Messages - SeraphimLabs [ switch to compact view ]

Pages: prev1 ... 5 6 7 8 9 [10] 11 12 13 14 15 ... 65next
46
I see you learned a few things about how websites work Tao.  Lot of people don't realize just how much info you can pick out of someone's web setup just by poking around at information that is already public in order to make everything run smoothly.

There's a good chance that the hack site went down because supporters of the original site are upset about what happened and either attacked it directly to try and kill it, or because you literally saw the transition taking place and they didn't do it right- it resulted in a period where the DNS was pointed to an IP that no longer had a server under it.

This whole situation is downright sad, and just a solid reminder that there are some really bad people out there.

47
Living Room / Re: Can anyone help break "router block"?
« on: January 05, 2015, 11:56 AM »
I'd recommend the Netgear WNDR3700v4 (Make sure the package identifies it as a v4) or the Netgear WNDR4300.

You reflash these to OpenWRT, and then you have a surprisingly powerful and capable router which offers complete control of what network configuration you wnat to have. I've got one at home for my own use, and 2 of them at work all configured like this solid as a rock.

Changing from the factory firmware to OpenWRT on those two models is only different from a normal firmware upgrade in that you have to do a couple extra power cycle steps afterward.

Even on the factory firmware those two models are based on some downright powerful hardware among consumer-grade routers, having 128MB of ram in them where most routers only have 16-32MB. Having the extra ram makes it a lot less likely to grind to a crawl under high traffic, and also gives it the capability to run advanced configurations like what you need.

Tomato is also a decent alternative to the factory firmware, but I've heard from quite a few people that it has become weak in development and isn't as reliably supported. There are a number of forks of Tomato that are kept up to date by other groups.

DD-WRT on the other hand has gone quite far downhill, between the move to 'premium features' and poor management practices. I would not recommend it unless you have an older device that can use the older versions of it from when it was progressing well.

Most of the builtin firmware offers very restrictive controls, or even none at all. You'd get a lot better value using OpenWRT on a decent quality hardware.

As for brands, Netgear is usually decent while D-link is quite good when you can find it. Linksys has a handful of good units in a flood of junk, and Belkin has never made a good product outside of USB adapters and cables.

48
A secret is safe with three, if two are dead. This is the only thing that struck me regarding the Sony/Email fiasco.

The message format/fact that it was an Email is IMO irrelevant. Because... If there exists a document, that contains damning/damaging information - that you have within your power the option of destroying with impunity - what the hell did you save it for?!?

This to me is a people problem.

Its also a legal problem. Strictly speaking you are required by law to keep record somewhere somehow of all company internal written communications as much as is practical. At least in my understanding of business law anyway- I've seen quite a few cases where the courts order a company to present such.

Thus they were legally obligated to keep that information on record becase on the off chance they got investigated, it could be held as evidence in the courtroom and whoever was involved would be effectively screwed by the discovery of its contents.

All that happened here was that a hacker simply did without proper warrants what a courtroom could order if it suspected illegal activity happening under Sony's roof.

Even if it had been a message carried over the bitcoin blockchain, a hacker could have compromised the private key of an endpoint and still leaked that same message.

Just the nature of the beast- if it is connected to the internet, it is with certainty hackable.

49
Text messaging is just as insecure though, and ultimately no communications of that type is ever going to be secure because you can always compromise the device or compromise the server processing that information in order to see it anyway.

Probably the only thing I've seen out there remotely close to being secure and of similar functionality to email is in fact bitcoin, which allows you to attach a text message to a transaction that is encrypted as it is carried by the blockchain and is only viewable by the intended recipient.

But people are already worried about blockchain bloat, if you attached email's traffic volume to the blockchain the storage requirements would increase exponentially.

50
German bureaucracy is pragmatic - and ironic, but honest with it:
German Government Refuses FOI Request By Pointing Out Document Already Leaked | Techdirt
(Copied below sans embedded hyperlinks/images.)
rom the well-played dept

Freedom of information requests are a powerful way of finding out things that governments would rather not reveal. As a result, requests are often refused on a variety of grounds, some more ridiculous than others. The Netzpolitik blog points us to a rather unusual case concerning a request by the politician Malte Spitz for a letter from the Chief of Staff of the German Chancellery to members of a commission investigating intelligence matters. The request was refused on the grounds that the document was already freely available (original in German):
    The information you requested may be obtained free of charge on the Internet by anyone, in a reasonable manner. The letter from the Chief of the Federal Chancellery, Federal Minister Peter Altmaier, to the chairman of the first committee of inquiry of the 18th legislature, Professor Dr. Sensburg, is publicly available and published in full at the following link:

    https://netzpolitik.org/2014/drohung-des-bundeskanzleramtes-wir-veroeffentlichen-den-brief-in-dem-uns-altmaier-mit-strafanzeige-droht/

The Netzpolitik link included there leads to an article that a few weeks earlier had not only leaked the document requested by Spitz, but also noted wryly that the letter from Altmaier threatens anyone leaking documents with legal action.
The German bureaucracy should be applauded for taking the adult view that once a document is leaked, it is publicly -- and officially -- available. This contrasts with the childish attempts by the British government to pretend that Snowden's leaks never happened, and its refusal even to pronounce the name of some of the surveillance programs he revealed.

Follow me @glynmoody on Twitter or identi.ca, and +glynmoody on Google+

I have to disagree with their refusal to comply on the grounds that it already leaked. This becomes a means of defeating freedom of information requests.

To exploit this, they accidentally on purpose leak a fake version of the document that is either censored or contains a different message than the actual message being requested.

Compliance should be required anyway as per the law, and since it already apparently leaked they should have no problems in doing so because people already know what it should say.

Pages: prev1 ... 5 6 7 8 9 [10] 11 12 13 14 15 ... 65next
Go to full version