ewanm89 · HackerTrans

ewanm89

no profile record

comments

3 anni fadiscuss

Okay, discriminators are randomly assigned unless one pays for nitro, that said they have account creation date on record, so they can do it in order no problem.

The issues are the order they have chosen is not that simple. They are giving verified bots first choice (some of these are questionable), then owners of partnered servers, then discord for business, then it is going by account age.

They have added a clarification to their blog post: "Current Nitro subscribers paying for the ability to customize their discriminator that registered for Nitro on or before March 1, 2023 will also be given early access." Yeah, when early access is in the list I do not know.

6 anni fadiscuss

Let me be clear, basically the "rolling cipher" is DASH/HLS streaming for automatic quality changing. This has been an argument RIAA has been making since 2016, but outside of the judgement in Germany (which is wrong). All they have had on it are default judgements where no-one has even tried to counter it in court.

6 anni fadiscuss

Ah, there is a logical fallacy there. That logical fallacy that is just because they reused the same bitkeeper word that they took it from there AND are using it in the same sense. Ultimately this is a strawman, you are putting Bitkeeper's practice and arguments onto git.

Slave is never used once in git documentation, never has been and never will be: https://git-scm.com/search/results?search=slave

9 anni fadiscuss

1) My server runs nginx on debian squeezy, even using the newer packages for nginx from upstream, they are built against OpenSSL 1.0.1t matching the system version which does not support APNL. So while I have HTTP/2 enabled, neither Mozilla Firefox or Google Chrome can negotiate to even know the protocol is available for use.

2) HTTP2 forces TLS encryption and compression and several other things making it a PITA to debug as one has to first extract the session keys, then decrypt and decompress the data before one gets something readable. What's more wireshark does not yet have the same level of support for piecing together HTTP/2 as it does HTTP 1.1. And even after all that the data is still a binary format.

9 anni fadiscuss

1) US government should cancel all contracts with Equifax,

2) US government should demand a list of all effected SSNs

3) US government should use pre-breach tax data to issue replacement SSNs to all affected and send Equifax the bill for doing this.

3) US governments should ask the courts to consider any use of a breached SSN on any credit issued after breach date to not be enough evidence alone for any credit recovery processing (basically nullifing any credit after the breach for an affected SSN without the Banks being more careful with regards to identity checks).

9 anni fadiscuss

Well, it only takes one report to the relevant authority.

9 anni fadiscuss

Same goes for claiming to be made in most countries when it is not. I'm pretty sure the author/company founder is in France and EU law has quite a few things to say on the matter of misrepresenting goods and services provided. His post is pretty much a confession of such misrepresentation.

9 anni fadiscuss

"Converting the (VERY analogue) Morse key into a digital device was the next step."

Urm what? A morse key is either on or off, pushed or not pushed, morse code is an on-off keyed digital mode. It is not analogue under any circumstances.

9 anni fadiscuss

Technically code via SMS is 2FA, it is proving one has access to that cell/mobile phone account either directly or indirectly. I would say it is a terrible authentication system but it is a different factor to something you are (biometrics) or something you know (password/passphrase). However cell/mobile phone accounts are really easily to social engineering access to via the phone companies to send replacement SIM cards for that IMSI, not to mention the encryption to/from the phone has known major flaws (especially pre 3G GSM standards). Far better to use TOTP, HOTP or U2F which are actually designed for authentication purposes rather than have the phone company attempt to do it for you.

9 anni fadiscuss

If I was Google I would just remember I served add for website for account x but the number on the click was for account y. Real easy to detect.

9 anni fadiscuss

That is exactly what international maritime law requires. For reference, I estimate the eye height of people on the bridge and watch deck is about 28.5m above the waterline (from a picture of an Arleigh Burke-class destroyer on wikipedia), at that distance the horizon is approximately 19.1km away or a ship higher than that come into view from further away depending on the height of that other vessel which would be substantial for an oil tanker of cargo vessel (which has masts with radar reflectors and navigation lights). Now an Arleigh Burke-class destroyer is listed as having a greater than 30knot (56km/h) top speed on wikipedia, this probably means it is less than 40knot (74km/h), however it is probably not cruising at more than 56km/h so lets assume that is the common cruise speed (which is fast for a ship). So at 56km/h 19.1km takes 20.6 minutes to cover even if the other vessel is going the same speed head on that still gives more than 10 minutes to avoid a collision from when the other vessel was first able to be spotted.

So WTF was that destroyer doing for 10-20 minutes minimum that had it in a collision with another ship?

9 anni fadiscuss

Right, has the reporter visited China?

9 anni fadiscuss

No, it is targeting both. I see no mention of how monocypher implementation does anything 5o prevent side channel timing attacks, I haven't looked to see if there is any sensitive memory scrubbing. Of the bugs listed most are performance bugs by someone who doesn't know C very well yet have they done the things actually!my required in a crypto library like attempting to make sure all branches are the same instruction length for all implemented algorithms?

9 anni fadiscuss

Why lose flexibility and switch to medium in the first place?

9 anni fadiscuss

The other useful case is when you open project on another machine for some reason and you find your usual editor not installed and configured. Open any editor and away you go with this, for those quick dirty edits. I require all editors installed to be able to read .editorconfig files and use them accordingly.

9 anni fadiscuss

I would point out it is d because latin typesetters back then often didn't have a greek typeface to print with and it is the closest to the greek letter delta δ. Once one understands it's δx and δy (or Δx and Δy) and today still today most people don't know how to get delta characters on their latin keyboards, then it is easy just to not use d in algebra and use for differential calculus only. Finally (Δx)^2 and Δ(x^2) are the same thing in differential calculus.

9 anni fadiscuss

Okay so the article is wrong about some points. We have evidence for both IIII and IV notation in classic roman archeological finds. The obvious example is the entrance fee doors around the colliseum in Rome, they're are engraved with numbers, in both forms of notation.

Seriously I figured they used abacus for everything they just figured out the notation to write it down in at the end some would convert to the if notation while others would not.

9 anni fadiscuss

Okay, here is my attack:

  1. Find drone operators home addresses, information whether they have significant others, kids. Most of this is public or fairly low security information.
  2. Send goon squad to pick up significant other and kids
  3. Send threatening message with proof you have significant other and kids with the correct level of pressure for drone operator to follow your instructions very carefully.
  4. Now disappear. Very quickly, yeah, the military doesn't like to demonstrate that it has glaring weaknesses in their security and tend to send goon squads the other way to solve the issue.

That said, ultimately I proposed a social engineering attack, there are quieter less threatening methods available that could be effective with enough planning. Ultimately the point here is, formal verification can't work, for it to work the model it is verified against must include every possible form of outside influence and the code at all levels must be 100% verified against that model.

So you need to verify everything (including the workstation doing the verification against absolutely every possibility) this is an exponentially hard problem. This is why formal verification is used only in small areas, and why it does not always work, please see the 1990 Arianne 4 launch failure, where while most of the avionics had been formally verified certain data tests had been removed for optimisation and when a sensor fed bad data meant the computer had a bad cast to different data type ditching important information.

9 anni fadiscuss

All browsers can tell you what certificate signed the one in use. Unfortunately a recent chrome UI change made this a pain to get to.in chrome, into the other browsers just clicking on the lock in the address bar, it soon becomes obvious if the company is mitm all SSL connections.

9 anni fadiscuss

Assign a fqdn, I log into my router with a domain name, most routers actually have a domain name for them.

Configure the LAN setting of RT-AC68U. Device Name: ghandi