News for hackers. Stuff that matters.

zhng

Re:Why Baidu Has Been Hijacked to Attack GitHub on Friday March 27, 2015 @10:39AM (#9276522)
Is the best way to currently prevent this is via full ssl?

Additionally, how can a site like Amazon.com run non-ssl protected pages and prevent mitm-ing? (e.g. http://www.amazon.com/dp/B00TYBBNAW/ doesn't redirect to https, but only when ordering, etc.)

> It requires passengers to run a nonfree program (an app).

https://m.uber.com/ doesn't require the app to be installed.

Re:CSS Stats on Monday November 24, 2014 @08:59PM (#8655921)
Re:How bad is the California drought? on Tuesday October 28, 2014 @06:28PM (#8524000)
LADWP - Los Angeles Department of Water and Power
Re:Devices being remotely wiped in police custody on Thursday October 09, 2014 @12:13PM (#8433297)
C.Y.A. - Cover your ass
Re:Reddit source code on Wednesday October 01, 2014 @01:53AM (#8393038)
The legal department, not the programmer, probably dictates that the copyright headers must be in each and every file.
Re:What Happened to U.S. Plans to Raise the H-1B Visa Ceiling? on Friday September 12, 2014 @03:57PM (#8310097)
I've seen this first hand. It does happen.
Re:Gradually sunsetting SHA-1 on Friday September 05, 2014 @05:26PM (#8276386)
The problem i have with their "neutral, lacking security" icon is that it does not indicate that anything is wrong when in fact there is. https:// should never have a neutral icon. it should be VALID or INVALID.
Re:Linus Torvalds gives a tour of his home office on Sunday July 20, 2014 @07:11PM (#8061853)
> for some reason people keep sending me penguins

i would be careful. there could be cameras in there.

Re:Making of Aprilzero on Thursday July 17, 2014 @05:43PM (#8050375)
traveling "costs" a lot. what must be given up in order to travel?
> Instances of the same path and name will overwrite each other, with the latest instance taking precedence. Instances of the same path but different names will add additional mappings.

> When sending cookies to a server, all cookies with a more specific path mapping should be sent before cookies with less specific path mappings. For example, a cookie "name1=foo" with a path mapping of "/" should be sent after a cookie "name1=foo2" with a path mapping of "/bar" if they are both to be sent.

http://curl.haxx.se/rfc/cookie_spec.html

instead of blocking, shouldn't we create extensions that make us appear as the same person on the web?
It should as order is important.
Using HTTPS be default may encourage more people to adopt it.
Re:Virginia orders Uber, Lyft to stop operating in state on Thursday June 05, 2014 @07:26PM (#7855287)
sex - not if you film it. then it's instantly legal
Django includes local variables and contextual lines in stack traces. https://i.imgur.com/Iyk81mp.png
Re:The “Housing Affordability Crisis” on Thursday March 27, 2014 @06:31PM (#7483975)
> reduction in the required number of parking spaces per residence unit

Can you elaborate on how this helps people? It was my thinking that requiring a minimum of 1 space per bedroom would help things. Parking is already burdensome and very costly.

Re:Soylent Update 3/13 on Thursday March 13, 2014 @08:08PM (#7396078)
Don't confuse easy with inexpensive or quick.
Re:Stick bomb on Wednesday March 05, 2014 @11:50AM (#7348016)
Re:Thieves Break Into Cars Using Mysterious 'Black Box' on Friday February 28, 2014 @07:56PM (#7322573)
Read somewhere that this is possible by re-playing bluetooth (or similar) keyless entry signals. The suspect doesn't actually know what car he or she is going to unlock. So they brute force walk by any car that opens and drive off.