jmediast

heh, the devs were telling me about an issue they solved with caching, sounds like a side-effect

Looks nice!

I'd like to see a feature where I give it a budget, maybe a temperature preference, and it books me a random trip.

jmediast

14 anni fadiscuss

I'm not sure I'd worry about that... if the proposed laws were worse, then I think you'd see another SOPA/PIPA style reaction.

And then you have to consider the chances that a response from the administration will actually start an investigation / reformation.

For better or worse though, I guess I'm willing to see where it goes.

jmediast

14 anni fadiscuss

If it's anything like ours, they don't like to touch systems that 'work'... They don't have the resources to audit, update, and re-train everyone to use the current version.

Then there are the students hired to build internal tools who wouldn't know SHA1 from Bcrypt/Scrypt...

jmediast

14 anni fadiscuss

It's not my dump, so I can't say. I've only been able to verify the university of michigan data is real.

Doesn't look like anything too critical was hit though.

jmediast

14 anni fadiscuss

It seems like they "fixed" people being able to read the passwords by replacing the the form value with __USE_EXISTING__...

It's still trivial to automate account takeover though. Here's a PoC to take over pandora accounts on your network using MITMProxy and Tornado: https://github.com/JackWink/Pandora-Account-Takeover-Tool

jmediast

14 anni fadiscuss

Thoughts? https://news.ycombinator.com/item?id=3798597

jmediast

14 anni fadiscuss

Facebook banned the app when the point was to hack another account.

They put the app back up under a new name / context to comply and demo the app.

jmediast

14 anni fadiscuss

I'll check that out after work today. I was hoping I wouldn't have to ditch CM to get ICS

jmediast

14 anni fadiscuss

Running an older CM7 build on my evo4g, vulnerable to ZurgRush :(

Submissions

DDoS Attack on Bank Hid $900,000 Cyberheist

Petition to reform the Computer Fraud and Abuse Act

The Twelve-Factor App

If only a president sounded like this

Hacking your way to hipster

Leak of Multiple University Databases

How to Talk to Engineers: A Guide for Idea People

Show HN: Pandora Account Takeover Tool

Dark Patterns in Domino's Order Online Service

Photobombing Google Streetview

Formspring Hacked

Kexec, and a Proof-of-Concept Source-Built Kernel for the Verizon SGS3

Children warned name of first pet should contain 8 characters and a digit

Audio Assist: Future of Windows Debugging

Ask HN: Does Pandora Store Plaintext passwords?

Are emails bad for startups?

Public Key Cryptography: Diffie-Hellman Key Exchange

Ask HN: Why does https break blackberry.com?

comments