wtracz

vor 6 Jahrendiscuss

https://github.com/nhsx/COVID-19-app-Android-BETA/blob/maste... appears to be looking for Apple devices to wake them back up.

wtracz

vor 7 Jahrendiscuss

There has always been speculation that there was a Phoenician connection to Cornwall, but not a lot of archeological evidence.

This stemmed from things like Cornish place names having an unusual number of z's (a Phoenician letter) in them, and other similarities.

wtracz

vor 10 Jahrendiscuss

Yes, I wrote it and it is intended as a demo only. I have not put in the finite field logic in that implementation. It shows the concepts though.

wtracz

vor 10 Jahrendiscuss

They can use Shamir's Secret Sharing to achieve this with no plaintext.

see http://willtracz.co.uk/shamir-secret-sharing-and-passwords

wtracz

vor 11 Jahrendiscuss

This was fun to find at the end of two days last week when a third-party system was trying to connect via SSL.

Java 8 is the first to allow above 1024-bit Diffie-Hellman parameter values.

wtracz

vor 12 Jahrendiscuss

It's more pervasive than just registration too if you allow the username to be adjusted. This is again a problem with email addresses that also allows leakage.

Regarding the probability of attack, people should monitor the number of different usernames attempted by a session/IP not just failed attempts against individual accounts. Otherwise it is very easy to try thousands of username combinations with a selected weak password.

wtracz

vor 13 Jahrendiscuss

This has already happened.

The Internet Watch Foundation already tell ISPs to block child pornography, and the court system can tell ISPs to block file-sharing/streaming sites.

It is a myth that the internet is uncensored in the UK at the moment.

wtracz

vor 14 Jahrendiscuss

Isn't this similar to Skimlinks i.e. you don't get paid by them until conversion?

wtracz

vor 14 Jahrendiscuss

The code to do this is on Github (at least for the UK): https://github.com/fubralimited/php-oara Affiliate network integration is not a technical challenge at all.

wtracz

vor 14 Jahrendiscuss

You'd be surprised at the level of data the affiliate networks make available to the people using them. Even if you are a small affiliate, purchase/basket level data is on offer.

wtracz

vor 14 Jahrendiscuss

Until the ICO start taking people to court it will stay ridiculous, but I think the intent of it is important. Using etags to track individuals is really no different to a cookie with a unique ID...

Having a 10 page complaint form is what is dumb. Why can't you just send a suspect URL, then have it scoured for dubious cookies?

Submissions

YouGov Profiler

Shamir's Secret Sharing & Password Challenges

Using Quadtrees for Image Replacements in Email

comments