afreak

4 ms·

1.
by afreak 10y ago
Unless you have access to a mobile phone's baseband source code, you cannot really trust anything about its level of security. This was discussed on HN a while back and comes up quite often: https://news.ycombinator.com&#x2F
2.
Coinbase ordered to hand over two years of user records to IRS(theverge.com)
13 points by afreak 10y ago|0 comments
3.
George Hotz (geohot) Unveils $999 Self-Driving Software(pcmag.com)
2 points by afreak 10y ago|0 comments
4.
by afreak 10y ago
(ignore what I said here)
5.
by afreak 10y ago
Not the best link but here's something to chew on: http://www.universetoday.com/15403/how-long-would-it-take-to... >However, despite these advantages in fuel-efficiency and specific impulse, the most sophistica
6.
by afreak 10y ago
Keep in mind that at best it would take maybe 1,000 years with current technology to get there with a probe or human-supporting ship. It would be highly unpopular however as it involves exploding nuclear bombs behind the craft to get it the
7.
by afreak 10y ago
You're assuming that they have a vested interest in holding their Bitcoins for some greater good.
8.
by afreak 10y ago
PBKDF2 is not for password storage.
9.
by afreak 10y ago
If the server had bcrypt configured to take a second per password, multiple everything by 4. And so on. What I think is needed as a supplement to "use bcrypt / scrypt" is a "and use it this way so you don't acciden
10.
by afreak 10y ago
As part of a presentation I did at a local OWASP chapter, here are some numbers based on just using CPython's Hashlib processing of 14,000,000 someodd passwords: Intel Xeon E5-1620 3.6 GHz: SHA: 8.16 seconds, SHA256: 11.01 seconds, M
11.
by afreak 10y ago
A weak password is a weak password no matter how good the hashing is. I think that you're referring to this bit from last year: http://www.pxdojo.net/2015/08/what-i-learned-from-cracking-4... The author of th
12.
by afreak 10y ago
No. You cannot effectively use the techniques you can use against SHA/MD5 to attack the three I mentioned. SHA and MD5 can be calculated entirely in a CPU's registers without having to rely on RAM. Bcrypt for example requires the
13.
by afreak 10y ago
There are several services (including one run by me). https://canar.io (mine) https://haveibeenpwned.com/ Mine lets you free-form search whereas HaveIBeenPwned is there for searching just e-mail addresses.
14.
by afreak 10y ago
Any developer today that is developing an application and isn't using something like Argon2, Bcrypt, or Scrypt should be considering a plan to move away from whatever they're currently using yesterday. There is no reason to be usi
15.
Why JavaScript development is crazy(planningforaliens.com)
35 points by afreak 10y ago|4 comments
16.
Trendmicro has a Node.js debugger installed(bugs.chromium.org)
2 points by afreak 10y ago|0 comments
17.
by afreak 10y ago
> A few people will donate bitcoin. A few things can be bought directly with bitcoin. On average, you'd expect that the fraction of your income paid in bitcoin would be similar to the fraction of goods and services that you can pay
18.
by afreak 10y ago
> gratipay offers bitcoin payments, which, if they implement it right, would eliminate the middleman [...] when the financee cashes out using bitcoin And tell me, how does one cut out the middleman when they convert their Bitcoin earning
19.
by afreak 10y ago
> As far as unauthorized use of campus resources, I think the university would be better served by suing AT&T for failing to adequately protect its network. It is not the responsibility of a network service provider to protect the as
20.
by afreak 10y ago
It should be noted that what weev was doing is nothing new and is really just this: $ cat payload.ps |netcat -q 0 $printer_ip 9100 This is what was originally posted: https://storify.com/weev/a-small-experiment-in
21.
by afreak 10y ago
WIND Mobile. The plan isn't offered any longer but there are similar ones available.
22.
by afreak 10y ago
France and Austria, unlike Canada are very much dense so the infrastructure required to setup an LTE/UMTS/etc network is less costly. To travel from Vancouver to the next principal Canadian city (Calgary), it requires 900 KM of dr
23.
by afreak 10y ago
$399 USD is great, but why are we still stuck with 16 GB of storage on base model phones? You can barely put a day's worth of music on your phone and you cannot always stream via services like Spotify. Spotify accounts for 2 GB of traf
24.
by afreak 11y ago
I believe that the passwords were exposed in the breach but at the moment I don't have them to look at. Generally I recommend that if you think that your password has been exposed that you just reset your password as if you have to ask
25.
by afreak 11y ago
Yup. Coming down the pipeline will be hashing of suspected password lists being posted too. (I am the creator of Canario)
26.
by afreak 11y ago
> Every app that runs on your systems with enough privilege could sniff your username and password and send it out. Every app that runs on your systems with enough privileges can dump the memory and extract information via that.
27.
by afreak 11y ago
Conservatives in the UK are not alone; they're taking a page from the Tories in Canada where Harper did the same thing. http://www.cbc.ca/news/technology/faq-the-issues-around-muzz...
28.
Interactive map showing where you shouldn't fly drones in Canada(dontflyhere.ca)
2 points by afreak 11y ago|0 comments
29.
by afreak 11y ago
Here's a better question: how do you qualify a "good" anti-virus engine?
30.
The hype about Crypter is misplaced and overall dangerous(colin.keigher.ca)
4 points by afreak 11y ago|0 comments

More ›