Hacker News: shif

New comment by shif in "Google DeepMind's first deal with the NHS was illegal, UK data regulator rules"

shif — Mon, 03 Jul 2017 18:21:18 +0000

Can't they fine the strawberrynet blatant disregard for privacy?, It's based on the UK, you can access personal information of anyone registered in the site with only their email address and they say It's not a big deal.

New comment by shif in "By installing NAT, MIT stifles innovation"

shif — Mon, 26 Jun 2017 17:55:29 +0000

But you can, a simple reverse proxy can let the same port be used for multiple servers and pick based on hostname or query (for http).

reverse proxies like nginx also have plain tcp support so it allows you to easily run several services

New comment by shif in "By installing NAT, MIT stifles innovation"

shif — Mon, 26 Jun 2017 17:51:16 +0000

That's the blogger platform

New comment by shif in "Verelox Wiped by Ex-Admin"

shif — Fri, 09 Jun 2017 22:03:57 +0000

What if one of the people that has part of the key gets mad and leaves without sharing it?

New comment by shif in "Verelox Wiped by Ex-Admin"

shif — Fri, 09 Jun 2017 22:00:10 +0000

An ex admin would probably have access to the physical backups too, this could have been done before he left the company.

New comment by shif in "Wikipedia’s Switch to HTTPS Has Successfully Fought Government Censorship"

shif — Tue, 30 May 2017 14:51:23 +0000

The government could force pc manufacturers to deploy a root CA that they control and then do a MITM proxy to read everything the user is doing, they could also redirect wikipedia domain to another domain that just acts as a reverse proxy and deploy a legit cert on that other site

New comment by shif in "Ask HN: Google Doc email virus?"

shif — Wed, 03 May 2017 22:50:40 +0000

It's sophisticated because of it's simplicity and effectiveness.

New comment by shif in "Getting Started with Headless Chrome"

shif — Tue, 02 May 2017 15:16:44 +0000

It's headless so most likely yes.

New comment by shif in "“Users will only be able to view patents via HTTP. HTTPS will no longer work”"

shif — Sat, 22 Apr 2017 18:56:59 +0000

https://www.cvedetails.com/product/2387/Drupal-Drupal.html?v...

New comment by shif in "“Users will only be able to view patents via HTTP. HTTPS will no longer work”"

shif — Sat, 22 Apr 2017 18:48:50 +0000

HTTPS isn't bulletproof either, the argument could still be made with TLS

New comment by shif in "“Users will only be able to view patents via HTTP. HTTPS will no longer work”"

shif — Sat, 22 Apr 2017 18:46:47 +0000

chrome://net-internals/#hsts

doesn't seem to show anything for the domain

New comment by shif in "“Users will only be able to view patents via HTTP. HTTPS will no longer work”"

shif — Sat, 22 Apr 2017 18:44:19 +0000

That's regressive as fuck, it's like saying that cars will no longer be allowed, only horse carriages

New comment by shif in "What Happens When You Send a Zero-Day to a Bank?"

shif — Fri, 21 Apr 2017 18:29:28 +0000

Ctrl + Shift + J

in chrome

New comment by shif in "Next Generation MITnet"

shif — Thu, 20 Apr 2017 15:41:08 +0000

You should see the other companies that hold /8's apple for example owns 17.0.0.0/8 and barely uses any of their 16 million addresses

New comment by shif in "Phishing with Unicode Domains"

shif — Mon, 17 Apr 2017 15:06:21 +0000

I wonder how the domain displays on email clients like gmail and outlook, this is the scariest part, most people will just look at the domain and think it's a valid mail and follow the instructions of that mail, it could be catastrophic for companies, the ubiquity $40 million fiasco comes to mind.