Hacker News Reader

MrCleanon Personal Digital Security [47:03]

Abstract: “You are one of the most significant security threats to your company. We all know we are going to fix better passwords / encryption / firewalls / etc. one day. Getting properly hacked is one of those things that is a lot more comfortable to prevent beforehand than to gather the shattered pieces afterwards. In this talk, we will take a practical approach to good personal digital security. We will start with the easy parts before drilling through the layers of security, down to the parts that are unpredictable and dangerous. Bring your laptop and a tin foil hat.”

Topics include: What it's like to get properly hacked. Using password managers. Operating system security. Browser security. Encryption, firewalls, factors, and other means of protection.

Presented at JavaZone 2016, Oslo, Norway. Would love some feedback here in HN comments! Hope you learn something.

@JohansenMichael

MrCleanon One Professional Russian Troll Tells All

Patiently waiting for villain troll, link troll and picture troll to work this thread.

MrCleanon Volvo’s first self-driving cars now being tested live on public roads in Sweden

“The test cars are now able to handle lane following, speed adaption, and merging traffic all by themselves,”

This is an important step, although I must say they appear to be far behind Google. My money is on Google getting to an acceptable deployment phase far earlier.

MrCleanon How to exploit home routers for anonymity

Ah. Great. Anonymity in the identity-theft way.

MrCleanon Low-level is easy

As a young web engineer who have had the pleasure of dealing with what seems like 30 different versions of RSS-feeds, which also appear to be evolving in random directions like living things, I can confirm this. (I've also messed around in C, and even Assembly at one point.)

MrCleanon Gmail blows up e-mail marketing by caching all images on Google servers

Consider this @codeflo:

1. Google may cache all images in all emails sent to gmail.com instantly and regardless of the existence of the address. This would remove the possibility for marketers to check user timestamp, remove user data from request and hide user email existence.

2. Google does _not_ need to save each image from each unique URL separately, all they need to do is fetch each image and check against an already existing (mega)array of images they've fetched. This greatly reduces storage needed, but doesn't do much for the bandwidth requirement, but they won't care about bandwidth in all their Googleness.

3. The single most important aspect of this change has been omitted in the article, and in your comment: This change completely eliminates the risk of CSRF attacks by spammers and the likes. CSRF attacks are still number 8 on OWASPs list of top 10 attacks.

My three cents ;)