HNHacker News
TopNewBestAskShowJobs

jdong

86 karma · joined July 1, 2014

submissionscomments
jdong··on US nabs alleged Russian hacker – and Kremlin cries foul
Seeing as there's no extradition treaty, Maldivian coppers sending him to Guam would be rather shady.
jdong··on US nabs alleged Russian hacker – and Kremlin cries foul
Although this isn't the kind of business that particularly deserves defending, but if US in fact did snatch and grab this guy from the Maldives (Who seem to have no extradition treaty with the US) their actions are far worse than robbing a few credit card companies.
jdong··on Ubuntu and open source help the City of Munich save millions
Except you aren't giving Microsoft money while buying a Windows laptop. Nor can I see what you'd benefit from spending extra money to not give Microsoft money.
jdong··on The Rise of Thin, Mini and Insert Skimmers
I do not know of any readers that won't let you bypass this. Many terminals have a button that literally says "bypass PIN" that'll let you use the stripe in case the chip fails.
jdong··on U.S. Banks Curtail International Money Transfers
By users I mean anyone participating in the network.
jdong··on The Rise of Thin, Mini and Insert Skimmers
Chip ATMs will generally only look for the chip and therefore work with the stripe missing. (Many ATMs have two slots, one chip and one stripe) So in most of EU you should be perfectly fine if you remove or otherwise disable the magstripe on your card.

You'll be screwed though if you end up in a situation where your chip doesn't work and need to pay with the stripe fallback (pretty much all cards allow this).

jdong··on The Life And Death Of 'The Internet's Own Boy'
It isn't DoJs job to speculate what the charges will actually result in, the "up to" although unrealistic is still accurate.

It's reasonable to expect for the media to accurately interpret this, but clearly that isn't happening.

jdong··on Xiki: An amazing shell
To be honest, a lot of these functionalities really don't seem to fit into a shell but into some sort of a GUI file manager.
jdong··on U.S. Banks Curtail International Money Transfers
Such centralized businesses will be swiftly shut down by legislation if bitcoin cannot be regulated. If shutting down the centralized businesses isn't enough, bitcoin will be outlawed. Identifying users is easy enough due to the nature of the network.
jdong··on The Life And Death Of 'The Internet's Own Boy'
The DoJ isn't lying, the public just doesn't understand what these numbers mean. That's not the DoJs fault, but the publics.
jdong··on Jamming XKeyScore
Thanks, clipboard wasn't syncing properly.
jdong··on Jamming XKeyScore
This article is based around the source that author claims to be faked in another article, http://blog.erratasec.com/2014/07/validating-xkeyscore-code....

edit: fixed link

jdong··on IRC logs from the beginning of the Gulf War (1991)
IIRC at least znc crashes, other clients like xchat start having rendering issues and some (I think irssi) completely disregard content after the 512th byte
jdong··on IRC logs from the beginning of the Gulf War (1991)
Makes sense, though I don't think that's the standard log format for any client.
jdong··on IRC logs from the beginning of the Gulf War (1991)
IRC protocol spec limits message length to 512 bytes, I know only of a single implementation that lets you go above that and many clients crash or otherwise break if you go above it.
jdong··on Hacking into Internet-Connected Light Bulbs
"So, in theory, it would be possible with a few hacks to get the bulb to run MS Windows 95..."

"few"

jdong··on IRC logs from the beginning of the Gulf War (1991)
This message seems to be way too long for IRC.

edit: I really don't get why people are downvoting this, the message appears to have at least 1298 characters.

jdong··on Breaking Spotify DRM with PANDA
What if they like the product but would rather have it without the DRM?
jdong··on HP’s fanless Chromebox has a noisy fan inside
Did you actually watch the video? He never implies that the device is fanless.
jdong··on Breaking Spotify DRM with PANDA
Voting with your wallet is much less effective than publicly complaining, unless of course your wallet is worth a lot.
jdong··on New AWS region coming soon: eu-central-1
Renting out docker containers on a server shared by multiple customers is a completely ridiculous idea from a security point of view though.
jdong··on New AWS region coming soon: eu-central-1
How would they go around selling something like docker? Selling servers with docker preinstalled? Why can't you install it yourself?
jdong··on Private Search based in Europe
What value is "based in Europe" supposed to have? The continent where the site is located hardly matters, especially with these ridiculous load times (Testing from NL)

Regarding the promise of "no tracking by cookies", what is the "BX" cookie planted by yahooapis.com used for?

A quick guess based on the URL tells a story that's the opposite of "no tracking by cookies"

http://yboss.yahooapis.com/ysearch/ads?appid=7RmBar52&ads.To...

jdong··on Inside Monsanto, America's Third-Most-Hated Company
Media that publishes information from credible sources?
jdong··on Unix Tricks
You should just move to zsh that does this natively and in a clean manner.
jdong··on Tor users are selected and monitored by the NSA as extremists
NSA uses several different parameters to identify potential targets.

E.g a Tor user with no Facebook profile who recently spent two months in Syria, sound suspicious?

The fact that someone doesn't make a Facebook profile stands out, the fact that someone is using Tor stands out and the fact that someone is taking regular trips to Syria stands out.

Nobody's getting arrested for using Tor, or not having a Facebook profile. But those are things used in evaluating people.

jdong··on Goldman Sachs is suing Google to un-send an accidental email
Seems like something that could create a really dangerous precedent. Not exactly something you want in a common law country.
jdong··on DNSSEC Would Not Help Prevent Microsoft’s Seizure Of Domains
No need for a blacklist either, I don't believe there's been a single example of a malware using a purely DNS based C&C (e.g by utilizing TXT records) instead of using DNS to get the IP address for the C&C server.

Of course there's always an exception, in this case there exists DNS beacons included in pentesting suite Cobalt Strike, but that doesn't seem to be something widely used.

jdong··on Tor exit node operator prosecuted in Austria
Coincidentally the very person who was sentenced here operates the hosting company you're with (edis.at)
jdong··on Bitcoin fund lost $70,000 in a cyber-attack caused by US Marshals Service
This attack was hardly caused by the USMS, it was caused by terrible security practices.
← PreviousPage 4 of 5Next →