21–30 of 35 posts
Earlier quoted context omitted.
Didn't Facebook fell for it too?
No. Never.
https://krebsonsecurity.com/2019/03/facebook-stored-hundreds...
https://www.theverge.com/2019/3/21/18275837/facebook-plain-t...
https://arstechnica.com/information-technology/2019/03/faceb...
https://www.wired.com/story/facebook-passwords-plaintext-cha...
Given the fair assumption that any piece of data you give to a third party system that has access to the internet will eventually be breached, I feel like we need an entirely new system for data sharing. The problem with most of these hacks isn't usually so much that the hacked system itself has lots of valuable data, but that the data from the hacked system can be used to hack into other systems that do have valuabl…
Given the fair assumption that any piece of data you give to a third party system that has access to the internet will eventually be breached, I feel like we need an entirely new system for data sharing. The problem with most of these hacks isn't usually so much that the hacked system itself has lots of valuable data, but that the data from the hacked system can be used to hack into other systems that do have valuabl…
Forget calculating shipping; how do you ship me my product at all without me giving you my address?
(A quick napkin sketch would be that I wouldn't, I'd give you a USPS reference number, which you could use to calculate shipping costs as well as actually mail me a thing; only the USPS would be able to link the reference number to my physical location. There's almost certainly problems with this idea, which is why it's a napkin sketch.)
Reminds me of something similar that happened to me once a long time ago. I hacked into a server. I wanted to take a copy of everything so I made a tar of / to wget it to computer later. Only that the disk was at >50% usage so I filled it by making the tar file. Everything stopped to work with 0 bytes left of disk space (I wasn't root) so I kinda bricked the machine. I had to walk away in shame.
Don't feel bad. 1995. SunOS. Very patient boss. I did the same thing.
So I rebooted, and tried it again. Same result.
Eventually I figured it out.
Given the fair assumption that any piece of data you give to a third party system that has access to the internet will eventually be breached, I feel like we need an entirely new system for data sharing. The problem with most of these hacks isn't usually so much that the hacked system itself has lots of valuable data, but that the data from the hacked system can be used to hack into other systems that do have valuabl…
> There are obvious difficulties here regarding how we'd handle certain fields (e.g. how do I calculate your shipping if I don't know your exact zip code) Forget calculating shipping; how do you ship me my product at all without me giving you my address? (A quick napkin sketch would be that I wouldn't, I'd give you a USPS reference number, which you could use to calculate shipping costs as well as actually mail me a…
Main difference of course being that you want the ability to generate a unique "PO Box" per merchant.
Of course, there is a 3rd party (the post office in this case) that would need to know the mappings between real address and "reference number", but even in the case the post office got hacked at least they would only get your old mappings. Any new purchases would use new reference numbers.
Given the fair assumption that any piece of data you give to a third party system that has access to the internet will eventually be breached, I feel like we need an entirely new system for data sharing. The problem with most of these hacks isn't usually so much that the hacked system itself has lots of valuable data, but that the data from the hacked system can be used to hack into other systems that do have valuabl…
> There are obvious difficulties here regarding how we'd handle certain fields (e.g. how do I calculate your shipping if I don't know your exact zip code) Forget calculating shipping; how do you ship me my product at all without me giving you my address? (A quick napkin sketch would be that I wouldn't, I'd give you a USPS reference number, which you could use to calculate shipping costs as well as actually mail me a…
Given the fair assumption that any piece of data you give to a third party system that has access to the internet will eventually be breached, I feel like we need an entirely new system for data sharing. The problem with most of these hacks isn't usually so much that the hacked system itself has lots of valuable data, but that the data from the hacked system can be used to hack into other systems that do have valuabl…
> There are obvious difficulties here regarding how we'd handle certain fields (e.g. how do I calculate your shipping if I don't know your exact zip code) Forget calculating shipping; how do you ship me my product at all without me giving you my address? (A quick napkin sketch would be that I wouldn't, I'd give you a USPS reference number, which you could use to calculate shipping costs as well as actually mail me a…
Reminds me of something similar that happened to me once a long time ago. I hacked into a server. I wanted to take a copy of everything so I made a tar of / to wget it to computer later. Only that the disk was at >50% usage so I filled it by making the tar file. Everything stopped to work with 0 bytes left of disk space (I wasn't root) so I kinda bricked the machine. I had to walk away in shame.
Do something more useful with your time and skills.
Given the fair assumption that any piece of data you give to a third party system that has access to the internet will eventually be breached, I feel like we need an entirely new system for data sharing. The problem with most of these hacks isn't usually so much that the hacked system itself has lots of valuable data, but that the data from the hacked system can be used to hack into other systems that do have valuabl…
> There are obvious difficulties here regarding how we'd handle certain fields (e.g. how do I calculate your shipping if I don't know your exact zip code) Forget calculating shipping; how do you ship me my product at all without me giving you my address? (A quick napkin sketch would be that I wouldn't, I'd give you a USPS reference number, which you could use to calculate shipping costs as well as actually mail me a…
Along with some form of digital cash analogue (i'm not sure existing crypto is it), we'd be getting close to restoring some privacy in online transactions.