Hacker News Reader

jmediaston Show HN: Nowcation - find spontaneous travel deals

heh, the devs were telling me about an issue they solved with caching, sounds like a side-effect

jmediaston Show HN: Nowcation - find spontaneous travel deals

Looks nice!

I'd like to see a feature where I give it a budget, maybe a temperature preference, and it books me a random trip.

jmediaston Petition to reform the Computer Fraud and Abuse Act

I'm not sure I'd worry about that... if the proposed laws were worse, then I think you'd see another SOPA/PIPA style reaction.

And then you have to consider the chances that a response from the administration will actually start an investigation / reformation.

For better or worse though, I guess I'm willing to see where it goes.

jmediaston Leak of Multiple University Databases

If it's anything like ours, they don't like to touch systems that 'work'... They don't have the resources to audit, update, and re-train everyone to use the current version.

Then there are the students hired to build internal tools who wouldn't know SHA1 from Bcrypt/Scrypt...

jmediaston Leak of Multiple University Databases

It's not my dump, so I can't say. I've only been able to verify the university of michigan data is real.

Doesn't look like anything too critical was hit though.

jmediaston Pandora doesn't hash their passwords

It seems like they "fixed" people being able to read the passwords by replacing the the form value with __USE_EXISTING__...

It's still trivial to automate account takeover though. Here's a PoC to take over pandora accounts on your network using MITMProxy and Tornado: https://github.com/JackWink/Pandora-Account-Takeover-Tool

jmediaston Pandora doesn't hash their passwords

Thoughts? https://news.ycombinator.com/item?id=3798597

jmediaston Site Lets You Simulate a Facebook Hack, Goes Viral at PennApps

Facebook banned the app when the point was to hack another account.

They put the app back up under a new name / context to comply and demo the app.

jmediaston X-Ray scans your Android device for unpatched vulnerabilities

I'll check that out after work today. I was hoping I wouldn't have to ditch CM to get ICS

jmediaston X-Ray scans your Android device for unpatched vulnerabilities

Running an older CM7 build on my evo4g, vulnerable to ZurgRush :(

jmediaston Ask HN: Hacker looking for Ann Arbor Housing

Yeah, but I'd rather end up with someone with a shared tech interest. I'm not saying that it's not possible with Craigslist, but definitely more likely via HN.

Thanks for the padmapper suggestion! I'll give that a shot next.