gnyman

Have you checked StartSSL? They've worked fine for me.

I'm not in the field, but have friends who are. But from what I understand it, replicated experiments are not as highly regarded and does not get published in the same nice journals. Getting published in high ranking journals is very important if you want a career in research. Another thing you might miss is if somebody does a similar or the same experiment and comes to a negative result, reading that might save you a few days or months of unnecessary work.

In case you don't see any pictures, unblock "Optimizely". At least with the standard ghostery install it did not load any pictures before I allowed Optimizely.

do you have any ideas on the lifetime of 0.9 (and 1.0 if it'll be a drop in replacement)?

Another service which does a similar thing that's been around some time, I used them but the spam filter ate all my fake mail, as it should :-) https://phish5.com/

If you find this interesting, you will probably also like the PilotsEYE stuff http://pilotseye.tv/en/

They have some content on youtube https://www.youtube.com/watch?v=ENe89j89tBA&index=2&list=PL6...

Thanks I did not know, I believe I had it overclocked at the time. Very useful to know about if it starts happening more often.

Have you tried another power supply? I used a "high quality" one from RS (I think) and had odd problems with disk corruption and crashes when pushing the limits. I switched to a old iPad charger and the crashing problems went away.

I have only every seen the c99.php shell used by script kiddies which utilizes some well known php vulnerability and uploads this as the control point.

It would be cool if somebody wrote an automated script which would seek out these c99 and try to identify those which are used on hacked sites. It could then use this to get access and remove this script and fix the original exploit.

Using exploits to help people is of course a can or worms but I like the idea of good hackers helping everyone.

There are quite a few applications that do something similar, they leave a "disabled=1" or similar in the config to make sure people look at the config before trying to run the software. I remember the eggdrop IRC bot doing it (http://cvs.eggheads.org/viewvc/eggdrop1.6/eggdrop.conf?view=... , look for the lines starting with die) this and I'm sure there are more.

Does not NSA have access to multiple of the private keys of the preinstalled root certificates anyways? If so they can MITM any SSL connection where you don't specifically say which CA cert it should use?

Isn't it the case anyways that SSL is not very efficient against state sponsored attacks as almost all of them can generate certificates for any domain?

All this speaks towards it being a unfortunate mistake not something malicious, unless there is something wrong with my understanding how things work :-)

But transfering bitcoin is not instant and not free is it? Please correct me if I'm wrong but as far as I understood you will have to wait for your transaction to be included in a (few steps of the?) chain, and unless you pay a fee you might not get included for a while?

And is there not possible that in the future, if the amount of transaction increase as bitcoin becomes more popular, and the money you get from mining goes to zero, that transactions with fees will be the only ones accepted (at a reasonable rate)?

Another solution that we are happy with at least is http://www.issihosts.com/haveged/

Based on the HAVEGE research http://www.irisa.fr/caps/projects/hipsor/

Is the book available somewhere in epub/mobi format? Seems like even if you pay for it you get only a PDF?

Very nice, I am just missing some references to some of your claims, for example that 65-90 characters is the perfect width . I can of course google it and find it but I think it would still be good to include it on the site.

Thank you that was a great episode, the only thing I would have wished they showed more of was how they finally got the Lego structure to hold.

Looks super interesting, I had need for something similar a while back so I thought cool, let's try this out. But I am unable to find any sample code, is there any available? Can somebody point me in the right direction if so. I have not worked with ccv before so feels like a bit high learning curve without any samples.

Would be really cool if there were a rough guide on how the motorcycle tracking was done so that I could know in which end to start.

According to http://aws.amazon.com/glacier/ it seems like Amazon will be introducing this sometime in the future.

"In the coming months, Amazon Simple Storage Service (Amazon S3) plans to introduce an option that will allow you to seamlessly move data between Amazon S3 and Amazon Glacier using data lifecycle policies."

Actually it is a yes, they cannot decrypt your data as they do not keep your password around. You have to enter it every time you want to restore a file, and it is not saved on their side only used to get the files then thrown away again.

Of course, if you have so sensitive stuff that you cannot accept it ever being on another server in clear text then it still a no on that question.

I wonder how the big VPN service providers are going to react to this, as far as I know ipredator (http://ipredator.se/) uses only MSCAP-2.

Also, why is this news not on the top of "hacker-news", it really puts the usefulness of HN into question if news like these are buried somewhere :-(

thanks, I tried to double check that the url would work for everyone but did not think about the automatic redirect to local the local google

Yes but thanks to all these people who fiddle around with the bug reports I would say that after a while (a few months, half a year?) your laptop will work fine with Linux.

Just check a site like http://www.linux-on-laptops.com before buying and I believe you can actually get better bang for the buck by buying a cheap laptop will full linux support (even if the manufacturer does not officially support it).

I was just thinking about how many new releases there have been and how little new things have actually affected me or the servers I administer in any way. Of course, most of the added stuff are not part of the core kernel and I will probably never run the code but still?

The thing that got me on this track was thinking about all the systems that still run the 2.6.X kernels (and maybe even 2.4.X), how much, if any improvements would they get from upgrading to 3.5?

Surely the Linux-kernel must by now be the worlds most advanced and most bloated kernel? Then again, the kernel is not the thousands of high quality modules (which I guess could be called drivers) which allow you access to the hardware.

Anybody know how the central kernel (the parts that are on all hardware) has evolved speed/size-wise?

Also, is the drivers in linux of higher quality than the ones for example windows? I have gotten the impression that it is so.

The guardian has one but it is not very detailed, but I guess they will have the main points not all the details of the presentations.

http://www.guardian.co.uk/science/blog/2012/jul/04/higgs-bos...

It would be great to actually see these apps you talk about making no money so that we all could look at them and think about what went wrong with them.