News for hackers. Stuff that matters.

prothid

Re:Domain-validated SSL will soon be free from the large CAs on Friday November 20, 2015 @09:55AM (#10601412)
I just used this feature with them the other day. The way it works is that if you enable SSL on a site passing through them, they'll auto-generate the front-end cert. I believe you can add your own cert for a premium. The back-end cert can be set to validated/unvalidated/unencrypted.
Chrysler worked with the guys that discovered the vulnerability and no doubt simply patched the current known bug allowing exploit from the cellular uplink. The system could be vulnerable again if a new exploit is discovered. I updated my Jeep a week or so ago and haven't had any issues -- yet.

Edit: After reading the paper it looks like the update from Chrysler blocks inbound tcp/ip now, and Sprint is also filtering traffic more aggressively.

Yeah, paywall. It looks like you can't even see the price without creating an account.
Re:Brain Bleeding JavaScript Obfuscation on Monday April 13, 2015 @04:58PM (#9370454)
I wanted to tinker with the code but it is all PNGs (I guess to prevent the original code from executing).
Re:CVE-2014-6271: Remote code execution through bash on Wednesday September 24, 2014 @03:16PM (#8363524)
Don't tell anyone.
Re:CVE-2014-6271: Remote code execution through bash on Wednesday September 24, 2014 @03:00PM (#8363425)
I'm considering pulling an rpm from elsewhere until they have this in place.
Re:CVE-2014-6271: Remote code execution through bash on Wednesday September 24, 2014 @02:59PM (#8363421)
Yes, lots. nginx + php is very popular.
Re:Gravity Simulator on Tuesday September 09, 2014 @08:22AM (#8289735)
I'm guessing it would be covered under collision, unless you can argue that the earth vandalized your car.
Re:Project Euler on Tuesday January 14, 2014 @09:08AM (#7057073)
This site is great fun to tinker with a new programming language.
Re:Exposed Adobe Login Search on Tuesday November 05, 2013 @08:36PM (#6679939)
That means they were missing from the original data. I kept whether they existed or not.
Re:Exposed Adobe Login Search on Tuesday November 05, 2013 @05:36PM (#6678953)
I removed them from the database already. It's just storing if they where there or not now. That would have been a good feature though.
Yeah, I basically check for one @ sign and some very basic sanity checking on the right side.

/^[^@]+@[^@]+\.[^@.]+$/

Pilot here. I will confirm this, and also add that there are many other ways to find an airport (paper maps, atc, handheld aviation gps, built-in gps, airport beacons at night, and also just looking out the window). In an emergency, the last thing I'd do is have my head down in an ipad/iphone. From the aerial shot it appears clear that it's not an airport, but it is probably the largest field around, so it would be a target in an engine failure scenario regardless.
Re:Mysterious electrical bursts warn of material collapse on Tuesday June 12, 2012 @06:46PM (#4103355)
A few seconds could shut down reactors, gas lines, slow trains, trigger stop-lights (e.g. preceding tunnels), alarm people in parking decks, etc.

Earthquakes are known to sometimes be preceded by unexplained balls of light much further in advance. If this phenomenon is related, the warning period likely exceeds just a few seconds.