13

Websites offering self hosted, static advertising isn't so much of a problem as random bits of javascript and tracking cookies loaded from god knows where every time you load a page. Harder to block, the advertiser needs to pass their content through the hoster which assures some level of quality and relevance, and some level of privacy for the end viewers.

You should fix that error message too, it's pretty awful.

Probably a lot of sources, depends how well connected you are.

The biggest one is just routing information and rDNS hosts which give away a lot of the information required anyway. If you were really thrifty you would make agreements with services (or use services you run yourself) that have users supply their location information and use that to construct a more granular database. I suspect this already happens to a degree, some of the fake information I give out has ended up in at least one IP address database.

I strongly considered doing this at one point but lacked the connections to pull it off properly (not enough sources of data I could get without approaching random people, basically). A secondary concept would just be to crowd source it and have the information freely available, but I was never sure how to deal with people poisoning the database or just honestly supplying conflicting information.

That's been fairly clear from the start. Almost anything actually useful needs an oracle, and then you get back to the problem of wait, didn't Bitcoin already solve this problem half a decade ago? Once you get past the marketing you've got a rather faulty and expensive clone of Bitcoin with a fairly sketchy history.

> DEFINITELY NOT FINANCIAL ADVICE: Personally, I think $2.80/0.01 XBT is low and I would not be in a rush to sell at this price. But, I do understand if you're bearish and you wanted to dump in to the bulls ahead of everyone else.

That's so financial advice, coming from the CEO of the Kraken exchange.

Money buys a lot of commits. Give me a few million dollars and we'll get together a group of people that will build an entire computer from discrete transistors. People involved and amount of work doesn't make something worthwhile, reasonable, or viable, it just means that people work for money.

I think you put far too much trust in one of thousands of clone VPN services. There's no reputation to taint, there's stock standard scripts running on commodity VPS boxes they rented from somewhere else. I would be shocked if at least some of the most commonly used ones weren't run by people looking to sniff credentials. You're paying to pipe all of your sensitive information through some random persons box, which is just ludicrous.

Just giving the benefit of the doubt here, a lot of the time it's unclear if your disclosure even made it to the right people in a company or not. No response is the norm for security disclosures, as is claims of "we didn't get this", even if you have a receipt for their ticketing system that says they did. I've sometimes spent far longer attempting to contact a company than doing research into something that seems to be a problem.

Why do you trust Amazon AWS and this company more than your own connection?

Why is their target 8 seconds to load the page? That's a ridiculously long time.

That's rich, coming from The Verge.

245 objects requested, 48 JavaScript files loaded, 9.8MB.

Why would it be corrupted? Just because it contains a malicious payload doesn't mean it has to be unviewable normally. Could even just tack onto all outgoing MMS by default and never raise anybodies suspicions.