HN user

acer4666

164 karma
Posts0
Comments49
View on HN
No posts found.
Stop Breaking TLS 7 months ago

You should make it about CT logs. I believe you need to compromise at least three of them.

I don't see how you would get the private key for the airtag off the iPhone without jailbreaking it. The readme of the project implies you can do this but the docs are completely lacking

Htmhail 2 years ago

The "model solution" isn't exactly great. "Just make sure to style the button so it's appearance changes when it has focus..." Ok? So show me how to do that!

My computer isn't great, I'll admit, but I'm making a relative comparison. I visit many different websites on my low spec computer but discord is a noticeable outlier on how it affects the performance.

Common Google XSS 2 years ago

Does this JavaScript run in the same origin as the Google domain? Surely this is just an open redirect rather than xss?

Agreed; my problem was that the parent comment was imprecise, and hence confusing. "n bit random number vs. n bit modulus" implied n was the same in each case, whereas 521 is not the same as 512.

It's not the difference between an n-bit random number and an n-bit modulus. It's the difference between a 512-bit random number and a 521-bit random number. It's very simple, but wording it as number vs. modulus is needlessly confusing, just adding to the problem you are bemoaning.

"The -p <port> option can be used to specify the port number to connect to when using the ssh command on Linux. The -P <port> (note: capital P) option can be used with SFTP and scp."

The most annoying thing about SSH/scp!

He never drew them in a pyramid but he absolutely described them hierarchically. A quote from his 1943 paper: "Human needs arrange themselves in hierarchies of pre-potency. That is to say, the appearance of one need usually rests on the prior satisfaction of another, more pre-potent need"

Nonce reuse covers a whole bunch of attacks in different algorithms. It's weird to compare that broad category against two specific examples of padding oracle attacks