HN user

nulluk

137 karma
Posts5
Comments58
View on HN

As bri3d has mentioned, I think you are confused because the key actually has three independent functions and you need to make the distinction between them all.

    - Remote central locking via UHF
    - Immobiliser authentication via RFID (this is what is vulnerable) 
    - Key for the ignition barrel or manual unlocking of doors

As far as my limited understanding goes using the the key fob for remote central locking does not expose any risk, instead its the immobiliser part, so manually opening your door with the physical key provides no extra safety, its when the key is present near the ignition barrel, thats where the immobiliser kicks in and where this venerability exists

Yes and this is what is the most unsettling part, the TLDR for small businesses is if you don't sell through a marketplace your sod out of luck and now regarding the VAT threshold and need to burden the cost of becoming VAT registered

Our initial customers are primarily retailers but we aren't intentionally limiting ourselves to that market, the platform works across a few different sectors.

We have a Magento plugin as our first drop in integration so if you are running a Magento webstore you can just install and configure a plugin and we will automatically ask all your customers for a review a certain amount of days after purchasing. We also have a few POS and Point of Delivery integrations currently in the pipeline but as it stands they are all custom integration jobs to be branded up as the registered company, maybe this could be addressed with an iPad app that restaurants could present when customers are settling the bill?

It's honestly something we haven't looked at yet but if a potential client wants this to come onboard with us then we are more than happy to put in the development time to provide the solution

Good timing on this post, recently decided to shape up my own practices.

I'm currently storing everything in a separate OSX keychain with a strong 20+ character password but there seems to be very little out there describing how OSX encrypts the notes. I can only find articles from a few years ago staging it's 3DES but I would like to think its been upgraded since then.

Trained as a locksmith out of college, dad and sibling still trade mainly on "warrant runs" for the large energy providers when they need to get access to house to cut people off.

It's really cool seeing people take an interest in picking, but just wanted to point out that professional & hobbyist picking is completely different. A professional’s first priority normally is to get into the property, damage generally not being a huge issue so the approach changes dramatically.

First you try all the doors, as you would be surprised by how many people just simply don't lock their doors whilst making a judgment what will be the easiest entrance. Then you target the door with the worst lock, normally a UPVC door with a euro cylinder and use an electric pick gun to give it a quick blast. This gets you in within 5 minutes 90% of the time. [1] If the pick gun doesn't work you snap the cylinder in the door and replace the lock for a total cost of about £5 [2]

The hardest part of the whole job is when you have to identify a mortice lock in order to bypass it and knowing if it's worth an attempt at a pick. (Simple 3 lever locks are worth a pick first before a drill) Once the lock has been identified though it's easy to drill, you get your template out [3], mark up the holes and drill out the stump

There are also other methods and the general gist of the story is you use the method which takes the least amount of time with doesn't leave an unreasonable amount of cost!

Some other methods/products to look at which are interesting and commonly used:

- Mica, a specifically made plastic for slipping rim latches, most commonly referred to as "yale locks": http://uklockpickers.co.uk/mica-shim.html

- Letterbox tool, very basic (its just posh string on a stick) but also very effective at knocking off deadbolts or opening a latch that won't slip: http://www.walkerlocksmiths.co.uk/bypass-tools/letterbox-too...

- Try out keys for mortice locks with a low number of levers: http://www.walkerlocksmiths.co.uk/mortice-picks-tools/try-ou...

- Plug spinner for when you pick the lock the wrong way: http://www.youtube.com/watch?v=fUmCUj44BPg

[1] http://www.youtube.com/watch?feature=player_detailpage&v=mTt...

[2] http://www.youtube.com/watch?v=FqhhXyROxQM

[3] http://www.eltonlockservices.co.uk/drill%20template%20new%20...

With both myself and my partner having Crohns we have found a lot of value it Crohnology and its absolutely an amazing idea, simply for the community thats grown around it.

However my single annoyance is all the treatments are display by brand name and over here in the UK medicine is generally never referred to by its brand name, meaning it was extremely difficult to input my past treatments without a lot of googling

Apologies your right. Trying to bring it back around to my original point by rephraseing my orgional statement then.

If your worried about this update then you haven't been doing seo right and If your relying solely on a 3rd party for the existence or profitability of your company then you have bigger issue at hand than just your seo.

Yes probably I am, because we are talking millions of sites and statisticly your going to get anomolies. Then again if your business model is based primarily on your SERPs then you have a bad business model and should be doing everything you can to mitigate that risk.

It's one of the risks you take which should of been identified if your a competent business owner that wants to survive.

