shallot_router

12 ms·

1.
by shallot_router 9y ago
It's not related to this particular breach, but given this and Uber's other issues, it's not out of the realm of possibility that at some point they had a more serious breach involving loss of password hashes or interception
2.
by shallot_router 9y ago
It's very common, but there are lots of ways of addressing it.
3.
by shallot_router 9y ago
This is in some ways more despicable than almost everything the Trump administration has passed so far.
4.
by shallot_router 9y ago
Not sure why you're being downvoted for this. Seems like a valid concern for such a system.
5.
by shallot_router 9y ago
Serving a static web page 8-50k times per second and doing some really complex processing 8-50k times per second are worlds apart.
6.
by shallot_router 9y ago
If they don't fork, everyone affected by this will lose all of their ETH. Many would argue the correct thing to do is to not fork and say that people knew the risks beforehand, etc. But that's what people said last time and they s
7.
by shallot_router 9y ago
As a general trend, I don't think so, but this thread seems to be an anomaly. This is the first HN thread in a while where I felt like I stumbled into a default subreddit or something.
8.
by shallot_router 9y ago
https://www.reddit.com/r/ProgrammerHumor/comments/78aa07/red... That's a pretty funny easter egg.
9.
by shallot_router 9y ago
In terms of user security, that's just not a good idea. Google has likely prevented an absurd number of account compromises (and therefore identity theft, fraud, personal information leakage, espionage...) by recognizing logins from ne
10.
by shallot_router 9y ago
The key point from the paper [1]: >Decreased depressive symptoms were observed in all 19 patients at 1-week post-treatment and 47% met criteria for response at 5 weeks. Small sample size, but definitely an interesting result. I was hopin
11.
by shallot_router 9y ago
WHOIS history on that domain shows the registration changed hands on November 15, 2016. Before that, it was owned by "Digital River, Inc.": Registrant Name: Digital River, Inc. Registrant Organization: Digital River, Inc
12.
by shallot_router 9y ago
In practice, this isn't really possible, though. The binary is usually going to be slightly different. In theory you could RE the differences and potentially disprove a backdoor, but it's not easy. Also, it's not necessarily
13.
by shallot_router 9y ago
This seems more like a "hack" in the general tech sense than the security sense (even though it's probably technically illegal). I even think it'd be something YC would love to see on an application.
14.
by shallot_router 9y ago
>There are also things like Kaspersky previously volunteering to provide complete source access to the government. Our government declined the offer. How does this make sense? First, even if they were giving access to their genuine sourc
15.
by shallot_router 9y ago
What % of ICOs are seemingly legitimate? I see advertisements for ICOs on reddit and other tech websites all the time, and I have yet to find one that doesn't look incredibly shady.
16.
by shallot_router 9y ago
I'd be pretty surprised if an attacker could actually get away with a lot of sensitive, actionable bulk user data from Facebook. DMs would probably be way too big in total, unless they just looked for DMs of high-profile people. As for
17.
by shallot_router 9y ago
I'm not too surprised at the 3 billion. I'm just wondering how many of those correspond to real people.
18.
by shallot_router 9y ago
How could a driverless car ever truly be tamperproof, though? At some point we'll just have to accept it as a potential risk.
19.
by shallot_router 9y ago
Technically, yes, but as I understand it, they frown upon it and could potentially terminate your account. See this section of their ToS ( https://www.cloudflare.com/terms/ ): >SECTION 10: LIMITATION ON NON-HTML CACHI
20.
by shallot_router 9y ago
This seems like it has a ton of potential. I'm already thinking of the possibilities for my own Cloudflare-proxied sites. I hope it's not priced too harshly. Hopefully an added monthly flat rate rather than per-request pricing?
21.
by shallot_router 9y ago
They're stupid if they're just saying something everyone already knows. It'd be like saying "the US government assassinates civilians with unmanned airborne vehicles" or something.
22.
by shallot_router 9y ago
Or a lot of tribalism?
23.
by shallot_router 9y ago
I never thought I'd see the day where a Buddhist monk in robes is calling for the genocide of "Muslim vermin". (I don't think he literally said "vermin", but that's basically the analogies he's using.
24.
by shallot_router 9y ago
Yep. People complain about the "adpocalypse" and censorship from YouTube and Facebook, but they're really stuck between a rock and a hard place. That said, I think they should always err on the side of free speech wherever po
25.
by shallot_router 9y ago
I believe they were being sarcastic.
26.
by shallot_router 9y ago
I wish someone could take the best parts of TypeScript and CoffeeScript and put them together.
27.
by shallot_router 9y ago
Definitely not. If HTML caching were enabled by default, I would've run into all sorts of weird issues with a lot of my Cloudflare-protected sites.
28.
by shallot_router 9y ago
Ah sorry, I did misunderstand. Yes, no one is safe. Not Google, not Facebook, and not NSA or CIA or any agency or organization on Earth. A good defense is much harder than a good offense when it comes to infosec.
29.
by shallot_router 9y ago
Nginx isn't a security company and doesn't make client-side software, so probably not. (Of course, theoretically nginx could be backdoored to give valuable information to intelligence agencies, but it's harder due to the fact
30.
by shallot_router 9y ago
Of course that's what the Russian officials said, but who knows how accurate that is or what might be omitted from that statement?

More ›