Re: [funsec] Google's Shared Endorsements

2013-10-15 Thread Charlie Derr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/15/2013 02:52 PM, Dani→l W. Crompton wrote: I had the checkbox unchecked too and assumed that it was because I'm in the EU were an opt-in is mandatory. Isn't the same true in CA? D. Hi Dani→l, I'm curious how the URL (that Rob

Re: [funsec] While we're all trying to fix politics, economics, etc.

2013-02-05 Thread Charlie Derr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/05/2013 01:20 PM, valdis.kletni...@vt.edu wrote: On Tue, 05 Feb 2013 12:49:44 -0500, Rich Kulawiec said: I have a question. Please to consider the following candidate password: S.3-t=2ga+Zilg59CEkp4 I'm curious as to how y'all would

Re: [funsec] mac trojan

2012-04-05 Thread Charlie Derr
On 04/05/2012 10:30 AM, RandallM wrote: can someone tell me what effects there are to being infected with flashback? signs? google search just brings up the same same news stories. also, if one is.. it seems there are some files that cannot be recovered so new install necessary? No personal

Re: [funsec] What was that about hubris?

2009-09-30 Thread charlie derr
Alex Eckelberry wrote: Macs rock. It's hard to say bad things about them, snippage Maybe so, but I love a challenge, so please let me try :-] DRM is the scourge of the earth and it's so embedded into the OS (with all kinds of shady marketing to try to make itunes as ubiquitous as possible)

Re: [funsec] first fallacy of Internet solutions

2009-07-23 Thread charlie derr
Gadi Evron wrote: First fallacy of Internet solutions: getting everyone (or many) on the Internet to agree to, or implement, something. Second? Sure, I'll second that. Are we voting or something now? ~c ___ Fun and Misc security

Re: [funsec] Invention of the Year

2008-12-19 Thread charlie derr
Les Bell wrote: Here's a new browser that combines three different HTML rendering engines (Gecko, Webkit and Trident) and has the ability to switch to the optimal engine automatically. See http://www.lunascape.tv/ for details, but I'm not game to download and install something that has all the

Re: [funsec] link from http page to https page

2008-07-27 Thread charlie derr
Larry Seltzer wrote: I’ve been reading a paper (http://cups.cs.cmu.edu/soups/2008/proceedings/p117Falk.pdf) on vulnerabilities in financial web sites presented last week at Carnegie Mellon and I’m curious about a statement in it: “/Under no circumstance should an insecure page make a