ohithereyou

6 ms·

1.
by ohithereyou 7y ago
Shitposting and its consequences have been a disaster for Intenet discourse.
2.
by ohithereyou 7y ago
If COVID-19 digs in deep in the US then there is going to be a transformational change in how US citizens think about work, travel, entertainment, security, and the relationship between US citizens and their government. All of these aspect
3.
by ohithereyou 7y ago
Isn't it the aspirational goal for several churches/religious orders to do just this?
4.
by ohithereyou 7y ago
Why would they add that when they can just sell you a remaster for the price of a new game?
5.
by ohithereyou 7y ago
If you're going to treat investigative reporting and news gathering as a profit making venture then you can only charge what the market is willing to pay, and for the vast majority of people, that's nothing.
6.
by ohithereyou 7y ago
Think of the poor buggy whip makers! Not every desirable activity in life is profitable. If your business plan is "make website -> get money" then perhaps you're in the wrong business.
7.
by ohithereyou 7y ago
A site that renders completely blank without JavaScript is a site that I don't enable JavaScript for. They don't want me to view it, and nine times out of ten I can find the information elsewhere.
8.
by ohithereyou 7y ago
GOG games are DRM free and typically show up on torrent sites immediately after release, so anybody who wants to pirate the game won't bother to go through the buy->download->refund flow with them.
9.
by ohithereyou 7y ago
Terminal middleware already exists - screen and tmux seem to be the most popular here.
10.
by ohithereyou 7y ago
Wait, does anybody actually believe any major sport doesn't look the other way when the right team cheats assuming it gets more butts in seats? Major sports aren't about the purity of the game. They're about money - pure an
11.
by ohithereyou 7y ago
What sort of encryption and authentication can I expect if I do that? Can anybody who guesses the port dump code into my running Lisp instance?
12.
by ohithereyou 7y ago
Legitimately interested in your explanation as to how this specific research would be a crime absent contact with HackerOne. Please cite statute. I'm not saying you're wrong - simply asking you to back up your claim with evidenc
13.
by ohithereyou 7y ago
"Dark web" for things that are not relevant to Five Eyes and NSA when they are relevant. At least in those cases, with good opsec for the "dark web", you can be reasonably sure the company who made the product can'
14.
by ohithereyou 7y ago
That sounds like it's a payout lottery. H1 can't force its customers to pay. It's acting as a go-between on behalf of its customer, the company offering the bounty, not as an neuteal arbiter when there is a dispute. Perhaps
15.
by ohithereyou 7y ago
> not let your anger cause you to do something stupid Note: I didn't say that I would do this for every company. Just ones that use HackerOne. They have decided to abdicate their responsibility for their security vunerability repo
16.
by ohithereyou 7y ago
Are there other cases where PCI-DSS compliance requirements are selectively enforced?
17.
by ohithereyou 7y ago
All the more reason to not submit bugs like this to HackerOne. If you can bypass 2FA by having only one factor then I wouldn't consider that 'stolen credentials' and more a singular stolen credential. Their system is design
18.
by ohithereyou 7y ago
The market for a freelance security researcher out there is hard, no doubt, but disclosing bugs publically is an addition to your resume, akin to any other professional development you do. It demonstrates you can do the work and it shows t
19.
by ohithereyou 7y ago
I've seen several stories about how HackerOne doesn't pay out bug bounties when bugs are reported. I, for one, wouldn't submit bugs/PoC to them, and I would actively, publically, and immediately disclose bugs that affec
20.
by ohithereyou 7y ago
What sort of development do you do on the PowerBook?
21.
by ohithereyou 7y ago
Not only that, but it's easy to set up loading games from a hard drive with a broadband adapter and memory card exploit. From there, you can rip your own games or download rips and load to the external hard drive and play that way.
22.
by ohithereyou 7y ago
The fed expanded its balance sheet from less than $1 trillion in 2008 to over $4 trillion in 2016, practically dumping $3 trillion into the economy for all intents and purposes. What was the effect of that on crashing the dollar/makin
23.
by ohithereyou 7y ago
Five Eyes sees all
24.
by ohithereyou 7y ago
Counterpoint: CALEA and National Security Letters in the US.
25.
by ohithereyou 7y ago
That only works if you can assume that everybody using the system you're desiging has access to the underlying technology. Sure, if you're desiging some new system (like an autonomous vehicle on a closed loop, controlled system &
26.
by ohithereyou 7y ago
That's great, but I would wager that nearly 100% of all writing ever done in human history was done without capturing the strokes while writing. Therefore, while this added accuracy is great, it is virtually useless for most written w
27.
by ohithereyou 7y ago
My Pro4 has been solid for me. I upgraded about a year ago from an AM3+ FX-8350 build on another Asrock motherboard. That was back when Microcenter was selling the R5 1600 for $79 with $30 off a qualifying motherboard.
28.
by ohithereyou 7y ago
On some distros there is an additional software store that connects into Snap[0], so they're technically not distro supplied packages. [0] https://snapcraft.io/
29.
by ohithereyou 7y ago
Have you tried Trinity Desktop Environment[0], a continuation of KDE 3.5? [0] https://www.trinitydesktop.org/
30.
by ohithereyou 7y ago
But you see, it's "webscale"!

More ›