yoo1I · HackerTrans

yoo1I

no profile record

Submissions

Named data networking

en.wikipedia.org

4 pointsby yoo1I10년 전0 comments

Open-source tool that uses simple textual descriptions to draw UML diagrams

2 pointsby yoo1I10년 전0 comments

Wendy's POS's systems breached through malware

1 pointsby yoo1I10년 전0 comments

Delta built the more efficient TSA checkpoints that the TSA couldn't

11 pointsby yoo1I10년 전3 comments

CloudFlare, Paypal protect Gladius DDOS blackmailers

translate.google.com

1 pointsby yoo1I10년 전0 comments

Why the OPM Hack Is Far Worse Than You Imagine

lawfareblog.com

15 pointsby yoo1I10년 전0 comments

comments

10년 전discuss

A tool I've the found to be the closest local network dropbox equivalent: https://syncthing.net/

10년 전discuss

Hmm, not quite what I thought it would be. It's just a javascript widget that let's users report content to your own team.

I know that Facebook (and I assume the other big players) run teams (from what I read not excellently paid and without enough psychological support ) that actually review/filter objectionable content and I am guessing they're throwing their automatic detection systems at it as well.

Anyone aware of a company offering the actual filtering system AAS ?

10년 전discuss

I am currently trying out tox with a small number of friends (ok, one friend). I am curious as to what your criticism of tox is. While it seems it's still a bit new, it seems it does all that it claims to do.

10년 전discuss

I don't have a lot of skin in the game, but I am genuinely curious as to what you mean. How else other than "lump[ing] them in together", would you comprehensively criticize it?

I mean, two things good about Signal is that it let's you chat with friends and family in a secure manner.

There are these following issues though: I doesn't federate, it relies on Google Push, it doesn't support SMS. Also, I don't like how Signal does [...]"

Is that already an invalid way to make an argument ?

10년 전discuss

This sounds like you might need to define your threat model in a little more detail. I don't think the threat such that you might catch ME sending out data while you're looking for it in this way.

But let's say I was your attacker, I would simply encode some data in the timing between each individual packet that I am sending out on behalf of the kernel: imagine a sort of morse code where that are long pauses between packets for dashes and short pauses between dots.

So now all I have to do is convince your ISP to let me look at your packages timing.

10년 전discuss

First off, as pointed out below, making copies of national IDs is illegal in some jurisdictions, but there are many other IDs which according to the issuers may not be copied. Think drivers licenses, library cards, and so on.

That being said, all IDs that I own are issued for a particular service, any app/webservice asking me to upload a copy of them, would most likely re-use some aspect of value that these IDs provide for a different purpose, and I can't think of an actual, compelling reason why I would give someone else access to it.

And that's before even thinking about security and the possibility of a breach.

Would you mind sharing why you are asking ?

10년 전discuss

Pfft. Amateurs!

> Once upon a time at evening I have decided to properly brake the famous browsers communication problem and as a result you have landed in here. I have created implementation of BNC networks model with simple TCP/IP layer, that as transport packet it will use browser's cookie object.

http://theprivateland.com/bncconnector/index.htm

10년 전discuss

Not really, but maybe somewhat.

I am able to read it without cookies and without scripting from a location in Europe.

10년 전discuss

... not sure how well this system will fare, given that "Eskéndereyya" is 'literally' the arabic name of the city of Alexandria.

10년 전discuss

This turns out to be an argument for ad-blocking.

By blocking all ads, because I am not going to buy anything from an ad anyhow, I'm not being counted towards your bill, which makes things cheaper for you and more pleasant for me.

You're welcome.

10년 전discuss

TL;DR

Journalist tries to grow up; succeeds;

Select quotes:

> give up spending on all but the essentials

> As a personal finance journalist people assumed I was good with money but while I wrote a lot about the merits of saving, I wasn’t practising what I preached.

> I hope I have encouraged other people to reconsider their spending patterns too.

My Verdict:

Experience logs that explain things like "de-clutter", "minimalize", "de-tox", "live a frugal life in which a missing tile on a roof (see article) is an unnecessary expense" and recommend the lifestyle, serve more to explain their authors problems with themselves than being useful life advice.