Keyword stuff is abusive, bolding all your keywords should rightly get you penalised. It's not far off the old days of stuffing the defunct meta keywords tag.

First point on googles webmaster guidelines says it all. Your chasing google, build a site for your users first, google will follow because it's in there interest to provide the most relevant content.

  Avoid tricks intended to improve search engine rankings.
  A good rule of thumb is whether you'd feel comfortable explaining what you've done to a website that competes with you, or to a Google employee.
  Another useful test is to ask, "Does this help my users? Would I do this if search engines didn't exist?

I can't deny negative SEO is a worry and yes whilst Google opened up the doors for it they also recognised it and have started providing ways to hopefully protect yourself. (Disavowing links etc)

If your in a competitive market where you have to worry about negative SEO so much so that it is making an impact on your SERPs then I'm sure the web spam team would be more than interested in hearing from you

I understand it's all algorithmic and there will be some truly innocent collateral damage involved but Google wouldn't be pushing this out if they didn't feel the overall quality of search would increase.

Most of the collateral damage is going to be people straddling the grey hat line and rightly so in my own opinion.

If matt says it's more substantial than penguin 1.0 then its going to have a big ripple effect, the last penguin update effected more than 10%+ of SERPS.

If your worried about this update then you haven't being doing "SEO" right.

Disallowing a link in robots.txt will not stop google from indexing the page. Google "reserve the right" to index the page if they see links going towards it to stop webmasters shooting themselves in the foot, they however won't fetch the page in accordance to robots.txt.

The recommended way is to allow google to crawl the page but explicitly "noindex" the page via the robots meta tag (or even the x-robots header) - http://support.google.com/webmasters/bin/answer.py?hl=en&...

Edit: Matt, explaining in a video: http://www.youtube.com/watch?v=KBdEwpRQRD0

My SEO 101 has always been "Build a technically sound website with good content and UX. Then talk about it."

Google will follow, you shouldn't be chasing them. They are in the business of providing the most relevant results, make it easy for them to crawl you and the rest will come over time with trust.

Instead of prefixing everything with {{ STATIC_URL }} in your templates, use the template tag {% static 'foo/bar/img' %} which will allow you to do asset time-stamping/versioning,

https://docs.djangoproject.com/en/dev/howto/static-files/#wi...

Edit: forgot to link to the versioning part in the docs: https://docs.djangoproject.com/en/dev/ref/contrib/staticfile...

Edit edit: ADMIN_MEDIA_PREFIX is also depreciated from 1.4 onwards: https://docs.djangoproject.com/en/1.4/releases/1.4/#django-c...

I have been brought up picking since I was in secondary school (Both Father and older Brother are locksmiths). It's very interesting stuff and once you see the in's and out's of peoples daily "security" you realise it's just about a game of not being the lowest common denominator. If a thief wants in, they aren't going to spend there time picking (or even bumping) they go straight for the snapper, or simply put the window through.

Apologies on the video music, you might want to turn it down but this is the first Video I come across of snapping a euro cylinder on youtube: http://www.youtube.com/watch?v=vVeij3jffCM

Does the official extension do everything you require? We have actually just released a magento extension for Stripe and were looking at porting it over to Paymill but after some research figured out they had an official open source once so we are trying to determine if it's still going to be worth the time investment.

We applied and simply got a rejection email with little to no explanation of why we got rejected which is disappointing. I'm going to try and open up communications with them again to see if we can reapply now that we are fully trading (unfortunately through paypal)

  The evaluation of new applications in order to accept credit card payments is subject
  to strict compliance rules and risk regulations in Germany. Our current acquiring 
  bank has declined your contract for some reasons with regard to their risk and compliance 
  management guidelines. We do not receive any detailed reasons from the bank.
  This is why we cannot give you a better explanation. Unfortunately, 
  Paymill does not have an influence on that decision.

Totally agree, international shipping just came out at $80~ dollars for me. It certainly killed my excitement pretty quickly but still went ahead with the order considering it was still less than £120 which is pretty much what I decided was my max limit.

I suppose it's half justified as pointed out in the FAQ/Forum the samples regular get stopped and fines levied because they think its hazardous

https://customercare.23andme.com/entries/21262316-do-you-tak...

The stigma is there because thats all I have experienced, now don't get me wrong I believe there are excellent individuals out there but unfortunately I have not clearly penetrated any of those circles of individuals. If anyone wants to show me the networks where I need to keep my foot in the door then thats going to be really helpful and go a long way into changing my views.

I suppose part of the problem is the low barrier to entry combined with the fact that it's the web (which is also there playground) so you see and hear more of the bad ones than you do good