Hacker Newsnew | past | comments | ask | show | jobs | submit | starmilk's commentslogin

document.domain returns the current domain used in the document because no redirect occurred. Similar to if you typed it in your address bar right now, it should show you the HN domain.

It's commonly used as a placeholder in an alert-box XSS PoC. Weaponising this into an actual exploit could have been a fetch(), css inclusion, or enumerating localstorage.


What you generally feed into password cracking software is hashes of passwords that you've found by listening on the network, dumping from memory, or obtained by chaining another vulnerability.

These are in a text file locally (offline), so there is no system that you are submitting hashes to for verification. It simply tries md5(your_password_guess) until it computes the same hash that you supplied.

This is oversimplified and you can replace md5 with any hash alg that you need, but i hope it makes it clear that guesses don't happen against the auth server.


Yes, but I don't think that a use-case for this is to identify malware on your system. My understanding is that it is more so focused on disallowing trusted applications from sharing more data than you'd like, or phoning home [more often than you'd like].

*As always, a multi-faceted approach should be taken with security, and this isn't all you should be running if you're trying to defend yourself.


I also use Keepass[x]! The issue that I see people facing is that it isn't multi-device (it's an offline password manager). For me, that is the selling point though.


> For me, that is the selling point though.

Me too! Though I'm curious as to what you mean by multi-device? I use it on multiple devices just fine, though I have to sync them by hand.


At a guess, that it won't allow two devices to open the same db file (the first writes a lockfile). This does at least prevent corruption...


Well it's an offline program, so two devices can't open the same file anyway.


$0.02:

As an Australian, I do agree with you, but only looking at them from what government services are provided. In terms of the industry, I think health/fitness is possibly the largest in terms of misinformation because no one wants to do simple exercise and eat well, everyone is looking for a shortcut to get bigger or smaller.

So I don't think that they're specific to the American perspective in a larger sense, but I do also see where you are coming from. Then again, neither of us are American!


$0.02: I honestly feel that Google's CEO being Indian hastened the adoption. In India, Sundar Pichai is a celebrity. There are billboards, advertisements, and the whole country is cheering for him, a "local".

There is more to it than this (of course), but I think that the community view Google through the friendly face that is their CEO, while viewing Facebook as the big blue tech conglomerate which that have become.


It probably didn't hurt. And it definitely didn't hurt as much as Zuckerberg's nearly colonialist attitude towards the Indian people and their government.


I didnt have a problem with facebooks effort, till I saw the patronizing ads they put out. Zuck read India wrong or maybe it was Marc - either which ways India will be closed for anything like this for facebook now.

Maybe Zuck needs to work harder on his Chinese, not that its going to help when that mirage unfolds.


Facebook can expect to receive the same treatment in China as Uber did.


Or Google


Whoa. How is it nearly colonialist?


Basically when the Indians started to sway against him, his PR campaign boiled down to, "we know what's best for you."

It's not a popular stance for a rich white westerner to take towards a previously (abusively) colonized country. Well, or anyone else. But especially not them.


There was a huge controversy when Facebook announced free basics. Here is a good source if you want to know more, http://www.npr.org/sections/alltechconsidered/2016/02/12/466...


The only thing I saw was Marc's tweet about India being better under British rule.


That was Marc Andreessen, not Mark Zuckerberg. Marc A is on FB's board, though, and sadly a parody of his former self -- classic case of someone who got rich for luckily being in the right place at the wrong time, and coming out thinking he is a god.


Yes that's true that him being an Indian hastened the adoption but mostly because he knew what the pain points were and how best to get started.

However, he is hardly a celebrity in India. Google has been popular here much before he became a CEO.

Also what damaged FB was the tweet by Marc :http://www.forbes.com/sites/saritharai/2016/02/10/marc-andre...

Directly implying that India was better off colonized.


That tweet, omg! Marc Andreessen got hit so hard because of it that he apologized on his Twitter account and said he won't participate on any political discussion about India again. I like his work, but the particular tweet was grotesque.

However the tweet came late. The activism against FB's Free Basics was in full force already.


I stay in New Delhi and visit Bangalore often. Don't remember seeing Sundar Pichai on a single public Billboard or Ad. Go on with your fantasy stories!


This is 100% untrue. 99.9% of the population has no idea who Sundar Pichai is. There are absolutely no billboards or advertisements about him.


