News for hackers. Stuff that matters.

wtracz

Re:UK’s NHS Covid-19 App on Thursday May 07, 2020 @03:34PM (#23107206)
https://github.com/nhsx/COVID-19-app-Android-BETA/blob/maste... appears to be looking for Apple devices to wake them back up.
Re:Tin Found in Israel from 3k Years Ago Comes from Cornwall on Wednesday January 22, 2020 @07:46AM (#22117026)
There has always been speculation that there was a Phoenician connection to Cornwall, but not a lot of archeological evidence.

This stemmed from things like Cornish place names having an unusual number of z's (a Phoenician letter) in them, and other similarities.

Yes, I wrote it and it is intended as a demo only. I have not put in the finite field logic in that implementation. It shows the concepts though.
They can use Shamir's Secret Sharing to achieve this with no plaintext.

see http://willtracz.co.uk/shamir-secret-sharing-and-passwords

Re:Logjam TLS attack on Wednesday May 20, 2015 @05:36AM (#9575282)
This was fun to find at the end of two days last week when a third-party system was trying to connect via SSL.

Java 8 is the first to allow above 1024-bit Diffie-Hellman parameter values.

Re:Social Login Buttons Aren't Worth It (2012) on Tuesday July 01, 2014 @06:04PM (#7973764)
It's more pervasive than just registration too if you allow the username to be adjusted. This is again a problem with email addresses that also allows leakage.

Regarding the probability of attack, people should monitor the number of different usernames attempted by a session/IP not just failed attempts against individual accounts. Otherwise it is very easy to try thousands of username combinations with a selected weak password.

Re:The Great Big Porn Block is coming on Monday December 23, 2013 @10:07AM (#6954590)
This has already happened.

The Internet Watch Foundation already tell ISPs to block child pornography, and the court system can tell ISPs to block file-sharing/streaming sites.

It is a myth that the internet is uncensored in the UK at the moment.

Re:Show HN: an alternative to AdSense on Monday November 05, 2012 @10:05AM (#4743773)
Isn't this similar to Skimlinks i.e. you don't get paid by them until conversion?
The code to do this is on Github (at least for the UK): https://github.com/fubralimited/php-oara Affiliate network integration is not a technical challenge at all.
You'd be surprised at the level of data the affiliate networks make available to the people using them. Even if you are a small affiliate, purchase/basket level data is on offer.
Re:Dear ICO, Sue Us on Wednesday September 05, 2012 @08:37AM (#4479037)
Until the ICO start taking people to court it will stay ridiculous, but I think the intent of it is important. Using etags to track individuals is really no different to a cookie with a unique ID...

Having a 10 page complaint form is what is dumb. Why can't you just send a suspect URL, then have it scoured for dubious cookies?