melville_X

6 ms·

1.
by melville_X 12y ago
I mostly disagree with arguments to rationalize the sale of exploits, they create a massive power balance towards bad actors, but we have to be honest with ourselves, and like drugs, 0days are not going away. Our only proper response is s
2.
by melville_X 12y ago
Governments are almost always the market for zero-days. Private security companies also buy them, but guess who their primary market is? Look at FinFisher's customer list. There is nothing libertarian about the defense industry or thei
3.
by melville_X 12y ago
Agreed. Most people I know look at him with amusement. He's hardly an idolizing figure, besides some alright books about past exploits long ago.
4.
by melville_X 12y ago
Same with Canada... 5 years for contempt of court if you refuse to reveal password.
5.
by melville_X 12y ago
That's why VPNs exist. A VPN without an external DNS service is pretty pointless if you're concerned about ISP snooping.
6.
by melville_X 12y ago
A good free alternative is Comodo (8.26.56.26), I trust them slightly more than Google and they have security features such as malware detection. http://www.comodo.com/secure-dns/
7.
by melville_X 12y ago
France temporarily made undercover police work illegal until the mid 2000s. That would be an interesting study. But either way, there are obvious risks in this type of law enforcement. The vast, vast majority of humans are capable of commit
8.
by melville_X 12y ago
Yes that's the definition of entrapment as interpreted by American courts. Very challenging for lawyers to use as a defense. Which is exactly why law enforcement loves using informants and undercover agents for everything these days. I
9.
by melville_X 12y ago
For anyone who wants to see a preview of Sabu's entrapment of anonymous members, one of his chat logs were leaked: http://cryptome.org/2012/09/sanguinarious-sabu.htm > Why is an informant going around thro
10.
by melville_X 12y ago
This is a good reason for all of us to keep switching away from GMail. It benefits us all via network effects.
11.
by melville_X 12y ago
I'd support a software focused Bitcoin foundation, not a politically focused one such as the current one. Somewhat like Linux foundation but more decentralized by design.
12.
by melville_X 12y ago
http://torrentz.eu/search?f=ISAMBARD+KINGDOM+BRUNEL
13.
by melville_X 12y ago
/switching bags/switching pants/switching jackets/ Happens all the time. I almost never forget my smartphone somehow.
14.
by melville_X 12y ago
I fought the urge to want a GUI for Tarsnap and hand-wrote cronjob scripts that I'm very happy with now. It was part of the fun. Definitely non-ideal for everyone but I recommend it to any hackers to attempt the same. One thing I learn
15.
by melville_X 12y ago
The NSA uses Fedora as their standard laptop distro. There will definitely be influence on Fedora from that direction.
16.
by melville_X 12y ago
Most important is this line which demonstrates not only does the attacker need to social engineer a user, it has to be done via a vulnerable website: > The patch of this vulnerability is easier said than done. If all the third-party appl
17.
by melville_X 12y ago
From the Q&A: > Covert Redirect is based on vulnerability Open Redirect. An open redirect is an application that takes a parameter and redirects a user to the parameter value without any validation (OWASP). So Covert Redirect is an a
18.
by melville_X 12y ago
Topiary aka Jake Davis from Lulzsec had funnier and more tasteful writing than this. HN back in their defacement days always commented on the quality of the writing. This sounds a bit wannabe, which is a shame since 4chan tends to be obsess
19.
by melville_X 12y ago
Great point. They federal level infrastructure is pretty far from having that capability at the moment. As long as systems like one linked in the article are coming, the only natural response by the state is to establish an large-scale NSA-
20.
British Spy Chiefs Secretly Begged to Play in NSA's Data Pools(firstlook.org)
8 points by melville_X 12y ago|0 comments
21.
by melville_X 12y ago
They cherrypicked a few out of thousands and Silk Road was a tiny tiny percentage of the drug market. What will happen when they are 10x the size? Will that type of law enforcement scale?
22.
by melville_X 12y ago
The point is that hunting people down protected by TOR and privacy laws in the postal mail system, one of the few practical privacy laws left, is still technically possible, yes...but it is expensive, time consuming and requires sophisticat