Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

Captain Foo posted:

Thread remounted -rw

Adbot
ADBOT LOVES YOU

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

haveblue posted:

hey guys I wrote this daemon to re-verify tape archives in the background, what do you think

lol

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

Raere posted:

Say you're designing an authentication backend (I'm not) and are storing passwords as salted hashes. Where do you store the salts, if properly designed?

bcrypt, which you probably should be using, embeds the salt in the hash output so you don't need to store it separately

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

ozymandOS posted:

it seems that if the upgrade can't be verified with the built-in key, vlc downloads a new key from their server




over http

lol

i think it then checks this key is signed by a hardcoded one. this makes sense (ish) because it allows the signing key to be rotated without locking old exe's out of the auto update mechanism

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
i.e. he signs vlc.exe with whatever the current key is whenever he builds it
and signs new keys with all the old keys, so old versions of vlc can update to the new key safely if they don't have it

arguably a safer scheme than relying on tens of millions of users having a correct clock / sensible root ca store / some other way to bootstrap trust in the tls cert (dane lol)

although he should probably just try https first and fall back to this if necessary

Rufus Ping fucked around with this message at 00:54 on Jan 20, 2019

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
Same bug as the scp one from last week. Guess it made someone go looking

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
google should never have got rid of xmpp federation in gchat, this was a worse crime than killing off google reader imo

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
admin@kremlin.ru is in 000webhost.txt too :eek:

is nowhere safe from komrade vlads Яussian interference????

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
wipe it

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
Jeff atwood backup on the vm itself

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

CRIP EATIN BREAD posted:

especially since there was that site that was up and publicly available that let you register .gov domains instantly.

it also had a list of where all the naval warships and subs were at in real-time.

you what

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

Carbon dioxide posted:

They just said on the radio that the EU passed a law that says that third party companies are allowed to ask a bank account holder for permission to get access to their bank data, and in that case the bank must provide this data.

This includes all money transfers and card payment information (date, time, amount, company you paid to).

It is supposed to help out startups that offer online personal finance management apps. And they supposedly have all kinds of checks in place where companies using the bank data get regularly audited and stuff.

I can't see any way this could possibly go wrong...

if they're referring to PSD2 / Open Banking it's actually a good thing, certainly much better than the old system where you have to give your accounting software your various online banking logins and security answers and they give them to some shady screen scraping company who totally aren't selling your data on the side and in doing so you waive any right to recourse if they get pwned and you lose your life savings

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

mystes posted:

Basically the only situation where it would matter would be having a laptop stolen while it's suspended.

how would it being suspended (s3) help?

(cf. hibernation (s4) which would dump ram to disk)

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
that vid is entirely plausible imo, its essentially the same complaint as with the creepy animated childrens videos from 2017

if you leave the recommender/autoplay thing to its own devices then it will quickly steer you towards certain local minima in the 'space of videos' depending on where you start, which you wouldn't stumble on otherwise. forget to close youtube after watching one instructional breast exam video and you will wake up the following day surrounded by dangerously horny teenage boys from india

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
can any android touchers riddle me this one please

https://twitter.com/hilare_belloc/status/1098382700841500672

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
Dunno. Could be

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

DrPossum posted:

Time to update them ripper dictionaries

ripper is a gangster!!!

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
"again", lol

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

Shame Boy posted:

why do you think the forums are going away?

Lowtax has been begging for money again but he's got it now so crisis averted

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
The lesser known thing about SoS is that he was doxed accidentally by everyone's favourite ZF0 mailspool dump victim, dan kaminsky

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

pseudorandom posted:

The native application's auto-type works by reading the title of the application, eg "Security Fuckup Megathread - The Something Awful Forums - Mozilla Firefox"

Jesus christ lol just use 1password

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
Absolute clown tier password management

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

Proteus Jones posted:

The paid tier is supposedly faster, so I imagine there’s some kind of throttling going on with the VPN.

The stated difference is that paid will use their Argo routing system (the same thing people can pay to use at the moment to reduce their website's latency)

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

Perplx posted:

years ago you could get connected to a slower cdn for netflix and youtube with 3rd party dns but I dont think thats a problem anymore

supposed to be fixed these days thanks to edns client subnet

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
hunter2

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
no it was more likely a rubber ducky style device that pretends to be a keyboard

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
remember TheCthulhu/@CthulhuSec? guy who made a name for himself hosting various data dumps (fraternal order of police, turkish police, linkedin hack)

turns out he was the "dread pirate roberts" on silk road 2
also he was into child porn and planned on selling it

https://motherboard.vice.com/en_us/article/9kx59a/silk-road-2-founder-dread-pirate-roberts-2-caught-jailed-for-5-years

the surprising part to me is that he got arrested pretty early on and most of the things he is known for are things he did while on police bail

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
throwback to when he shat himself because he thought his child porn repository had been raided

https://lists.torproject.org/pipermail/tor-talk/2014-December/036067.html

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

rafikki posted:

That was a lot of talking

UK sentencing is generally less crazy than US for this stuff but yes its pretty lenient

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
"White declined to speak to Motherboard on the record about his case. "
"According to a source familiar with the case, the investigation [.....]"
"Motherboard granted the source anonymity to speak more openly about a criminal case."

real subtle

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

SIGSEGV posted:

did I read the article wrong or did he, err, generate some pictures too?

the law about 'making' is worded in a pretty vague way with lots of leeway for interpretation. it doesn't necessarily refer to taking a new photograph or video

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
yes, the "possession" and "making" offences come from two different laws but "making by saving" is supposed to be treated the same as possession for sentencing purposes if there isn't anything else going on (like actual production or distribution)

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
cloudflare's vpn offering may be a suitable replacement for your current vpn depending on what you use it for. imho

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
Marcus hutchins pleads guilty re. kronos malware

https://www.malwaretech.com/public-statement

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
Plea deal pdf here

https://twitter.com/itsybitsydots/status/1119331518441123841

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano

evil_bunnY posted:

my guess is everyone recognizes they can’t prove much but they let him side if if he doesn’t embarrass the AUSA

hes only getting off lightly by insane US standards, he faces up to 10 years (if served consecutively) + half a mil fine

Adbot
ADBOT LOVES YOU

Rufus Ping
Dec 27, 2006





I'm a Friend of Rodney Nano
these days cloudflare assiduously forward all complaints upstream, pretty much regardless of their legal merit, and are also responsive to requests from foreign law enforcement / govts that content be geo-blocked in accordance with their own local laws. not only does putting your site behind cloudflare not shield you from legal complaints you'd normally get, it actually risks your content being made inaccessible by foreign countries who might otherwise have just been ignored by your upstream provider. it's a boon to those wishing to curb the jurisdictional arbitrage that underpins publishing objectionable content online

it's interesting - especially in light of some social networks' well publicised habit of making acceptable use rules up as they go along - that when cloudflare say "come back with a warrant (from anywhere lol)" some people's response is "stop requiring that and make these decisions yourself" rather than "why is such material not against the law"

pseudorandom name posted:

nazis serve the interests of the state

ding ding ding

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply