Hacker Newsnew | past | comments | ask | show | jobs | submit | Father's commentslogin

Burying exploitation attempts in the logs with a flood of api requests?


Additionally you could also use something like fwknop[1]. It opens the ssh port for your ip when you need it and closes it after a preset time has passed.

[1]http://www.cipherdyne.org/fwknop/docs/faq.html#fwknop


I think it's dangerous to go on record beforehand claiming something is "bullshit". If I've learned anything over the last view days it's that reports like these should be taken seriously and no stone should be left unturned to find out the truth. We can't just assume intelligence operations can't; we need to know they can't. Let the House of Representatives proof it's nonsense. Also, thanks for adding the bit about CIOT.



All the organizations in question have a permanent smut on their record. The angle I'm missing in this discussion is that this is a business opportunity for something new and better. Acquiring new users for a search engine, social network, etc was damn near impossible because you couldn't compete with the resources, quality and brand. Now they have a flaw; privacy. Maybe the homogeneous landscape of the tech industry can get shaken up. Kim Dotcom is creating an anonymous email service and I'm curious to see what other alternatives for common tech pops into existence in the wake of this.

Changing a government will take a lot of time; but a business outside the reach of US legislation could pop up tomorrow.


As long as there is fragmentation then flash will not be obsolete. For example the lack of a common supported audio format or shader language in browsers to name two.


With ASM.JS and Native Client Unity can basically run their plugin without needing a plugin :) For the rest of the browsers there is still ASM.JS (which just runs slower on browsers not directly supporting it) or the native Unity Plugin. So for Unity Technologies, Flash is pretty much obsolete.


Unity can target many platforms, including Native Client, but it's my understanding that Unity can not target asm.js. Of course, asm.js is quite new…


not yet, like i said i am sure they are working on this as it should be easier as the flash deployment was.


> European merchants who want to take advantage of Braintree to accept online and mobile payments can now apply for an account online.

I feel this is a common misconception that accepting credit cards in Europe equals having a good online payment option in Europe. It just means you've half implemented a payment system in Europe since a lot of people here use Debit cards [1]. Besides that there are also other common payments solution like direct bank to bank online Giro systems for example iDeal in the Netherlands or Giropay in Germany.

[1] http://www.ecb.int/press/pr/date/2012/html/pr120910.en.html


In my experience this isn't true at all, at least if you target startups and SMB. We have a task management product which is used by many lifehackers around Europe, and we get requests about iDeal or Giropay only occasionally. We also have an intranet/wiki product which is sold to businesses in the 5-200 people range and everybody pays with a Credit Card no problem (OK, a few prefer wire transfer).

If you have a B2C company where you want to charge €10 or so then alternative payment methods may become an issue. But if you sell SaaS subscriptions for €50 or €200 a month a Credit Card is still the way to go, even in Europe.


I for one avoid using my debit car online and I know many others who do the same, so I've always assumed few people use them online.

While the extra protection offered on credit card purchases is not overly significant for the size of most purchases, it is more than nothing so worth having.

The stats you link to don't specify the marketplace sampled, but I suspect it covers physical outlets as well as online ones which will skew the figures for debit cards at least (unless my experience is not representative of the larger population).



Link removal requests can also be malicious. A blackhat seo will check his competitors domain to see if there's a spf record, if they're signing their mail, and if there's a catch-all (simply by checking if random mail is accepted). If there's neither they get a list of backlinks, from public web-crawls or sites like ahref, and request these links be taken down by sending mail with spoofed email addresses.


Bootstrap was actually build on code from ZURB http://news.ycombinator.com/item?id=4590315 The competition between the two frameworks just benefits the end user as they compete to out do one another.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: