dfcmt

In this digital age, everything (text, images, audio) can be encoded using integers. Does that mean it's absurd to try to make anything secret?

\w\d{3}[\s\-]?\d{2}[\s\-]?\d{4}\w should not have many wrong results.

You can also try to guess is something is a list of SSNs from the context.

"A collection of awesome lists for hackers, pentesters & security researchers."

They are not using "hacker" in the "Hacker News" sense of the word, they are using meaning breaking into some system. So no "oh brother" moment here.

But they aren't transmitted over public wifi. They are transmitted inside of some kind of private network, given that they are transmitted to a server in the 192.168/24 range

>All extracted information is bundled as a ZIP file, without applying any protection like a password. The ZIP file is then sent via an HTTP POST request to http://192.168.43.1:8080/. This shows that not only no transport security (e.g. https://) is in place, but also that an internal IP address is used.

Unless they're expecting a MITM from the police network (or wherever they use this app) why is no https a problem?

>BXAQ uses the default icon for Android apps, which means there is no attempt at being covert or discreet about it.

...or maybe they didn't put an icon because it's optional and unnecessary for what essentially is an internal app.

I mean really they are not trying to be unbiased or anything about the analysis.

What's the vertical axis? What's BA?

7 deaths in 17 years is not routine.

People are being killed "routinely" for European football? That's simply ludicrous.

This reminds me of a story I read once of a guy who bought a 1000€ GPU from Amazon and got a 100€ GPU instead, obviously from a return. When he got to return it to get his 1000€ back, he was told that he had sent the wrong GPU, that it had been destroyed by them (like you would shred a sheet of paper) and asking for the right card to be sent to them.

Sounds like a shitty platitude but yeah, this is why I fear Amazon will eventually reconsider their returns policy.

That's what happens when you choose not to have a stable API for drivers. Maybe Linux developers should reconsider that ;-)

Hmm when I signed up for WhatsApp recently it clearly said that I would be accepting the terms of blabla Facebook companies, so...

It's in the interest of big corporations (like Google, Mozilla, and Microsoft) that making a browser is as complicated as possible so they face no competition.

C++ is also full of cruft. But you can use a subset of it and it becomes very good.

Also this new mantra of "speed doesn't matter" is what brought us to Windows 10, Electron, etc. No thanks. I'm taking a stand against slow software.

For me is the fact that PHP is starting to get more useful than Python. That coupled with the fact that it's faster (which doesn't take much, granted) is going to make me think some things over.

Well, that was his prerogative. I don't think it's the standard.

Only that Siri doesn't happen on the iPhone, and it's easy to prove: try using Siri with aeroplane mode on.