News for hackers. Stuff that matters.

safeaim

Re:Show HN: Redbean – Single-file distributable web server on Friday February 26, 2021 @07:05AM (#26273958)
Yeah, but this isn't Big Sur, it's Catalina. But maybe it's the same protection there as well?

The binary didn't work on Ubuntu 18.04 nor CentOS8 either, but I'll report a issue later on today.

Re:Show HN: Redbean – Single-file distributable web server on Friday February 26, 2021 @04:08AM (#26272791)
Am I the only one having issues trying to get this working? The webserver starts just fine, but once I add the index.html with zip as in the example, it stops working. This is on Mac 10.15, CentOS 8 and Ubuntu 18.04 LTS.

Centos: [centos@test ~]$ ./redbean.com -vv

  error: Uncaught SIGSEGV on test.novalocal
  ./redbean.com
  EINVAL/err=22/errno:2/GetLastError:0
  Linux test.novalocal 4.18.0-240.10.1.el8_3.x86_64 #1 SMP 
  Mon Jan 18 17:05:51 UTC 2021
On the mac: ~ my-Maccie$./redbean.com -vv Killed: 9

On Ubuntu: ubuntu@localhost:~$ ./redbean.com -vv

  error: Uncaught SIGSEGV on localhost
  ./redbean.com
  EINVAL/err=22/errno:2/GetLastError:0
  Linux localhost 4.15.0-136-generic #140-Ubuntu SMP Thu Jan 
  28 05:20:47 UTC 2021
Re:List of Sites Affected by Cloudflare's HTTPS Traffic Leak on Friday February 24, 2017 @05:30AM (#13722507)
While Cloudflare might contact their customers, it's no guarantee that the customers will actually notify their users, so I think this is a good way to find out which sites I might have to change my passwords and API keys on.
You are of course completely right about that. I mixed up the felony for lying when trying to gain citizenship in the US. I will edit my post.
For all of you guys recommending using fake accounts, do remember that right before christmas, Obama administration signed in new rules[1], giving NSA leeway to share their collected data with 16 other agencies, including DHS, which CBP falls under. So you may get caught if you try to pull these shenanigans off. US agencies are no strangers to mission creep when it come's to sharing data, as seen recently in this article from Intercept on how FBI is building a national watchlist for companies that want to have realtime updates on whether their employees have committed any crimes while employed. [2]

Two quotes from the NYT article that I feel are important to have in the back of your head when you plan your fake accounts:

Now, other intelligence agencies will be able to search directly through raw repositories of communications intercepted by the N.S.A. and then apply such rules for “minimizing” privacy intrusions.

But Patrick Toomey, a lawyer for the American Civil Liberties Union, called the move an erosion of rules intended to protect the privacy of Americans when their messages are caught by the N.S.A.’s powerful global collection methods. He noted that domestic internet data was often routed or stored abroad, where it may get vacuumed up without court oversight.

Let's say CBP get's a tool in a couple of months that let's their border agent search up any passenger through the NSA raw data. That search may then produce your real accounts. Let's say they do this before questioning you, and you then provide them with your fake accounts, that will not look good.

[1] https://www.nytimes.com/2017/01/12/us/politics/nsa-gets-more... [2]https://theintercept.com/2017/02/04/the-fbi-is-building-a-na...

EDIT: Removed the part about felony, as that was blatantly wrong.

Re:'Check Your Backups Work' Day on Wednesday February 01, 2017 @04:03AM (#13539399)
And if one starts applying your principle at a workplace, you end up with the whole company being afraid of doing anything at all, to avoid being fired.
Re:Thousands of people are watching this guy code a search engine on Thursday February 19, 2015 @08:42AM (#9073892)
Nothing gets me in focus like the mixes over at musicforprogramming.net

Great selection of ambient/non-invasive electronica.

If that doesn't cut it, Burial and Vangelis always does the trick. And for sessions where it's only some brute force grokking, some uplifting jazz from accujazz.com

Re:Making of “Introduction to A*” on Sunday October 12, 2014 @04:13PM (#8446445)
VisuAlgo is also very nice. http://www.comp.nus.edu.sg/~stevenha/visualization/index.htm...

