News for hackers. Stuff that matters.

rudolf0

I'm sure it is, but the issue is more complex than that.

How much data is stored on each person? How many hoops does an individual analyst have to jump through, if any, to access that information for an individual? Is it stored in an encrypted or anonymized way so that an analyst can't access the details without approval from management? Are there jobs constantly scanning this dataset and alerting on suspicious patterns, and if so, what is the average false positive rate and does an alert give carte blanche to read all of the data collected about that individual and their connections and connections-to-connections?

I doubt Congress will ever get clear or entirely truthful answers to those questions, let alone the general public.

>Why bother with employees - just go give money to intel to do this.

Risk of refusal. Risk of intentional or unintentional leaks.

Re:CIA trying to inject into Little Snitch on Tuesday March 07, 2017 @02:57PM (#13814125)
That's not what he was saying. Yes, it would of course be a good idea to try to hide the malware implants from tools like Little Snitch. It's just that the method they propose of going about it is really dumb.

What tptacek is saying is that instead of writing some hand-tailored userspace code to specifically fool Little Snitch, they should just be using a kernel module that will hide the network and process activity from all analysis tools. That's what most nation-state malware does (or tries to do).

Re:Slack is Down on Tuesday March 07, 2017 @02:47PM (#13814021)
>The status.slack.com was also overloaded during this time and it may have been inaccessible.

This is starting to become a common theme...

Eh, years in a federal jail cell seems like it's not worth even $1 billion to me. And they made a lot less than that.
Re:I am an Uber survivor on Monday February 27, 2017 @05:23PM (#13748967)
I don't think it's flag-worthy because it absolutely could be true. It's not like anything here is that difficult to believe given previous insider reports from Uber. None of the claims here are that absurd.

But, yes, it could easily be an anonymous troll. It needs verification.

Re:I Wrote My Fastest Hashtable on Monday February 27, 2017 @03:02PM (#13747418)
Their non-mobile quality seems to be pretty high as far as I can tell, but, yeah, I feel like he'd have to agree their iOS app is the definition of clowntown.
Should be pretty easy to fix. Just HMAC (or just concatenate pepper and hash, honestly) the phone number and use that as the identifier.
Re:List of Sites Affected by Cloudflare's HTTPS Traffic Leak on Friday February 24, 2017 @04:35PM (#13728145)
As far as I can tell he's basically 2nd-in-command.
Re:A textbook case in workplace discrimination on Friday February 24, 2017 @04:30PM (#13728104)
>Instead he replied that if Uber paid a little more for the women’s jackets, they would have been beneficiaries of special privilege. This is standard bigot’s code for denying people protection from discrimination because of their gender, race, religion, or sexual preference.

I think the jacket issue has Uber clearly in the wrong, but it's a huge stretch to claim that opposition to giving a minority group special privileges is always "standard bigot's code".

Re:How a Mistake Gave Us the Word 'Cherry' on Friday February 24, 2017 @04:28PM (#13728079)
Now I'd like to know how the French word for "shampoo" (the noun) came to be "le shampooing".
Re:Kim Jong-Nam Was Killed by VX Nerve Agent, Malaysians Say on Friday February 24, 2017 @11:33AM (#13725106)
True, but I feel like if they wanted to ensure their death, they could've just wiped them with the same rag after Kim was confirmed to be exposed. It seems they just let them go, so I guess they didn't care either one way or the other about their survival?
Re:The Holocaust’s Great Escape on Wednesday February 22, 2017 @02:01PM (#13708169)
And were any of these actually in positions of power to know definitively whether or not extermination programs existed (including ones not at their local camp)?

Also, how about Einsatzgruppen? Are there witnesses claiming they didn't exist either?

edit: Also, what's your response to the Wannsee notes and Posen speeches? Even if hypothetically the gas chambers never did exist, there's clear evidence they very strongly intended to kill all European Jews. Clear intent + 6 million Jews missing + a whole lot of mass graves seems like a pretty cut and dry case, even if you have to resort to saying they were all starved/worked to death and shot instead of gassed.

