I am trying to understand your post. Is it cheaper per yard to hire a concrete truck than to mix concrete (with free aggregate/sand) yourself?
There is the issue of the TLS connection of images fetched in the app (other things too?) being tied to a domain without a valid cert. In other words, you could MITM the TLS session between the wifi user and the Tindr…
I agree that you need "both halves" in this scenario to sign the transaction. At some point during the spend from the wallet, the privkey that matches the wallet pubkey has to touch memory. This privkey can in theory be…
The attacker only needs to have compromised the device which spends from the wallet file
I don't think it's "stupid" to C2 via chat API. It would be "stupid" to have no fallback mechanisms
plot twist: active breach investigation on going with all 3 majors
TOR does not protect DNS queries out of the box. You must configure your PC to query through TOR or all of your DNS queries have the potential to leak to your ISP…
This seems like a really cool device. One that I would certainly purchase. What weird stretch goals they have. I wonder if these are jokes? "$8m = Signatures of entire team printed inside the phone case $10m = Free…
This is one of the biggest points that I have seen taught in driver training courses and repeated throughout my life. Most of the events people refer to as car accidents are crashes/collisions.
This is definitely a confusing sentence, especially for a non English speaker. You can reword the sentence and add something in front (e.g. "The researchers"). "The researchers are using psilocybin assisted group…
Interesting... there doesn't appear to be any fire suppression systems pictured in the mining buildings
Report it anonymously to your insurance provider (*not sure if this is possible and/or would actually do anything)
The data URL scheme is abusable. Firefox and Chrome correctly redirect to localhost via javascript…
I just tried this on Chrome 60.0.3112.90. Both Firefox and Safari throw phishing warnings with these URLs. http://news.ycombinator.com@1572395042 Chrome takes me to 93.184.216.34 no warning Then I tried…
In society we have an endless amount of social warnings, "Don't drink too much, you'll get ill. Don't do drugs, you'll become an addict. Don't drive without your seatbelt, you can die. Don't watch too much TV, it's not…
I have heard one of these in San Francisco, CA in the USA. The music had a really high pitched note behind it that sounded horrible.. like a cross between a mosquito and the buzzing of an input jack
Forcefully taking private property from individuals to later sell to other private parties for private use sounds like the nightmare version of eminent domain.
to add to your post, that affiliate link stays active on amazon accounts that clicked it for 24hours and pays out to the owner for every product purchased in that time frame
Was waiting for this comment. I often ask myself, "Do I want any entity to have a copy of the exact dates and amounts of my entire daily consumer activity?". Whether anonymized or not there is a tremendous amount of…
Some relevant info: In the USA average consumers are protected by the FDIC for the balances of their deposits up to $250,000. A large number of banks have consumer liability limits in place for protection from…
this is an interesting application... was linked in the article safestrike.it
Link to the Orin Kerr article: https://www.washingtonpost.com/news/volokh-conspiracy/wp/201... Orin Kerr's analysis is excellent and made me consider the accused party's intent and the difference between selling code…
From my comment, the SPECIFIC details of the tool's concepts of operation, implementation, and capability. The field guide provides great detail on operations and limitations of a specific existing tool (sample GUI…
Just because a threat vector is well known and not cutting edge does not make the SPECIFIC information of its existence, implementation, and capability completely worthless
Pretty interesting how many bits of identifying information are available based on system fonts. if you've never seen EFF's Panopticlick check out https://panopticlick.eff.org
I am trying to understand your post. Is it cheaper per yard to hire a concrete truck than to mix concrete (with free aggregate/sand) yourself?
There is the issue of the TLS connection of images fetched in the app (other things too?) being tied to a domain without a valid cert. In other words, you could MITM the TLS session between the wifi user and the Tindr…
I agree that you need "both halves" in this scenario to sign the transaction. At some point during the spend from the wallet, the privkey that matches the wallet pubkey has to touch memory. This privkey can in theory be…
The attacker only needs to have compromised the device which spends from the wallet file
I don't think it's "stupid" to C2 via chat API. It would be "stupid" to have no fallback mechanisms
plot twist: active breach investigation on going with all 3 majors
TOR does not protect DNS queries out of the box. You must configure your PC to query through TOR or all of your DNS queries have the potential to leak to your ISP…
This seems like a really cool device. One that I would certainly purchase. What weird stretch goals they have. I wonder if these are jokes? "$8m = Signatures of entire team printed inside the phone case $10m = Free…
This is one of the biggest points that I have seen taught in driver training courses and repeated throughout my life. Most of the events people refer to as car accidents are crashes/collisions.
This is definitely a confusing sentence, especially for a non English speaker. You can reword the sentence and add something in front (e.g. "The researchers"). "The researchers are using psilocybin assisted group…
Interesting... there doesn't appear to be any fire suppression systems pictured in the mining buildings
Report it anonymously to your insurance provider (*not sure if this is possible and/or would actually do anything)
The data URL scheme is abusable. Firefox and Chrome correctly redirect to localhost via javascript…
I just tried this on Chrome 60.0.3112.90. Both Firefox and Safari throw phishing warnings with these URLs. http://news.ycombinator.com@1572395042 Chrome takes me to 93.184.216.34 no warning Then I tried…
In society we have an endless amount of social warnings, "Don't drink too much, you'll get ill. Don't do drugs, you'll become an addict. Don't drive without your seatbelt, you can die. Don't watch too much TV, it's not…
I have heard one of these in San Francisco, CA in the USA. The music had a really high pitched note behind it that sounded horrible.. like a cross between a mosquito and the buzzing of an input jack
Forcefully taking private property from individuals to later sell to other private parties for private use sounds like the nightmare version of eminent domain.
to add to your post, that affiliate link stays active on amazon accounts that clicked it for 24hours and pays out to the owner for every product purchased in that time frame
Was waiting for this comment. I often ask myself, "Do I want any entity to have a copy of the exact dates and amounts of my entire daily consumer activity?". Whether anonymized or not there is a tremendous amount of…
Some relevant info: In the USA average consumers are protected by the FDIC for the balances of their deposits up to $250,000. A large number of banks have consumer liability limits in place for protection from…
this is an interesting application... was linked in the article safestrike.it
Link to the Orin Kerr article: https://www.washingtonpost.com/news/volokh-conspiracy/wp/201... Orin Kerr's analysis is excellent and made me consider the accused party's intent and the difference between selling code…
From my comment, the SPECIFIC details of the tool's concepts of operation, implementation, and capability. The field guide provides great detail on operations and limitations of a specific existing tool (sample GUI…
Just because a threat vector is well known and not cutting edge does not make the SPECIFIC information of its existence, implementation, and capability completely worthless
Pretty interesting how many bits of identifying information are available based on system fonts. if you've never seen EFF's Panopticlick check out https://panopticlick.eff.org