News for hackers. Stuff that matters.

scottlinux

Re:Ask HN: Is S3 down? on Tuesday February 28, 2017 @02:33PM (#13757013)
- launching AMIs (they are stored on s3)

- cloudfront

- ses

- ebs

- rds (snapshots/backups on s3)

- lambda functions (appear to be stored in s3)

perhaps others

Debian 8 supports http/2 with the updated nginx provided in jessie-backports.
Re:GitHub's down? on Wednesday May 06, 2015 @08:43AM (#9498164)
Re:Next Chrome Update Will Block SHA-1 Certificates on Tuesday April 07, 2015 @11:12AM (#9334580)
On Linux, there is a false positive that occurs (http://code.google.com/p/chromium/issues/detail?id=437733).

Debian has a fix in experimental. However the bug is seeing no action. Please Debian push this update out:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774195

Ubuntu fixed this in Feb 2015:

https://bugs.launchpad.net/ubuntu/+source/nss/+bug/1423031/c...

I believe this seccomp-tsync feature was introduced in 3.17. I can't find the exact commit but I'm looking.

Edit: https://lkml.org/lkml/2014/7/18/718

Google has backported this to ChromiumOS

https://code.google.com/p/chromium/issues/detail?id=430588

Re:OwnCloud Server 8.0 on Monday February 09, 2015 @08:54AM (#9021119)
Re:Post Mortem: A single whitespace character on Monday October 27, 2014 @11:47AM (#8516190)
Re:Massive Moniker.com Breach, Valuable Domains Stolen on Tuesday October 07, 2014 @10:22AM (#8421274)
I too have this IP in my account login history. As well as others since July from other places globally.

This appears it was not brute force attempts, as the log would show failed login attempts. They just logged right in, first try. Sounds like a web site vulnerability.

Not only EC2 instances, but also RDS instances.

I received various maintenance email notifications for RDS reboots.

Re:Passwords in plain text on Sunday June 22, 2014 @01:00PM (#7928412)
See hashcat. :) It is easy to crack those types of hashes these days. Or even just search for the hash in google.
Re:11th Linode Birthday, $10 Linode plan on Monday June 16, 2014 @12:22PM (#7899829)
You can lease fiber. For instance Google leases fiber for their internal google-to-google network.
Re:Glenn Greenwald: The NSA tampers with US-made routers on Tuesday May 13, 2014 @12:33PM (#7739004)
You can use Linux as a router. Any Linux distro would work (Debian, Ubuntu, RHEL, SuSE, etc).

I do this at home and work with a Debian router.

There is also pfsense as well.

Re:The Launch of the Mayday Citizens' SuperPAC on Thursday May 01, 2014 @12:16PM (#7680689)
Eek - not naive. This is taking credit card information over HTTP (form submit is over HTTP) all on a Wordpress site via a Wordpress cart plugin.
Re:Show HN: Poor Man's VPN With a Cheap VPS on Monday April 14, 2014 @04:38PM (#7588766)
Or lazy man's ssh tunnel. :)
Re:Update on Coinbase Data Security on Tuesday April 01, 2014 @03:14PM (#7510934)
Is there an option to opt your account info OUT of the api?
Re:Amazon WorkSpaces on Wednesday March 26, 2014 @11:22AM (#7473980)
It appears WorkSpaces requires a client which is not available for Linux desktop users nor ChromeOS. :/

http://docs.aws.amazon.com/workspaces/latest/adminguide/clie...

Re:Monitor PasteBin for Your Email or Passwords on Thursday February 06, 2014 @04:51PM (#7193180)
Might also be of related interest: https://twitter.com/dumpmon
Re:All New Mac Pro Available Starting Tomorrow on Wednesday December 18, 2013 @11:13AM (#6928330)
There are only four ram slots. The largest ECC stick available now are single 16GB sticks. Just not enough room for slots on the board, is my guess.
TIL people still use a USB cable to sync their calendar and contacts. The last time I did that was with a palm pilot. :)
Re:What’s New In Python 3.4 on Sunday October 20, 2013 @07:07PM (#6581961)
django here.
Re:Poll: How many Bitcoins do you own? on Monday October 14, 2013 @11:31AM (#6547795)
coinbase.com is good if you are in the US.
Re:Vulnerability in ICMPv6 could allow Denial of Service on Wednesday August 14, 2013 @09:23PM (#6215608)
Vulnerability in how Windows does ICMPv6....

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-31...

Older »