wtracz

https://github.com/nhsx/COVID-19-app-Android-BETA/blob/maste... appears to be looking for Apple devices to wake them back up.

There has always been speculation that there was a Phoenician connection to Cornwall, but not a lot of archeological evidence.

This stemmed from things like Cornish place names having an unusual number of z's (a Phoenician letter) in them, and other similarities.

Yes, I wrote it and it is intended as a demo only. I have not put in the finite field logic in that implementation. It shows the concepts though.

They can use Shamir's Secret Sharing to achieve this with no plaintext.

see http://willtracz.co.uk/shamir-secret-sharing-and-passwords

This was fun to find at the end of two days last week when a third-party system was trying to connect via SSL.

Java 8 is the first to allow above 1024-bit Diffie-Hellman parameter values.

It's more pervasive than just registration too if you allow the username to be adjusted. This is again a problem with email addresses that also allows leakage.

Regarding the probability of attack, people should monitor the number of different usernames attempted by a session/IP not just failed attempts against individual accounts. Otherwise it is very easy to try thousands of username combinations with a selected weak password.

This has already happened.

The Internet Watch Foundation already tell ISPs to block child pornography, and the court system can tell ISPs to block file-sharing/streaming sites.

It is a myth that the internet is uncensored in the UK at the moment.

Isn't this similar to Skimlinks i.e. you don't get paid by them until conversion?

The code to do this is on Github (at least for the UK): https://github.com/fubralimited/php-oara Affiliate network integration is not a technical challenge at all.

You'd be surprised at the level of data the affiliate networks make available to the people using them. Even if you are a small affiliate, purchase/basket level data is on offer.

Until the ICO start taking people to court it will stay ridiculous, but I think the intent of it is important. Using etags to track individuals is really no different to a cookie with a unique ID...

Having a 10 page complaint form is what is dumb. Why can't you just send a suspect URL, then have it scoured for dubious cookies?