|
Cross-protocol attacks could potentially steal login cookies or execute malicious code. This hack could have been an email?
|
|
|
|
|
Hmmmm,
Maybe this is a good time to let you know that the paragraph below is referring to sites like codeproject that utilizes free TLS services.
The scenario isn't as farfetched as some people might think. New research, in fact, found that roughly 14.4 million webservers use a domain name that's compatible with the cryptographic credential of either an email or FTP server belonging to the same organization. It's a simple and easy to understand concept:
Step 1.) Observe that codeproject is transparently using https://codeproject.global.ssl.fastly.net/[^]
Step 2.) Observe that the site certificate 'Subject Alternative Names' field contains *.freetls.fastly.net and *.global.ssl.fastly.net
Step 3.) Setup your free TLS account over at Fastly[^]. e.g. your.name.for.example.global.ssl.fastly.net
Step 4.) Observe that because the TLS negotiation checks for the match '*.global.ssl.fastly.net' that you can substitute site resources from your.name.for.example.global.ssl.fastly.net without a certificate warning.
The next steps might require an existing vertical position on the target (or destination) networks. A successful attack would result in running any javascript of your choice inside the target browser.
|
|
|
|
|
Humans expect that AI is benevolent and trustworthy. A new study reveals that at the same time humans are unwilling to cooperate and compromise with machines. They even exploit them. "Your cheatin' heart will tell on you"
|
|
|
|
|
Switch statements are mostly trustworthy, are they not?
Not if you forgot default! Nerd zing!
|
|
|
|
|
In America Republicans can't get along with Democrats, and Democrats can't get along with Republicans. And this fool concludes that we are ready for benevolent AI??? Inconceivable!
Sorry for the 'close-to-politics' response.
|
|
|
|
|
Well, maybe hatred of the local "benevolent AI" will be nonpartisan. 
EDIT: I'm not holding my breath.
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
modified 9-Jun-21 3:09am.
|
|
|
|
|
Kent Sharkey wrote: Humans expect that AI is benevolent and trustworthy.
the same that believe in Santa Claus and in the tooth fairy too...?
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Kent Sharkey wrote: Humans are ready to take advantage of benevolent AI
And exactly how is this different from how many people treat benevolent humans?
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, weighing all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
|
|
|
|
|
Solid-state drives may be the go-to for phones and most PCs and laptops, but the humble mechanical hard drive still has a place in the computing world. Graphene solves everything 5-10 years in the future (from 5-10 years from now, GOTO :start)
|
|
|
|
|
AI Quantum Fusion Graphene!
|
|
|
|
|
(5 to 10 years in the future...  )
|
|
|
|
|
I was just coming to add that.
TTFN - Kent
|
|
|
|
|
Some of the world's most important sites went dark today — all because a company called Fastly made a server mistake. Good thing we've got a reliable distributed internet there
|
|
|
|
|
Good luck for Fastly that StackOverflow was still reachable...
Oh sanctissimi Wilhelmus, Theodorus, et Fredericus!
|
|
|
|
|
Explain the problem in one sentence:
Ooops... fvck!!!
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
State Attorney General Dave Yost called the company's practices "discriminatory and anti-competitive." "Ay, oh, way to go, Ohio"
After all, as goes Ohio, so goes the world, right?
|
|
|
|
|
This is the story of how I accidentally discovered what appears to be a sizable SEO scam. Beware of free tools bearing gifts
|
|
|
|
|
I'm devastated that there are shenanigans on the internet.
|
|
|
|
|
Have a ![Beer | [beer]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/beer.gif) . Or more. Maybe that will help.
|
|
|
|
|
Answer questions about your favourite tools and platforms for developers and no-code software creators, make an impact on the future trends, and win prizes. I hear I like surveys
|
|
|
|
|
Quote: Answer questions about your favourite tools and platforms for developers and no-code software creators, make an impact on the future trends we'll sell the data to make us some money, and win stupid prizes.
|
|
|
|
|
The next critical talent shortage won’t be Fortran I know I'd like to forget YAML
|
|
|
|
|
Did anyone else read this article?
I'm curious because the author says, "the Python machine learning library scikit-learn[^] is written in Fortran"
He provides a link to wikipedia entry on sci-kit learn which says that the library is written in python and the entry doesn't mention Fortran at all. ???
Does anyone know what the author is talking about on that?
|
|
|
|
|
The .NET Productivity team (aka. Roslyn) continues to enhance your developer productivity with the latest tooling updates in Visual Studio 2019. Hey! I'm supposed to make the jokes here!
|
|
|
|
|
What's new from the point of view of a ReSharper user?
MS copies functionality of ReSharper into VS.
Oh sanctissimi Wilhelmus, Theodorus, et Fredericus!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
