wr
hn
Top
New
Best
Ask
Show
Jobs
Back
w
weld
Joined 17 years ago
Karma
305
Submissions
30
Member since
Jun 6
View on Hacker News
Recent submissions
Comment · 3 years ago
It can use another node that it knows about for hole punching. Some info here:
https://veilid.com/framework/networking/
Comment · 3 years ago
It was unanimous except for the person getting kicked out. The violations of rules or lack of effort was given ample warning to be corrected.
Comment · 3 years ago
He used spacerog
Comment · 3 years ago
My space in Cambridge is not on the list. It’s hastypastry.net. Been there for 20 years. It’s private so no need to advertise. I think it’s good to be on these lists so people know hacker spaces exist
Comment · 3 years ago
If you are in the Bay Area during RSA Conference, Space Rogue and me, Weld, are going to be fireside chatting and signing books at the W Hotel. Come get one and hang out!
https://info.veracode.com/rsa-2023-book-signing.html
Comment · 3 years ago
In the 90s the L0pht was not commercial and was funded as a hobby. Nearing 2000 we wanted to make it our day job and not a hobby and transition from to jobs we all had working for someone else. It was the beginning of my journey to entrepreneurship but this transition was very rocky. Manu didn’t survive. It was a huge learning experience documented in Space Rogue’s book.
Comment · 3 years ago
The L0pht had no leadership. Only partners that paid rent and utilities. You had to pay to cover your share of expenses but also contribute with sweat equity. We ended up kicking out a couple of people that ceased to contribute to the common good even if they paid.
Comment · 5 years ago
Hashcat can’t dump password hashes. L0phtcrack can and it has been a core feature for 20 years. I suppose a decent career is founding a security unicorn, Veracode. :)
Comment · 5 years ago
The idea behind the weak license protection was hackers could crack it but it would keep the govt and corps honest.
Comment · 6 years ago
In 1986 I was a developer for IBM's IBM PC support BBS. You could access knowledge base articles and patches. At that time we wanted to add graphics and were looking at adding NAPLPS support.
Comment · 6 years ago
The next evolution will be implanted direct optical nerve stimulation. Should I hold out?
Comment · 7 years ago
It won't be long till dissidents are using FT8. Audio is dead.
http://www.arrl.org/news/ft8-mode-is-latest-bright-shiny-obj...
Comment · 7 years ago
This would only seem to protect from memory corruption vulnerabilities that are exploited. I don't see how this would protect from the most common vulns: SQLi, command injection, crypto implementation weaknesses, OWASP top 10. Would this even protect against sensitive data leakage like the Heartbleed vuln?
Comment · 7 years ago
The paper -
https://hal.archives-ouvertes.fr/hal-02070778/document
Comment · 10 years ago
Great article! For those interested in security debt and how it relates to startups, I wrote this in 2011:
https://www.veracode.com/blog/2011/02/application-security-d...
and presented it that year:
https://www.youtube.com/watch?v=MKdiiXgvz_U
This predates by a year the referenced security debt presentation which has much of the same material uncited.