Viewing profile — ohithereyou

Shitposting and its consequences have been a disaster for Intenet discourse.

If COVID-19 digs in deep in the US then there is going to be a transformational change in how US citizens think about work, travel, entertainment, security, and the relationship be…

Isn't it the aspirational goal for several churches/religious orders to do just this?

It really does. There are two things that fit together for me: First, access - I can think of twelve bars within walking distance of my apartment, four of which are on the same blo…

Why would they add that when they can just sell you a remaster for the price of a new game?

Speaking from experience (856 days sober, had my last drink a year after moving to Milwaukee), Milwaukee is a hell of a town for an alcoholic. One of my favorite coffee shops is ri…

If you're going to treat investigative reporting and news gathering as a profit making venture then you can only charge what the market is willing to pay, and for the vast majority…

Think of the poor buggy whip makers! Not every desirable activity in life is profitable. If your business plan is "make website -> get money" then perhaps you're in the wrong busin…

A site that renders completely blank without JavaScript is a site that I don't enable JavaScript for. They don't want me to view it, and nine times out of ten I can find the inform…

Margaret Sanger unapologetically supported eugenics and sterilizing 'inferior' people. Does that make Planned Parenthood a bad idea?

GOG games are DRM free and typically show up on torrent sites immediately after release, so anybody who wants to pirate the game won't bother to go through the buy->download->refun…

Terminal middleware already exists - screen and tmux seem to be the most popular here.

Wait, does anybody actually believe any major sport doesn't look the other way when the right team cheats assuming it gets more butts in seats? Major sports aren't about the purity…

What sort of encryption and authentication can I expect if I do that? Can anybody who guesses the port dump code into my running Lisp instance?

Legitimately interested in your explanation as to how this specific research would be a crime absent contact with HackerOne. Please cite statute. I'm not saying you're wrong - simp…

"Dark web" for things that are not relevant to Five Eyes and NSA when they are relevant. At least in those cases, with good opsec for the "dark web", you can be reasonably sure the…

That sounds like it's a payout lottery. H1 can't force its customers to pay. It's acting as a go-between on behalf of its customer, the company offering the bounty, not as an neute…

> not let your anger cause you to do something stupid Note: I didn't say that I would do this for every company. Just ones that use HackerOne. They have decided to abdicate their r…

Are there other cases where PCI-DSS compliance requirements are selectively enforced?

All the more reason to not submit bugs like this to HackerOne. If you can bypass 2FA by having only one factor then I wouldn't consider that 'stolen credentials' and more a singula…

The market for a freelance security researcher out there is hard, no doubt, but disclosing bugs publically is an addition to your resume, akin to any other professional development…

I've seen several stories about how HackerOne doesn't pay out bug bounties when bugs are reported. I, for one, wouldn't submit bugs/PoC to them, and I would actively, publically, a…

What sort of development do you do on the PowerBook?