News for hackers. Stuff that matters.

secmax

Re:FE-Schrift: forgery-impeding typeface on Sunday September 03, 2017 @04:08AM (#15160243)
The goal of this system is too make faking license plates using a bit of black tape hard/impossible. So I have some trouble getting the point of Erik Spiekermann's comment.
That is/could be true for hybrid cars too.
I do not use catch-all addresses, but use a version of [domain]@mydomain.com buy adding new email addresses (aliases) in an automated way. I "remember" the used email addresses in two ways: 1) my mail server configuration contains a list of all aliases created in the past, 2) my password manager saves logins on top of that. The nice side effect is, that you keep track of all the sites you have ever created logins at.
That depends on your definition of "solution". The scheme protects you (to a certain degree) from automated creation of inter-site profiles. The reason is, only very few people employ (a variant of) this strategy, so trying to "deanonymize" is costly and usually not worth it economically.
"It is illegal to shoot down an aircraft in such a situation in Germany."

No! The Verfassungsgerichtshof ("supreme court") ruling, makes it illegal for the government to give an order to shoot down the airplane (i.e. to make a decision on actively killing some people to save others). Most lawyers, however, agree that the pilot of the nearby fighter jet would face none or minor legal consequences if deciding to shoot down such a rouge airplane. IANAL which is why I refer for details to the following German blog (by a well renowned judge): http://www.zeit.de/gesellschaft/zeitgeschehen/2016-10/ard-fe...

Re:Ring – Decentralized, Free, Multi-Device Communication on Friday November 04, 2016 @11:26AM (#12873302)
Last time I checked, offline message (storage) was not implemented. Is there progress on this?
Re:Mozilla stops distribution of WOT addon on Friday November 04, 2016 @06:13AM (#12871453)
Here is a brief (and compared to the german sources not so great) english language version of what happened:

http://techdows.com/2016/11/web-of-trust-add-on-removed.html

Re:Angular 1.x Banned from Firefox Addons on Thursday October 20, 2016 @02:42PM (#12754984)
> As long as the parties are talking (which they are), this is an unfinished security review on lock-down to prevent exploitation in the interrim.

I agree! There are a lot of Chrome extensions out there which could be affected. Immediate public disclose would be irresponsible.

Re:Angular 1.x Banned from Firefox Addons on Thursday October 20, 2016 @02:12PM (#12754729)
So a vulnerability of this kind would not only affect Firefox but also Chrome and others?
Re:Angular 1.x Banned from Firefox Addons on Thursday October 20, 2016 @01:31PM (#12754319)
I am really worried about the security implications for addons like bitwarden, if mozilla is right about this. I hope that competent people will take a close look.