A friend posted this funny video series of sorting algorithms interpreted through eastern european folk dance today I just have to share! https://www.youtube.com/user/AlgoRythmics/videos

Re: on Monday October 06, 2014 @07:22AM (#8415249)
Sorry about that, I tried searching for it first.
Awesome terminal, but too bad it's so cpu hungry. My laptop heated up in like 5 minutes.
Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable on Thursday September 25, 2014 @01:51AM (#8365820)
Isn't the router still at risk after taking these precautions seeing as many routers shell out for ping and traceroute-responses?
Re:NSA's BIOS Backdoor a.k.a. God Mode Malware on Monday August 18, 2014 @07:23AM (#8192180)
Not if you're in a competing country to both US and China. The world is bigger than the US :-)
Re:NSA's BIOS Backdoor a.k.a. God Mode Malware on Monday August 18, 2014 @03:18AM (#8191702)
Well, one of the risks that you face in a state-sponsored advisory is industrial espionage, and that is as likely to come from China [1] as it is coming from the NSA [2].

[1] http://money.cnn.com/2014/05/20/news/china-espionage-busines... [2] http://www.theguardian.com/world/2013/sep/09/nsa-spying-braz...

Re:Google I/O 2014 on Wednesday June 25, 2014 @02:27PM (#7945836)
Sounds like a great start for a dystopian sci-fi novel. Just imagine the effect it will have on our social habits when we start avoiding people that our Google Lens HUD marks as non-trusted. It doesn't even need to happen in a malicious way. All you need is the contrast between the people marked "green" and those you haven't added to your trust list.

The short movie "Sight" is a great demonstration of our potential near future of augemented reality technology and the effect it might have on our social lives: http://vimeo.com/46304267

Re:Swiftkey Keyboard Android is now free on Wednesday June 11, 2014 @09:26AM (#7877848)
Yeah, I might should have toned down my flippant tone, but I was genuinely curious as to how they are planning to make money. Obviously in-app themes is one choice, but I don't see that working out in the long run. Hopefully they will do great in the iOS store as it really is a good app!
Re:Swiftkey Keyboard Android is now free on Wednesday June 11, 2014 @08:30AM (#7877624)
So how will they make money now? By selling people's data?
I'd suggest you to review the current science literature on this subject as it so far it's starting to look bad for proponents of the "You need more vitamins"-campaign.

Antioxidants Could Spur Tumors by Acting on Cancer Gene http://www.sciencemag.org/content/343/6170/477.summary

Supplement Alert: Antioxidants May Protect Cancer Cells Instead Of Protecting Us From Them http://www.forbes.com/sites/daviddisalvo/2014/02/08/suppleme...

Re:Tor in Google Summer of Code 2014 on Wednesday February 26, 2014 @03:03PM (#7307276)
You could try setting up TheGrugq's PortalofPi and route your computer through the Pi. https://github.com/grugq/PORTALofPi

"A dedicated hardware device which forces all internet traffic to be sent over the Tor network. This significantly increases the odds of using Tor effectively, and reduces the potential to make fatal mistakes. " https://github.com/grugq/portal

Re:The Face Scan Arrives on Friday August 30, 2013 @12:52PM (#6302785)
How long until VR headsets are the size of a eye lens? And do you really think most people want to wear a VR headset all day long?
Re:Bradley Manning’s Statement on Saturday March 02, 2013 @04:42PM (#5311206)
It's probably not that easy getting through the big tip inbox of such papers. Especially if you are not identifying yourself as a high-level official.
Re:Warrantless wiretaps? Congress votes yes on Saturday December 29, 2012 @07:37AM (#4981914)
I sure hope this video gets more views, as this is one of the most important privacy talks this year.
Re:Engineering Pornography (2002) on Thursday December 20, 2012 @06:16PM (#4950620)
These are the droids that are being referred to I think: http://www.princeton.edu/~mjs3/musiclab.shtml "Experimental study of inequality and unpredictability in an artificial cultural market."

This wiki article might be of interest too: http://en.wikipedia.org/wiki/Matthew_effect_(sociology)

Don't care or just trying to avoid the legal quagmire that is China?

Maybe the censorship issues caused by the governmental firewall coupled with murky rules for doing business over the web in China, doesn't exactly translate into a business friendly environment?

Here in Norway, the norwegian version of RIAA are trying to get radio playing in rental cars acknowledged as "playing of music in a public space".

http://translate.google.com/translate?sl=auto&tl=en&...

Here's the story you're referring to: http://www.bodhitales.org/the-buddha-statue.php

Older »