News for hackers. Stuff that matters.

pki

Re:Israel deploys automated military robots on Thursday August 25, 2016 @06:51AM (#12358065)
Prod/staging environments now taken seriously
Clever-enough is the key word, with Safetynet involved, which dynamically executes signed classes and you don't know what checks will be done
Re:YouTube's road to HTTPS on Monday August 01, 2016 @05:33PM (#12206200)
I am less curious about the year and more curious as to how the hell flip phones are rendering video. Like 64p 3GPP or something realtime transcoded?
At least on Android you can generate a fake VPN-esque connection locally that passes everything through a proxy, so the proxy isn't exposed to the application
Re:Image Hosting on Reddit on Tuesday June 21, 2016 @06:30PM (#11949971)
Also variably checks http accept headers (<img src> produces accept of image/* iirc)
Isn't it for setting cookies not on the google.com domain?
You already proved that you have access to it. Why is that no question asked?

Normal DV certs are either "add a CNAME, upload a uniquely named html / txt file, or click a link in an email" -- you've already done one of those (automatically in caddy)

> I'd demand my money back, and contract canceled

$500 early termination fee, 8-12 weeks for a "partial refund" via cheque ;)

GCE ~= EC2

GAE ~= Elastic Beanstalk

then we get into the whole "at what point do we stop supporting windows xp for real this time guys" argument though..
Re:Widespread XSS Vulnerabilities in Ad Network Code on Wednesday March 02, 2016 @10:45PM (#11214891)
html5-sandbox or iframe will have you terminated from adsense, at least. don't know about the others.
Re:Google is killing yet another rival on Friday February 26, 2016 @01:28PM (#11183055)
> Demand Media, a provider of online content, has seen its shares crater 96% since 2011 as Google made changes to its proprietary search engine formula making it more difficult to find articles written by Demand Media.

I am really really happy about this. Because all they do is SEO spam garbage.

Re:Google is killing yet another rival on Friday February 26, 2016 @01:28PM (#11183052)
Any product by 360 is effectively malware. They are by no means a legitimate "security software" vendor.
adblock does not. an adblock filter you have installed does.
Re:Tails 2.0 is out on Thursday January 28, 2016 @01:46PM (#10990242)
type 'danger' on the warning page
Twitch player is flash.
Google has done JS for years now, far more advanced than just AJAX
Re:ISIS Has a Smartphone App on Saturday January 16, 2016 @04:19PM (#10916890)
Sure, it's not hard, then you get into side channel, first-use-trust/update, MITM, etc territory.
Re:Nextbit on Monday January 11, 2016 @03:11PM (#10883044)
Do you have a good GPU?
Re:Gas Theft Gangs Fuel Pump Skimming Scams on Sunday January 03, 2016 @08:41PM (#10833573)
> special secure operation mode might be needed for this sort of use case, one which can't be subverted by normally installed software

Now people will complain that "the app doesn't run on their rooted, bootloader unlocked, jailbroken phones"

Re:Gas Theft Gangs Fuel Pump Skimming Scams on Saturday January 02, 2016 @05:48PM (#10828381)
It's a shame that chip and signature is used in the states though..
Re:Does YCombinator have to use Google for captcha? on Wednesday December 30, 2015 @02:27PM (#10813799)
this is done by cloudflare, not hn i think.
They already haven't delivered anything.

The only thing they have after a kickstarter where they called android-x86 and other such projects garbage and inefficient is... a fork of android-x86, where the only change is the removal of copyrights, names, and a find-replace of androidx86 -> consoleos.

I think the initial (non-subredditdrama) thread is here - https://www.reddit.com/r/Android/comments/3y840w/console_os_...

there is somewhat of a difference between "purchasing something for 0.00 with appropriate distribution after creating an account at a webshop" and "torrenting a pdf"
Re:DOCSIS 3.1 gigabit class modem goes online in Philadelphia on Saturday December 26, 2015 @01:21PM (#10794738)
People that play games and get 1ms latency vs 20-30ms latency within the same town/city care, and that isn't a very small market..
There was a previous deal a few months ago where verizon gave $100 for every smartphone traded in in the form of a vzw gift card. (Specifically wireless, not fios/etc applicable). It was ludicrously abused and people were purchasing bulk 1000+ android 2.x, 4.0 prepaids to ship in. If people offer you a large amount in denominations or multiples of 100, 18, or 38 it's probably from that.

IIRC there was a subreddit dedicated to scamming the promotion and "maximising value"

people use ebay bucks or ebay gift cards (often 90 for 100 or 85 for 100 value)

verizon itself is having some ridiculous promotions lately (requires 2yr/contract, but you can get something like $700 in tradeins - note: the tradein can be a $50 garbage-android)

Re:How to stop a DDoS attack on Tuesday December 08, 2015 @02:30PM (#10698749)
Cloudflare lets you announce your own IP space through their serivce on non-personal plans don't they?
Re:Google Patents Needle-Free Blood Draw on Sunday December 06, 2015 @04:33PM (#10686730)
I'd love to know why you think this way.

Older »