Trump is a lot of things, but he isn't really anti-LGBT.
Re:The Pleasures and Pains of Coffee (1830) on Wednesday February 15, 2017 @12:17PM (#13653565)
This is a translation of the original French. The translation was done within the past 50 years, I think.
That's true, the MTurk questions he asked are very similar.

It could maybe be coincidental, since that's basically the default things you'd ask someone when trying to understand pain points and product ideas, but I do see your point since it seems like it's the same 4 questions.

"Stole" seems like a big stretch. It seems just as likely he's had this idea for a while, and registered just to check out his soon-to-be competition.
Re:Finding Ticketbleed on Thursday February 09, 2017 @10:40AM (#13607639)
It's straightforward, it's not trying to shill Cloudflare products too much, it's not self-congratulatory, and it's told from the chronological first-person perspective of an engineer trying to debug a protocol issue and accidentally uncovering a critical vuln.

Basically, it wasn't written by a marketing department like most of these other company-found vuln disclosures.

Re:Search at Slack on Wednesday February 08, 2017 @03:52PM (#13601972)
They're marketed towards casual users but Discord is probably the best chat and collaboration software I've used so far. I definitely prefer it to Slack for professional-type stuff.

You can use Discord any want you want. If you join some popular Discord server, odds are it'll be full of spam and Internet humor, but obviously you can do whatever like on your own server(s).

Re:Google, in Post-Obama Era, Aggressively Woos Republicans on Tuesday January 31, 2017 @10:18AM (#13531213)
That was for for non-citizens. Big difference from Trump's implication during the election that Muslim citizens are keeping their mouths shut and not reporting terrorists.

Trump's previously proposed Muslim registry covers Muslims already authorized to live in the US.

Re:Google, in Post-Obama Era, Aggressively Woos Republicans on Tuesday January 31, 2017 @10:16AM (#13531188)
Very false equivalence.
Re:Google, in Post-Obama Era, Aggressively Woos Republicans on Friday January 27, 2017 @05:49PM (#13503463)
I doubt Google or any other SV corporation would ever agree to help with a Muslim registry. Even if somehow the top leadership of such a company were to agree (which I doubt), you'd see defections, sabotage, and heavy leaks almost immediately.
Re:Google, in Post-Obama Era, Aggressively Woos Republicans on Friday January 27, 2017 @05:48PM (#13503452)
How is Google to blame for the rise of extreme inequality, authoritarianism, intolerance, or Trump?

They didn't "ride" anything.

Re:Senior manager at Kaspersky arrested in Moscow on Thursday January 26, 2017 @02:28PM (#13494444)
True, one does not imply the other, so "because" is wrong. I meant to say that "Russia (presumably) retaliated because the US does it too."

Geopolitical inevitabilities aside, though, there is plenty of evidence for both the US and Russian governments' manipulations of other countries' elections.

Could stem cell therapy be used to potentially improve existing muscular or neurological connections in normally functioning individuals? Kind of like a whole-body neurotropic.
Re:Venezuela arrests 4 bitcoin miners as trading highs continue on Thursday January 26, 2017 @10:27AM (#13492076)
Really depends. CPU mining is like trying to mine a diamond with a toothpick and will only get worse. If your machine isn't above at least some threshold (unless you have a massive farm of them), you're really just wasting CPU cycles and heat.
Re:First they came for the Iranians on Thursday January 26, 2017 @10:24AM (#13492041)
Let's see what happens in 30 days, then. My hopes are not high.

Also, if this really were just to reduce investigative burden, why not halt all refugees from all countries for 30 days?

Re:Senior manager at Kaspersky arrested in Moscow on Wednesday January 25, 2017 @03:36PM (#13485767)
Or, more likely, both things are true (you know what he meant when he said "the ones") because intelligence agencies of superpowers are constantly trying to influence geopolitics in their government's favor.
That's true, they should all be treated with the same amount of contempt. I think making this website is one of the few good things he's done in a while.

Shkreli is somewhat unique in terms of how much of an attention hog and braggart he is, though. Plus his stock fraud and general asshole persona.

Older »