starmilk

document.domain returns the current domain used in the document because no redirect occurred. Similar to if you typed it in your address bar right now, it should show you the HN domain.

It's commonly used as a placeholder in an alert-box XSS PoC. Weaponising this into an actual exploit could have been a fetch(), css inclusion, or enumerating localstorage.

What you generally feed into password cracking software is hashes of passwords that you've found by listening on the network, dumping from memory, or obtained by chaining another vulnerability.

These are in a text file locally (offline), so there is no system that you are submitting hashes to for verification. It simply tries md5(your_password_guess) until it computes the same hash that you supplied.

This is oversimplified and you can replace md5 with any hash alg that you need, but i hope it makes it clear that guesses don't happen against the auth server.

Yes, but I don't think that a use-case for this is to identify malware on your system. My understanding is that it is more so focused on disallowing trusted applications from sharing more data than you'd like, or phoning home [more often than you'd like].

*As always, a multi-faceted approach should be taken with security, and this isn't all you should be running if you're trying to defend yourself.

I also use Keepass[x]! The issue that I see people facing is that it isn't multi-device (it's an offline password manager). For me, that is the selling point though.

$0.02:

As an Australian, I do agree with you, but only looking at them from what government services are provided. In terms of the industry, I think health/fitness is possibly the largest in terms of misinformation because no one wants to do simple exercise and eat well, everyone is looking for a shortcut to get bigger or smaller.

So I don't think that they're specific to the American perspective in a larger sense, but I do also see where you are coming from. Then again, neither of us are American!

My bad! I read a biographical article on him and that was what was said. Sorry I can't edit it. :/

$0.02: I honestly feel that Google's CEO being Indian hastened the adoption. In India, Sundar Pichai is a celebrity. There are billboards, advertisements, and the whole country is cheering for him, a "local".

There is more to it than this (of course), but I think that the community view Google through the friendly face that is their CEO, while viewing Facebook as the big blue tech conglomerate which that have become.

Honestly, I've tried to switch to Atom in the past and I have found that it was slow.

Sublime has what I need and it's quicker to start. I don't need something that I can customise with CSS, I need a fast text editor with syntax-highlighting.

On a plus-note, I have just convinced myself to use Vim with the following options: set number, set mouse=a, set colorscheme evening and syntax enable

This is more along the lines of what I was thinking. As "we all know", security isn't security, it's merely a case of "how long do we have?". Pirates do go after the contents of ships, that's a fact. I have nothing to cite for the following, but I can't imagine that the pirates actually want people on board. To a business - unfortunately - people are replaceable for much less than what their cargo costs.

360 degree long-range turrets and sticking to international water seem like the best strategy they have here. :^)

How would they enforce security? Remember that pirates exist, would the savings on human captains be enough that they could sail around dangerous areas?

I know this is a planned concept, but surely security is a major concern. Can anyone with further shipping industry knowledge chime in?