santosha

7 ms·

1.
by santosha 11y ago
I'm not sure if this was addressed in the Credit Suisse report, but these kind of comparisons can be very misleading. The problem is that a lot of people in the bottom 10% have net negative assets (every fresh grad with college loan de
2.
by santosha 11y ago
Names, titles and short phrases are not protected by copyright. http://copyright.gov/circs/circ34.pdf If you'd like to take that phrase and make a better T-shirt, it's perfectly legal for you to do so.
3.
by santosha 11y ago
Um, the 'statement' they issued was in an email response to the journalists. These guys reached out, and they responded, presumably with some vanilla message about how it was all poppy-cock. If they hadn't bothered to respond
4.
by santosha 11y ago
Major privacy issues, single point of failure etc etc. We leave payments to third party services because nobody wants to deal with the compliance nightmare that PCI-DSS is, not for security reasons. Payment is also mostly less sensitive to
5.
by santosha 11y ago
Let's not forget Siri.
6.
by santosha 11y ago
I've always enjoyed what I call uncoding, which is taking a working piece of code and taking stuff away until things break, and examining how they break. It's really helped me understand what each piece does, and be more efficient
7.
by santosha 12y ago
That you feel the need to ask this question is the best argument against the 'Nothing to Hide' logic there is.
8.
by santosha 12y ago
Why is reaching every corner of the phone such a big deal anyway? Speaking for myself, one of the biggest reasons I like large screens is that reading and viewing content is so much easier - I don't have to squint when I'm watchin
9.
by santosha 12y ago
You can make the exact same statement about every other deadly virus, though. Why is ebola any different?
10.
by santosha 12y ago
I wonder if this can cause security issues. In particular, suppose you can create an arbitrarily named file in a directory. What if there's a service running that does not handle this correctly ( interpreted bash script that is ) - wha
11.
Filenames and Pathnames in Shell: How to Do It Correctly(dwheeler.com)
9 points by santosha 12y ago|2 comments
12.
by santosha 12y ago
Speaking for the security community as someone who's graduating this year, everyone I know who works on CTFs regularly has an astounding level of enthusiasm. It's really a fantastic group of people to be working with.
13.
by santosha 12y ago
I see this line of argument very frequently - that if you are really secure, you should tell everyone how you do it, as some sort of gold standard for security. Kerchoff's principle suggests nothing of the sort - it is something of a t
14.
by santosha 12y ago
The example is illustrative. There is nothing stupid about the original question. Someone else's fault and self-preservation are just convenient escapes in this situation. Suppose instead of a child running in front of the car, it was
15.
by santosha 12y ago
It is done client side with javascript, in the results.js on the results page. If they'd put it on the original page, it would all have been client side. The only reason I can think of for doing it this way is statistics collection for
16.
by santosha 12y ago
This is funny because these restrictions reduce the total number of possibilities. I get that the idea was to stop commonly used passwords, but that's what they should have done - disallowed the top N common ones.
17.
by santosha 13y ago
Ha, that bugged me a little too. I love being underwater so much because of the sensory deprivation :-)
18.
by santosha 13y ago
Neither Comcast nor Netflix are trying to operate a non-profit, it's a payment dispute between two large companies who disagree over who should pay. You could just as well argue that Netflix was letting Cogent / Comcast fight it o
19.
by santosha 13y ago
Not entirely sure why this is such a big deal. Peering agreements happen all the time. Lots of large services peer directly with consumer ISPs because it's cheaper and more efficient than using intermediary transit. This has nothing to
20.
by santosha 13y ago
Saying the cost doesn't 'go away' is deflecting from the fact that it does reduce overall, because of a number of reasons. Administrative costs are vastly reduced. Employers no longer have to negotiate individual contracts wi
21.
by santosha 13y ago
The point of the n is that you specify the maximum length that it's allowed to copy. It's slightly harder to mess that up than with regular strcpy.
22.
by santosha 13y ago
How is this even remotely relevant to this site?
23.
by santosha 13y ago
Is there a 'don't send me email about unread messages' option somewhere?
24.
by santosha 13y ago
Good on them.
25.
by santosha 13y ago
Mobile malware is overrated. People have been making a lot of noise for a long time, there's hardly any actual infections observed in the real world. http://chazlever.com/publications/traffic-ndss13.pdf
26.
by santosha 13y ago
A very good point. One of the most important things about strong authentication schemes is the revocation protocol. When things go bad, how easy and secure is the process of changing the auth mechanism? The trouble with fingerprints is that
27.
by santosha 13y ago
Sure, it probably has not much real world impact. But you have to remember this is academic research, not industry security research. The point of academic research is to come up with non-standard ideas that are sort-of feasible, caveats ar
28.
by santosha 13y ago
"The Arabian Sea is a region of the Indian Ocean..." http://en.wikipedia.org/wiki/Arabian_Sea
29.
by santosha 13y ago
Tsunamis are not killer waves or rogue waves, they're strong displacements of water. The height happens only at the shore because the sea floor rises up to meet the shore. At sea, one probably doesn't even see anything abnormal as
30.
by santosha 13y ago
Sure, the guy's bug report was terrible. However, the blame is squarely on FB. It's the security team's job to follow up, and to ask for more information if they don't have all the details. Contrast this with how Google

More ›