There, now you don't have to read the article. Do something fun in moderation with that time.

10년 전discuss

It's not quite that simple. The sample of 900000 customers includes some knowledgeable people, and the attack/outage has been going on for long enough to investigate a little bit.

If what they write is to be believed, and many people have posted evidence, this is a mirari-style attack on people's home routers via a hole in the TR-069 remote management protocol.

The malware then closed off the management port, locking out the Telekom ISP from performing remote maintenance to fix it. Their advice to "shut off" the devices, seems to be based on the fact that at least some variants of mirari do not persist to the device and only exist in memory.

10년 전discuss

> Can anyone explain to me how this could be used against someone? I'm asking completely seriously as I don't see any harm in this no matter how hard I try.

This is called the "nothing to hide" argument. If you currently have no foes and are generally closer to the elite of a society than to the margins, then these few little data points collected on you (pseudo-anonymously or not) cannot really hurt your.

But as your digital shadow grows (and with google analytics et al being used to extensively, it certainly is) and you drift to the margins of society, possibly developing some foes in the elites in the process, the information about you that is now available to people in power becomes more threatening for you.

Say, you're now a black, female, delivery driver in Detroit instead of a Silicon Valley software engineer. Once you give cause for scrutiny, say, a conflict with your employer, the digital shadow of data-points can be searched to find anything that, taken out of context or not, can be used against you.

Or, put differently in famous exaggeration by Cardinal Richelieu:

  If you give me six lines written by the hand of the most honest of men, I will find something in them which will hang him.

10년 전discuss

You're pretending there is an inconsistency in their argument when there is none. Let me give you a slightly (ever so slightly) exaggerated explanation of why you're incorrect in your analogies.

* A phone is a communications device. We know it transmits information. Unwanted tracking that exceeds the metadata strictly necessary for the execution of it's purpose and usage of this metadata for any other purpose needs to be opt-in.

* The browser is a communications application. We know it transmits information. Unwanted tracking that exceeds the metadata strictly necessary for the execution of it's purpose and usage of this metadata for any other purpose needs to be opt-in.

* An internet-enabled TV. We know it transmits information. Unwanted tracking that exceeds the metadata strictly necessary for the execution of it's purpose and usage of this metadata for any other purpose needs to be opt-in.

* Open source project collecting usage metrics? Downloading software packaged generates metadata. We understand that, and use the software on that basis. Any usage of that metadata and tracking my usage habits of said Open Source project needs to be opt-in.

10년 전discuss

OT:

"Nautilus uses cookies to manage your digital subscription and show you your reading progress. It's just not the same without them."

I don't have a digital subscription, neither do I need my "reading progress" displayed to me. What does that even mean ? What makes that so important that they just can't show me the content, if they not also show me my "reading progress".

I'm a fully grown adult who has been reading for many, many years. Maybe I know a thing or two about my "reading process".

If you want to show me ads and/or sell my "reading progress" to the highest bidder, at least say so, and don't hide behind some bullshit.

10년 전discuss

not to leave you hanging there; this is what I found in my .zshrc to enable the functionality.

  autoload edit-command-line
  zle -N edit-command-line
  bindkey -M vicmd v edit-command-line

... could've sworn that was included more default-y

10년 전discuss

This fails to mention the most vi-in-a-shell-yness:

Press "v" and launch your currently typed command into a vim (or whatever $EDITOR is set to) editing buffer.

Very useful for adhoc-but-long if or while statements.

10년 전discuss

I've recently discovered plantuml[0]. It does a pretty good job for tasks centered around software design, and the language is simple, yet not too limited for my purposes.

[0] http://plantuml.com/state-diagram#Simple

10년 전discuss

This is likely photoshopped. This is what I got when I ran it through[0]

https://i2.uploadit.ga/img/1476562202.jpg

That looks suspiciously like someone edited at least the text into the picture.

[0] https://github.com/sentenza/GIMP-ELA

EDIT: Different picture, same story: https://i3.uploadit.ga/img/1476564394.jpg

Definitely shopped in. At least the text.

10년 전discuss

Sans the drone (at least as far as my knowledge on the matter goes ,which is not very far) they already do this and the maps are freely available:

http://activefiremaps.fs.fed.us/