45h34jh53k4j

its more expensive than ever. i refuse to tip via uber (of course I get downvoted by the driver due to tip extortion). Screw uber!

Its time to pay people a living wage, and stop the tipping culture. I hate carrying cash, and It bothers me that I have to carry $1 bills for the tipping extortion.

Im resentful that I have to pay for things as well as bribe the workers. Its disgusting.

your work security team loves mr robot, it will be fine...

No and by design. Global trade is global, man.

The thing everyone is missing is that you CANNOT do $1 credit card payment at scale. Patreon has been taking a hit for every single dollar pledge made. They dont want your $1, it costs them too much!

Patreon decided that they were SICK of supplementing all the $1 pledges, and added a new fee schedule. The internet, was too short sighted to care about this economic reality, and so they were forced to burn with fees once more.

Congratulations on the release David; I will be watching this one closely!

No this doesn't apply because David is a cryptographer. Clue. He is exactly the kind of cat I want to be writing crypto.

Except for the pathological example of Bitfinex (another story), every $1 of coin sold is backed by the $1 that a depositor has made. There cannot be a 'bank run' like you describe unless the exchange is running a fractional fiat reserve. This is not the case is which you describe. If there a massive withdrawal of billions from coinbase, it means that there is a massive deposit of billion TO coinbase to make the trade. In the case of bitfinex, they appear to be doing peer to peer bank transfers to get round their own banking problems. (ie: you want 10m out, i want 10m in, we trade A->B, rather than through the exchange as a middle man).

You simply cannot sell it if there is no buyer to take it. You never 'sell' to coinbase -- this is a front for GDAX, their exchange. Every buy is taken from a seller on their market. The money is exchanged between you and their account, and they take fees.

Preston has been wrong about cryptocurrency for 5 years now. I do wonder if he will ever 'get it'.

Mr Burns is a very successful man!

GP Quote from: http://simpsons.wikia.com/wiki/The_Old_Man_and_the_Lisa/Quot...

and js. eventually!

I'll keep it short and sweet. Family, religion, friendship. These are the three demons you must slay if you wish to succeed in business. When opportunity knocks, you don't want to be driving to a maternity hospital or sitting in some phony-baloney church. Or synagogue.

I just dont get Cheerios. The regular ones are flavourless cardboard and the honey nut one are so full of sugar. Why do people buy this junk?

They moved from a CVS/SVN repo to git. The history from this old repo is missing, but the (leaked) git repo is recent.

Author:User#142 Date: Fri Oct 30 09:58:22 2015 EDT User's Guide date corrections.

Hi chronic,

We now know that all comms implant to C2 are TLS with a unique (fake) certificate tree. They use unique, single use domains for operations. I don't believe there was enough information in vault 7 to identify IOC's that could be used for behavioural analysis. We also now know that the C2 fronting servers negotiate 'Client Cert optional', which is a fairly unique configuration item.

The git repo contains 3 binary builds of the client/server malware. I think this is more important for detection than their docs.

Regardless, its all public domain now.

.cx? (Christmas Island), which is a Australian territory? Maybe your right. I think .io is especially egregious because of history of Chagossian people.

What? The people, known as Îlois or Chagos Islanders, could well have had .io as this represents the native name of their land.

This is the source code (and several binary compiles) of the CIA C2 infrastructure + client implants for Solaris, Linux and various routers. I suspect that now this is in the open, past and current CIA malware will now be detectable by commercial Anti Virus.

Repo is from 2015. Its not that old.

Its far more than this, the original inhabitants of .io were forcibly removed from these islands by the UK in the 60s. The whole situation with a UK company running this TLD is just the icing on the cake.

gigaom.com/2014/06/30/the-dark-side-of-io-how-the-u-k-is-making-web-domain-profits-from-a-shady-cold-war-land-deal/

.io represents the suppression of the Chagossian people. https://en.wikipedia.org/wiki/Chagossians English imperialism at its best.

Do not use this unethical TLD: https://gigaom.com/2014/06/30/the-dark-side-of-io-how-the-u-...

Slight correction, Ethereum may do PoS in future, it currently does not, it is a PoW CryptoCurrency like bitcoin. Because of the state of miners ETH right now, I suspect it may take a long time to migrate, with several contentious forks. I suspect bitcoin will always be PoW.

I dont think its fair to say a code review would have fixed this -- its an operational bug. They failed to initialise the library (ie: assigning ownership) after deploying it.

Last time the smart contract let anyone initialise it (which was a code problem).

Either way its pretty much the end of Parity. I bet those PolkaDot investors are going to be mad when their tokens are worthless!

What is a vuln name, other than a binding of a CVE to a real word to make it easier to reference or promote.

It draws public attention to an issue better than any CVE-2017-XXXXX would do.

No, keep it up. Dictionary words are far easier to remember than specific numbers.

A world where an offline, encrypted data file offers exactly the same security level as an offline, encrypted memory cell.

You invoke side channels -- what about these side channels: https://jochen-hoenicke.de/trezor-power-analysis/

What is this? it wants an email address without saying what it is.

Have we forgotten that people actually want to know what things are these days? Oh just hand over your data suckers, it doesnt matter what its for, we just want your essence.

Go away!

I ran an outgoing firewall on ios from about ios5 to ios8 (FirewallIP -- jb only). I lament every day since ios9 (and not jailbreaking) about its loss. Its a killer feature that apple should implement.

Many apps connects back frequently -- sometimes every action I take. Enough!

I watched Michael present one of the most engaging and exciting talks at HOPE11 in NYC last year. On stage, he proceeded to make Deraprim (The pharma bro's jacked up price anti-toxiplasmosis drug) live on stage and then throw it in the audience. He then called Martin live and said he was his arch rival. Brilliant!

Michael you are a legend and hero for our new dystopian pharma world.

Its a real solution, for YOU personally. I use and love umatrix (whitelisting ALL js/content by hand on all domains).

We need to consider the good of the many, and client side solutions like umatrix are not a solution for the many.

This is a world where internet banking and healthcare, arguably the canonical 'highly-sensitive applications', are using 3rd party js services like this. I think we need to redefine 'reasonable' as the industry clearly isn't acting reasonably (IMHO).