andy112

Manually removing the duplicates seemed to work fine until yesterday when I noticed everything except for a newly-added account is now gone

we got 503s in multiple AZs in us-east-1 and are still unable to start a specific instance in us-east-1b :(

we are still seeing issues here

Which article were you reading?

You can actually see a list of all resources served from scriptobservatory.org for the last 6 months here: https://scriptobservatory.org/webpage/b0852f543b380fd1515112...

There are no ads, popups, etc.

Yes, the two are considered as if they were completely separate sites.

Yep that looks like a good string to key off of.

The results for the site you mentioned are here - https://scriptobservatory.org/webpage/543677125f1bea8226ba7c... - but I don't see anything that looks like a clear match.

Hmm, that sounds strange.

If you were only able to reproduce it on a Nexus 5, I don't think analysis with ScriptObservatory will be easy. I'd still suggest submitting the URLs to be scanned by the robo-browser and then looking to see if what gets reported looks similar to what you saw before.

Also, if you write a Yara rule that matches on some of the unique features in the JS/iframes you saw, you could run a search through what's been seen. You can use that to also be alerted when new matches are reported. If something similar has been seen elsewhere, you might be able to tie it to a specific ad network.

Hi all. This is a side-project I've been working on for a while now. From the FAQs page:

Why is something like this a good idea?

JavaScript, iframes, and other embedded web content have the potential to cause your browser to take unwanted and even harmful actions on your behalf, however visibility into what you're running as you browse is very limited. After-the-fact analysis of what you were sent is (in nearly all cases) outright impossible.

If you have any thoughts or want a few interesting queries to get started, get in touch. Feedback is welcome!

Hi all. This is a side-project I've been working on for a while now. From the FAQs page:

Why is something like this a good idea?

JavaScript, iframes, and other embedded web content have the potential to cause your browser to take unwanted and even harmful actions on your behalf, however visibility into what you're running as you browse is very limited. After-the-fact analysis of what you were sent is (in nearly all cases) outright impossible.

If you have any thoughts or want a few interesting queries to get started, get in touch. Feedback is welcome!

Got it. Thanks very much!

Hi, I run the site https://scriptobservatory.org, which scans the internet and keeps track of what JavaScript people are sent as they browse the internet. Could you drop me an email with a copy of the exploit script (OR a list of a few unique strings found in the exploit script)?

With that, I can search the history of what we've been sent to get a list of all webpages that this exploit has been seen on.

Email is scriptobservatory -at- gmail -dot- com or you can input it in the "Do you have a list of websites you want to be scanned regularly?" text box.

Very cool way of thinking about it! Thanks for that elaboration.

Re: SoftwareMaven's "why is the 'player character' so important?", I don't think the player character we follow is necessarily any more important than the other player characters. You can say every individual character (or particle in the real-world side of the analogy) has an importance only within its own reference frame and I think it still works.

Just like you can have many players playing the MMO game and "collapsing the state" of different things from their own reference frames at different times, you can have the same be true for the particles in the real-world analogy. No one player of the game is more "important" than any others. The only requirement is that it all stays self-consistent in the backend and across everyone's individual points of view at all times.

But (for better or worse) I don't think what we're talking about now is science, really, unless there's some way to test it.

Maybe you could try to detect a "lag" by doing something that causes an especially large number of states to collapse across an especially large number of frames of references all at once, but I'm not sure if you could do anything that would detect this lag because all of our ways of detecting would be lagging too. (This goes along the same lines as trying to tell if the computer you're using is running within a VM or running natively.)

Any ideas?

Can you give a concrete example of what you mean?

Looking at the numbers, if you have $10,000 in your checking account, CapitalOne360 Checking pays .2% APR while Simple pays 0.01%. With $10,000 in your account, that's a difference of $19 / year. To me, that's negligible. Especially with inflation being an order of magnitude higher than both.

https://home.capitalone360.com/rates https://www.simple.com/policies/rates/

If they were to release the plaintext of Alice's (or, in their case, Paul's) message, wouldn't that include the secret email address?

FWIW, I agree the contest is a sham for the reasons moxie & others listed here and elsewhere.

Others can hopefully chime in with more, but when I first was learning about it, my reaction to the word "hologram" was the same as your (1). My understanding is that when they say "hologram", they're simply meaning an n dimensional object that's encoded in n-1 dimensional space.

If you're not familiar with the basics of the Holographic Principle, start here: https://en.wikipedia.org/wiki/Holographic_principle

It's been a while since I've watched these, but IIRC these are very good videos to start with:

- http://www.youtube.com/watch?v=2DIl3Hfh9tY

- http://www.youtube.com/watch?v=GHgi6E1ECgo

EDIT:

Key clippings from the wikipedia article-

"But Jacob Bekenstein noted that this leads to a violation of the second law of thermodynamics. If one throws a hot gas with entropy into a black hole, once it crosses the event horizon, the entropy would disappear. The random properties of the gas would no longer be seen once the black hole had absorbed the gas and settled down. The second law can only be salvaged if black holes are in fact random objects, with an enormous entropy whose increase is greater than the entropy carried by the gas.

Bekenstein argued that black holes are maximum entropy objects—that they have more entropy than anything else in the same volume. In a sphere of radius R, the entropy in a relativistic gas increases as the energy increases. The only limit is gravitational; when there is too much energy the gas collapses into a black hole. Bekenstein used this to put an upper bound on the entropy in a region of space, and the bound was proportional to the area of the region. He concluded that the black hole entropy is directly proportional to the __area__ of the event horizon."

(__'s mine)

Is that the only significant force that would act on it, though?

Can anyone explain what exactly is meant by "SSL added and removed here! :-)"?

The primary reason the House has been a deal-stopper so far is more because of Boehner's resistance to bring bills to the floor unless they would be supported by a majority of the House Republicans regardless of whether they'd pass a floor vote.

It's assuming (IMO correctly) that it will be too politically difficult for Boehner to prevent the Senate's bill from coming to the floor of the House and being voted on.

In the House vote, it's likely the most conservative House members will still vote against it, but there should be more than enough votes for it to be passed (with the House votes coming from moderate Republicans + all/nearly all Democrats).

Source?

Is the opt-in feature noted here [1] what you're referring to?

[1] http://en.wikipedia.org/wiki/Ghostery#Criticism

I was primarily meaning the crypto primitives. (see http://valerieaurora.org/hash.html for a neat chart of past and present hash functions and their lifetimes.)

Migrating over to "bitcoin-B" or some other variant would be possible, but I would imagine it would be unavoidably chaotic if both currencies stay fully decentralized throughout the process, regardless of whether the primitives break outright or over time.

"...is able to remain stable in the long run."

How sure are you that there won't be any significant breakthroughs in bitcoin-mining math/tech over the next 30 years? 100 years?