News for hackers. Stuff that matters.

ozzzy

Safari has a dangerous security issue

Most bank websites (at least in Turkey) open a popup window to get your credentials. I realized there is no way to tell if HTTPS is used if you use Safari.Here are some screenshots: http://i.imgur.com/71G2Z.png http://i.imgur.com/vHQEa.pngThis is very dangerous since it is not very hard to use mitm attacks to redirect user to a similar unsecure website.

( Read More... | 1 comment | on HN )
As I mentioned in another comment DNS load balancing prevents having only one front-end.
Simplest is the DNS load balancing. You can define multiple A records for the same domain and you are good to go!
This is my new startup and I'd love to get your feedback. It reached 1.2 million members with only viral.

Basically you set up an account for people to chat with you anonymously. As their identities are anonymous your friends can ask everything to you that they normally cannot ask. They can tell their thoughts and criticisms about you.

Moreover, you have an opportunity to chat anonymously with celebrities you admire through Connected2.me. You can tell your problems to specialists such as psychologists by keeping your identity secret and get an instant answer. Companies also use Connected2.me in order to get anonymous feedback about their products and give support to their customers real-time.

Please try and tell me what do you think.

You can access deleted iMessages using iOS search

I noticed if you use the search functionality on an iOS device you can still access old deleted iMessages.In order to reproduce, delete an iMessage. Then go to the search screen by tapping home button twice. Search a word in that deleted iMessage. You will see the message in the search results.This works even for messages deleted 1 month ago.

( Read More... | no comments | on HN )

Deleted iMessages are accessible through iOS search

We noticed if you use the search functionality on an iOS device you can still access old deleted iMessages.In order to reproduce, delete an iMessage. Then go to the search screen by tapping home button twice (you should make the search from the general search screen, not using the search section in the Messages app). Search a word in that deleted iMessage. You will see the message in the search...

( Read More... | 1 comment | on HN )

Deleted iMessages are accessible through iOS search

We noticed if you use the search functionality on an iOS device you can still access old deleted iMessages.In order to reproduce, delete an iMessage. Then go to the search screen by tapping home button twice (you should make the search from the general search screen, not using the search section in the Messages app). Search a word in that deleted iMessage. You will see the message in the search...

( Read More... | 1 comment | on HN )

You can access deleted iMessages using iOS search

We noticed if you use the search functionality on an iOS device you can still access old deleted iMessages.In order to reproduce, delete an iMessage. Then go to the search screen by tapping home button twice (you should make the search from the general search screen, not using the search section in the Messages app). Search a word in that deleted iMessage. You will see the message in the search...

( Read More... | 3 comments | 4 points | on HN )

Important: Safari has no secure site indicators for popup windows

Most bank websites (at least in Turkey) open a popup window to get your credentials. I realized there is no way to tell if HTTPS is used if you use Safari.Here are some screenshots: http://i.imgur.com/71G2Z.png http://i.imgur.com/vHQEa.pngThis is very dangerous since it is not very hard to use mitm attacks to redirect user to a similar unsecure website.

( Read More... | no comments | on HN )
This is my new startup and I'd love to get your feedback. It reached 500K+ members with only viral.

Basically you can think of it as Formspring with chat. You set up an account for people to chat with you anonymously. As their identities are anonymous your friends can ask everything to you that they normally cannot ask. They can tell their thoughts and criticisms about you.

Moreover, you have an opportunity to chat anonymously with celebrities you admire through Connected2.me. You can tell your problems to specialists such as psychologists by keeping your identity secret and get an instant answer. Companies also use Connected2.me in order to get anonymous feedback about their products and give support to their customers real-time.

Please try and tell me what you think.

This is my new startup and I'd love to get your feedback. It reached 500K+ members with only viral.

Basically you can think of it as Formspring with chat. You set up an account for people to chat with you anonymously. As their identities are anonymous your friends can ask everything to you that they normally cannot ask. They can tell their thoughts and criticisms about you.

Moreover, you have an opportunity to chat anonymously with celebrities you admire through Connected2.me. You can tell your problems to specialists such as psychologists by keeping your identity secret and get an instant answer. Companies also use Connected2.me in order to get anonymous feedback about their products and give support to their customers real-time.

Please try and tell me what you think.

Safari has no secure site indicators for popup windows

Most bank websites (at least in Turkey) open a popup window to get your credentials. I realized there is no way to tell if HTTPS is used if you use Safari.Here are some screenshots: http://i.imgur.com/71G2Z.png http://i.imgur.com/vHQEa.pngThis is very dangerous since it is not very hard to use mitm attacks to redirect user to a similar unsecure website.

( Read More... | no comments | on HN )

Safari has no secure site indicators for popup windows

Most bank websites (at least in Turkey) open a popup window to get your credentials. I realized there is no way to tell if HTTPS is used if you use Safari.Here are some screenshots: http://i.imgur.com/71G2Z.png http://i.imgur.com/vHQEa.pngThis is very dangerous since it is not very hard to use mitm attacks to redirect user to a similar unsecure website.

( Read More... | no comments | 2 points | on HN )

Dear Apple, please fix this Safari security issue

Most bank websites (at least in Turkey) open a popup window to enter your credentials. I realized there is no way to tell if HTTPS is used if you use Safari.Here are some screenshots: http://i.imgur.com/71G2Z.png http://i.imgur.com/vHQEa.pngThis is very dangerous since it is not very hard to use mitm attacks to show user a different website.

( Read More... | no comments | on HN )

Show HN: Safari has no secure site indicators for popup windows

Most bank websites (at least in Turkey) open a popup window to enter your credentials. Today I realized there is no way to tell if HTTPS is used if you use Safari.Here are some screenshots: http://i.imgur.com/71G2Z.png http://i.imgur.com/vHQEa.pngThis is very dangerous since it is not very hard to use mitm attacks to show user a different website.

( Read More... | no comments | on HN )
Re:2012 MacBook Pro Powers on By Itself on Rough Roads on Tuesday September 11, 2012 @09:55AM (#4505385)
I think it shouldn't wake up when the lid is closed. Am I missing a point?
This is my new startup and I'd love to get your feedback. It reached 250K+ members with only viral.

Basically you can think of it as Formspring with chat. You set up an account for people to chat with you anonymously. As their identities are anonymous your friends can ask everything to you that they normally cannot ask. They can tell their thoughts and criticisms about you.

Moreover, you have an opportunity to chat anonymously with celebrities you admire through Connected2.me. You can tell your problems to specialists such as psychologists by keeping your identity secret and get an instant answer. Companies also use Connected2.me in order to get anonymous feedback about their products and give support to their customers real-time.

Please try and tell me what do you think.

Yes, I think that would be the best solution.
Actually I cannot decide the placement on the homepage. Our important areas are: "Users online", Signup form, and "How it works" video.

Maybe I should replace Signup form with the "How it works" video.

I will prepare a detailed blog post explaining how our application spread :)
Nginx - web server

Tornado - chat system

PHP Symfony2 framework - web page generation

Yes, we may try the Accept-Language. But I need to make sure that it is reliable.

There is a discussion about this: http://www.w3.org/International/questions/qa-accept-lang-loc...

Older ยป