.

I found it to be an enlightening talk and it helped me understand git better than what I had until then.

IMO the pictures on the site answer the question. Title is fine.
Re:Now I am become DOI, destroyer of gatekeeping worlds on Sunday February 21, 2016 @08:04AM (#11144333)
Worth reading. Interesting perspective and useful information, conveyed in good writing.

I think having the feedback at the bottom of the page say reviews instead of comments was a nice touch.

Re:How Google’s Web Crawler Bypasses Paywalls on Friday February 19, 2016 @09:08PM (#11138306)
1. Google's Web Crawlers are not "bypassing" paywall. It's the paywall that let's crawlers through. I.e. exactly the reverse of what the author implies with their headline.

2. The idea that this is somehow new is wrong. The way for a server to identify crawlers have "always" been to look at the user-agent, and, when done right, IP, verified either by net block owner or by doing PTR lookup and then checking that the A or AAA record for the claimed host points back at the same IPv4 or IPv6 address. Meanwhile, I do agree that paywalling is a more recent phenomenon, at least with regards to the extend it is popular among sites today, but the concept of presenting different data to crawlers and visitors arose much earlier and is something Google have been aware of and has made sure to delist such sites when found, whereas in fact Google has since then moved abit in the direction of allowing it in that they do so for Google News if declared as explained by others ITT.

So in my view, it seems that the author is jumping to incorrect conclusions based on an incomplete understanding of what's actually going on here. What then about the HN readership, how come this article became so highly voted and I don't see these issues raised by anyone else? Or maybe I'm just crazy?

Re:Graphing when your Facebook friends are awake on Thursday February 18, 2016 @09:02PM (#11131024)
inb4 facebook resolves this issue by banning anyone who's connected 24/7. (that wouldn't solve the problem either way, btw -- a small group of people could conspire to pull this data at irregular intervals and then share the data with one-another to get a more complete picture while still staying reasonably undetectable if done right.)
Interesting read. Thank you for sharing.
Re:ZFS is the FS for Containers in Ubuntu 16.04 on Thursday February 18, 2016 @07:43PM (#11130638)
Thanks :)
Re:Nginx: a caching, thumbnailing, reverse proxying image server on Thursday February 18, 2016 @07:40PM (#11130625)
Actually, Nginx are way ahead of you. Here's the way to handle that.

    location = / { [ configuration A ] }

    location / { [ configuration B ] }
To learn more about this, I recommend http://nginx.org/en/docs/http/ngx_http_core_module.html

The Nginx docs are not always great but they are far more correct than most blog posts about Nginx so that is why I have turned to use only the official docs when I have a question about how to do something with Nginx.

Re:Linux Foundation to support Zephyr microkernel on Thursday February 18, 2016 @04:59PM (#11129654)
Just because expert C programmers were able to make it work doesn't mean that C is the best way to write secure code. I say this as someone who writes quite a bit of C (though I don't view myself an expert in it yet).
Re:ZFS is the FS for Containers in Ubuntu 16.04 on Thursday February 18, 2016 @04:52PM (#11129605)
Anyone know if this applies for Lubuntu as well? I use Lubuntu on my rencently bought new desktop for the default of LXDE. I intend to upgrade my desktop on which I put Lubuntu 15.10 (I bought a computer without OS so as not to pay the Windows tax) to Lubuntu 16.04 because I understand it'll be based on LXQt, the successor to LXDE (and it's not a matter of newer is better -- I am a fan of Qt) and also because I think Lubuntu 16.04 will be an LTS release and I've been very happy with the stability of Lubuntu 14.04 LTS which my previous main computer was and is running.
Re:Python 3 in 2016 on Thursday February 18, 2016 @06:40AM (#11125095)
Homebrew installs software into /usr/local last time I checked so unless you are doing something really strange like manually overwriting system files, you'll be hard pressed to fuck up the whole system. Personally I'd install homebrew into /opt/homebrew.
Re:Go 1.6 is Released on Wednesday February 17, 2016 @05:35PM (#11122089)
Release notes: https://golang.org/doc/go1.6

Mods, maybe change OP link to this?

Re:Gmailify: The best of Gmail, without an gmail address on Wednesday February 17, 2016 @05:25PM (#11122002)
Or they've just whitelisted said providers after having either verified that providers IMAP implementations comply with IMAP standards, or they've whitelisted said providers because those providers were big enough that it was worth the trouble for Google to work around issues with those providers IMAP implementations.
Re:How to Safely Store Your Users' Passwords in 2016 on Wednesday February 17, 2016 @05:07PM (#11121849)
Write a separate post and then link to that from your current post. Best of both worlds :D
Re:A Message to Our Customers on Wednesday February 17, 2016 @04:53PM (#11121742)
Same here. I find this doubly reassuring.
Re:Watch New Yorkers Hurry Across Union Square in Real-Time on Tuesday February 16, 2016 @02:49PM (#11112633)
The whole thing the article is about is Placemeter as far as I can tell. Your quote made it seem like they were formerly Placemeter interns who later created the map.
>Pictures of then-Iranian president Mahmoud Ahmadinejad’s visit to the Natanz facility helped the experts obtain needed intelligence on the computers. The computers, their configuration and their rear connections can be seen clearly in the pictures. Eventually, these entry and exit points served as portals to implant the virus.

I doubt that this alone was all they needed. Probably once they had identified the vendors of the equipment, they retrieved the purchase orders from those vendors, either with or without the knowledge of said vendors.

Re:Changing Date to Jan 1, 1970 disables 64-bit iOS devices on Sunday February 14, 2016 @04:20AM (#11097665)
Yes, they included that in their post below the picture.

    > NSDate dateWithTimeIntervalSince1970:23510262*60
    2014-09-13 13:42:00 +0000
Btw, are they using an Objective C repl?
Re:My Little Sister Taught Me How to “Snapchat Like the Teens” on Wednesday February 10, 2016 @08:08PM (#11077560)
Does Snapchat have any revenue? If so, how?
Re:Google is banning Flash from its display ads on Wednesday February 10, 2016 @07:21PM (#11077331)
I haven't had the Flash plugin since 2012 and only a few couple of times I've encountered something I wanted to use which required Flash since when I stopped having Flash. In every case where Flash was required I simply Googled the relevant keywords and found what I was looking for provided by other non-Flash sites.
Are you the author of SQLite or did you just name your account so for other reasons?
Also similar in concept is the tup build system which monitors rule commands run to gain knowledge of additional dependencies.

http://gittup.org/tup/ex_dependencies.html

Older »