dkopi

Joined 12 years ago

Karma
2,085
Submissions
356
Member since
Oct 31
Software engineer, Security researcher and entrepreneur.
View on Hacker News

Recent submissions

Comment · 10 years ago
Not really. Every country that has weapons development also has export controls.

It isn't about believing your government is moral or good. Its about understanding that your government is responsible for the safety of citizens, and that your enemies will want to kill you (or at least kill your soldiers).

Comment · 10 years ago
Not really. Military grade weapons are a big deal. They're used to kill people.

Export controls are there to prevent killing machines getting in the hands of a countries enemies (or potential enemies in the future)

Comment · 10 years ago
If you support export controls for security reasons, this is kind of inevitable.

The government shouldn't be forced to buy any type of military technology someone creates. But even if the government won't buy your tech, it still can be dangerous in the hands of other countries.

One could argue that if the government is preventing you from selling your tech abroad - there should be some sort of compensation for this. Others could argue that's just the cost of being in the business of weapons manufacturing.

Comment · 10 years ago
There's nothing unlibertarian about a private business making up its own terms of services and privately enforcing them. That's exactly how the free market self regulates without the use of force.
Comment · 10 years ago
Twitter isn't sinking. It just isn't ascending as fast as investors would like to ensure hyper growth.

While its always great for your career to be in a company that's constantly growing - sometimes being that person that can help the company do a lot more with less resources is even better for your career. When everyone's jumping ship - the people who choose to stay on-board can often be very rewarded as far as their career growth goes.

Comment · 10 years ago
Not sure DDOS clauses are that unreasonable. Especially when attackers might be targeting your DNS server, even though you're the target.
Comment · 10 years ago
This often happens when I'm travelling internationally. If I plan on buying a local sim card instead of purchasing a roaming plan - I might not have access to my SMS until I get back home.
Comment · 10 years ago
Great point. "correct horse battery staple" wouldn't be vulnerable to such an attack.
Comment · 10 years ago
Mistakes were made, and there are definitely lessons to be learned, but if we want to improve the state of security, we really need to change the way we react to these types of bugs.

If a service has an outage and a company posts a postmortem, we all think: "wow! that was an interesting bug, lets learn from this". We shouldn't be treating security issues differently.

People who make security mistakes aren't idiots. They aren't negligent. They're engineers just like us, who have tight deadlines, blindspots and mistakes. Shaming people and companies for security bugs will only cause less transparency and less sharing of information - making us all less secure.

This is a really cool bug. Kudos to the researcher for finding it, responsibly reporting it, and to paypal for fixing it in a timely fashion. Hopefully - this type of bug changes some internal processes and the way the company thinks about 2FA.

As for security questions - these are obviously insecure, and should really never be relied on. If you can opt out of security questions - do so. If you can't - just generate a random password as the answer. "I_ty/:QWuCllV?'6ILs`O12kl;d0-`1" is an excellent name for your first dog / high school. Just don't forget to use a password manager to store these.

Comment · 10 years ago
More likely along the lines of

  if ((isset($_POST["SecurityQuestion0"]) && $_POST["SecurityQuestion0"] != $answer0) || 
  (isset($_POST["SecurityQuestion1"]) && $_POST["SecurityQuestion1"] != $answer1)
Comment · 10 years ago
If you're breaking your contract, that's something to be enforced by your landlord and the courts. Not something you need special laws to forbid.
Comment · 10 years ago
Based on the "you can still rent a bedroom" comments, I'm guessing the people commenting here are single and definitely don't have kids.
Comment · 10 years ago
Is it really a Chicken and egg situation? SF prices in the last years have skyrocketed, through out the city. The financial incentive to build is there. But there isn't massive building of new housing. That isn't because of the lack of subways. It's because of zoning laws and building regulations.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton