13 · HackerTrans

11 anni fadiscuss

Websites offering self hosted, static advertising isn't so much of a problem as random bits of javascript and tracking cookies loaded from god knows where every time you load a page. Harder to block, the advertiser needs to pass their content through the hoster which assures some level of quality and relevance, and some level of privacy for the end viewers.

11 anni fadiscuss

You should fix that error message too, it's pretty awful.

11 anni fadiscuss

Probably a lot of sources, depends how well connected you are.

The biggest one is just routing information and rDNS hosts which give away a lot of the information required anyway. If you were really thrifty you would make agreements with services (or use services you run yourself) that have users supply their location information and use that to construct a more granular database. I suspect this already happens to a degree, some of the fake information I give out has ended up in at least one IP address database.

I strongly considered doing this at one point but lacked the connections to pull it off properly (not enough sources of data I could get without approaching random people, basically). A secondary concept would just be to crowd source it and have the information freely available, but I was never sure how to deal with people poisoning the database or just honestly supplying conflicting information.

11 anni fadiscuss

A fun edge case is that .au domains are not registrable by any entity, except for the ones that exist just because.

http://csiro.au/

11 anni fadiscuss

That's been fairly clear from the start. Almost anything actually useful needs an oracle, and then you get back to the problem of wait, didn't Bitcoin already solve this problem half a decade ago? Once you get past the marketing you've got a rather faulty and expensive clone of Bitcoin with a fairly sketchy history.

11 anni fadiscuss

> DEFINITELY NOT FINANCIAL ADVICE: Personally, I think $2.80/0.01 XBT is low and I would not be in a rush to sell at this price. But, I do understand if you're bearish and you wanted to dump in to the bulls ahead of everyone else.

That's so financial advice, coming from the CEO of the Kraken exchange.

11 anni fadiscuss

Money buys a lot of commits. Give me a few million dollars and we'll get together a group of people that will build an entire computer from discrete transistors. People involved and amount of work doesn't make something worthwhile, reasonable, or viable, it just means that people work for money.

11 anni fadiscuss

I think you put far too much trust in one of thousands of clone VPN services. There's no reputation to taint, there's stock standard scripts running on commodity VPS boxes they rented from somewhere else. I would be shocked if at least some of the most commonly used ones weren't run by people looking to sniff credentials. You're paying to pipe all of your sensitive information through some random persons box, which is just ludicrous.

11 anni fadiscuss

Just giving the benefit of the doubt here, a lot of the time it's unclear if your disclosure even made it to the right people in a company or not. No response is the norm for security disclosures, as is claims of "we didn't get this", even if you have a receipt for their ticketing system that says they did. I've sometimes spent far longer attempting to contact a company than doing research into something that seems to be a problem.

11 anni fadiscuss

Why do you trust Amazon AWS and this company more than your own connection?

11 anni fadiscuss

Why is their target 8 seconds to load the page? That's a ridiculously long time.

11 anni fadiscuss

That's rich, coming from The Verge.

245 objects requested, 48 JavaScript files loaded, 9.8MB.

11 anni fadiscuss

Why would it be corrupted? Just because it contains a malicious payload doesn't mean it has to be unviewable normally. Could even just tack onto all outgoing MMS by default and never raise anybodies suspicions.

11 anni fadiscuss

If malware has root access it can alter everything on the phone without you ever seeing it. Any information falsified, all detection tools subverted.

11 anni fadiscuss

Probably has engineering challenges past what you would normally face, which thankfully makes a 1B device botnet a little unrealistic. I can't imagine how you'd even begin to control such a thing, just a sequential numerical list of the clients is 4GB. Scary prospect though.

11 anni fadiscuss

It's likely too late for panic, everyone is probably owned already. It has the best infection vector ever, unauthenticated, unsolicited messaging with an easily discoverable addressing method. What more could a worm want?

11 anni fadiscuss

Why target people specifically? A phone has all the tools necessary to infect every other peer they can reach. Almost instant billion device botnet, each with a new list of targets to infect in the contacts book. It'll be interesting if this does happen, and the same mistakes as early worms are made (global internet pipe denial of service by probes attempting to find new hosts to infect).

11 anni fadiscuss

Slightly exaggerated, but that sort of thing absolutely happens.

11 anni fadiscuss

Web 3.0 is pretty much that. Load 10MB of JavaScript libraries sequentially, then every element on the page needs a new loader, 30 HTTP requests, and a web socket.

11 anni fadiscuss

You don't remember Microsoft Surface, the coffee table touch computer?

comments