News for hackers. Stuff that matters.

tomesco

Information won’t sway someone who’s views aren’t based on information.
Rather, trading periods are for a limited time after reports are released. Before employees accrue too much non public information.
Re:We Cracked a 512-Bit DKIM Key for Less Than $8 in the Cloud on Wednesday January 08, 2025 @08:39PM (#42640654)
There exist certain classes of prime numbers that should not be used for some cryptographic operations because algorithms exist that reduce the computation required for factoring attacks. This more often applies to cases where smaller primes are applied. Sources for this king of knowledge are mathematics or cryptography textbooks.

For other cryptographic operations, almost any sufficiently large prime can be used. Even a 50% reduction on a computation that will take trillions of years, has no practical impact.

The definition of organ in this article is closest to the body part definition. The use of organ here relies on a less common definition: roughly a constituent part of some larger whole that performs a specific function.
Re:Ask HN: What is in C-00000291*.sys? on Friday July 19, 2024 @07:11AM (#41004974)
It likely contains a bug but is an uncorrupted file. Corrupted to me means the file was changed or modified in a way from it's intended state and likely won't run anymore.
Yes, driven by local data collection. More tightly packed ground stations and the availability of atmospheric measurement at various altitudes will improve accuracy.
The article discusses the length of the bottles placed end to end. Although I agree the title isn't clear.
Re:It's Still Easy for Anyone to Become You at Experian on Saturday November 11, 2023 @03:49PM (#38234363)
Lyft likely cost customers' funds though a poor process like this in the past.

One could create an account, hail rides and add their own payment method while still being associated with someone else's email. Ride recipes would then be sent to someone else's email where the receiving party could add or increase a tip through an unauthenticated link and have it charged to the riders credit card.

If law enforcement ever busts a scammer and discovers a tool like this was essential to the scam, that would generate lawsuits.
True. Expected to remain solvent would be more clear.
Re:Git Security Vulnerabilities Announced on Tuesday January 17, 2023 @05:56PM (#34420712)
What is the recommended upgrade path for macOS' system install of git?

I have upgraded my brew install, but am unsure of what to do with the vulnerable system install.

Re:Twilio’s toll fraud problem on Thursday January 05, 2023 @03:38PM (#34266192)
Couldn't Twilio also close and cease providing service to any accounts that initiate chargebacks?
There must be a threshold above which making an engine move is allowed. Because if there's a checkmate move, it will be the best engine move and needs to be allowed.
Re:Laws barring noncompete clauses spreading on Tuesday November 01, 2022 @03:54PM (#33426584)
Gardening leave.
Re:How This Ends on Sunday May 22, 2022 @11:04AM (#31468938)
Close. The federal reserve (or any central bank) will lend money to other banks at a rate just below the target rate, and it will borrow from other banks at a rate just above. Because banks can borrow and lend largely risk free at those two rates, banks will transact amongst themselves at a rate in between. This is how the federal reserve makes banks transact at the target rate.
Re:Worldcoin on Thursday October 21, 2021 @11:35AM (#28945993)
> The whole idea of a hash is that a tiny perturbation makes the output completely different.

That would be a cryptographic hash you are describing. Not all hash functions share that property. As long as arbitrary input is mapped to a fixed size output it is a hash function. For example see NeuralHash [1] which is a hash function designed to be "insensitive to small changes in the input image."

[1] https://towardsdatascience.com/apples-neuralhash-how-it-work...

Re:How does Google Authenticator work? on Saturday August 28, 2021 @02:46AM (#28336124)
1Password had a blog post [1] addressing this concern. Essentially you still have the benefit of one-timeness, but not second factor, and need to compare that to what your security needs are.

[1] https://blog.1password.com/totp-for-1password-users/

Re:Convert Apple NeuralHash model for CSAM Detection to ONNX on Wednesday August 18, 2021 @12:39PM (#28223716)
Hash is applied correctly here. A hash function is "any function that can be used to map data of arbitrary size to fixed-size values." The properties of being a(n) (essentially) unique fingerprint, or of small changes in input causing large changes in output, are properties of cryptographic hashes. Perceptual hashes do not have those properties.
Re:A review of Thomas Piketty’s “Capital and Ideology” on Thursday March 26, 2020 @03:19PM (#22696903)
Could you please share any you recommend?
Re:Fuchsia Programming Language Policy on Monday February 24, 2020 @08:58PM (#22410335)
>I think the effects of memory bugs on security are often overstated.

How often?