To add to your point, facebook's whole internet.org thing didn't help them in India as well. Majority of the tech-literate population was against that.


I live in India and have never seen Pichai on a billboard. Any references to this phenomenon?


I haven't seen a single billboard of Sundar Pichai in India. Stop spreading lies.


My bad! I read a biographical article on him and that was what was said. Sorry I can't edit it. :/


No worries. Can you, if possible, point me to the article so I can see who wrote it? Typically you never find billboards of founders/CEOs etc in India and if there is one that is a first.


Unless you've walked every street in India, what right do you have to call them a liar?

I would be willing to be that there are at least two such billboards somewhere in the country, making his statement factual.


I am willing to bet that there are none. You'll find billboards of politicians, bollywood celebrities or businesses at the max. Billboards are expensive. I'm sure even Sundar Pichai wouldn't want his photo plastered on a billboard anywhere... especially in India.


Have you seen a billboard of Sundar Pichai in the US? If you haven't, then why would you expect to see one in India? He is no celebrity here. We are proud of the fact that he achieved a lot. But that does not mean he automatically achieves stardom.


A lot of indians who come to this country never want to go back to india. They seem to kind of hate their country. So the fact Indians are celebrating someone who made it out is quite ironic.


Indian here. Not true, most of us love our country. And people do love to go back. Relocation in general is tough, once you have a family and kids going to school, its really tough to go back


You can't raise a family in india? Once you get used to that 150k salary you ain't going back. Pretty much all my cousins and stuff are trying to get out of the country.

I am not going to blame you are anyone else trying to make it, but I find it quite hypocritical that Indian publications glorify people who have pretty much left the country for good.


Why is it hypocritical? As you say, a lot of Indians do like to work abroad, and someone who has accomplished the very best of that particular ambition would definitely be of much interest to the Indian public.


It is hypocritical that Indian publications glorify people who have left the country for good? I think your statement is hypocritical.

Has the West not done the same? Who was Mother Teresa? When she adopted India as her home, leaving her birthplace for good, to help the distressed, did the West not glorify her as a "savior" and elevate her status to a "Saint"? Heck even after her death, lots of Western publications still continue to praise her work (and rightfully so). Should we call the West hypocritical then?

Just because Sundar Pichai left India for good does not make him any less Indian. At the same time, he is also not a celebrity.

If you bother to look at other articles published by the same publications you referred to, you'll notice that they praise a lot of other, more powerful Indian entrepreneurs as well. Sundar Pichai is not even on the same plane as those of Tatas, Birlas, Kirloskars etc. These are the local celebrities (household names if you will). Not Sundar Pichai. Go ask any Indian about Tata and s/he will tell you everything they know. Then ask about Sundar Pichai. That is when you'll understand who is the real celebrity in India.


I am sorry but what you said is just lame excuse. There are enough schools and colleges in India from basic to very fancy.

I have seen from most of my friends in US, their love for India is mainly remitting dollars there and talking about politics/cricket/cinema.


This misses the point.

Indian schools are very different. Indian education (up to but not including college) is very different. While top IB schools and whatnot (which are super expensive and may not be affordable even if you have earned money in the States -- besides, you will be earning less money now) exist and are closer to the Western model of education, most likely you will be in something less expensive. There is an enormous focus on rote learning. There is a very high competitive attitude. These things are _very hard_ to adjust to. Rote learning especially; that's not taught in the US, and is a very hard skill to pick up at a later age. This is not something that can be trivially brushed away.

(The reverse is true too; I know Indian kids who have had a hard time when moving to the West.)

And really, schools are often why people avoid moving from state to state in a country, forget moving to another country altogether. Its generally about not wanting to uproot your family's life. Schooling is a big part of that.

Nobody's saying schools don't exist in India.

Source: I'm an Indian-American who came back to India and had to switch schools. I know many other families who have done this.

--------

Edit: Some other things that I missed:

The school year is different. Furthermore, many schools (at least in Mumbai) start the year in feb-apr before summer vacation.

Languages. Depending on your location and the grade you're in, you may have to learn one or two languages other than English. If the child is very young this is okay, but you can't expect older kids to pick up the new language and get to the level of proficiency expected at that age. Most Indian-American kids do speak one Indic language, but not necessarily to the degree of proficiency required. They may not speak Hindi at all.

Many exam boards allow for some flexibility with choosing a different language, like French. But most schools won't have the faculty for that.

In my case there was exactly one school in all of Mumbai where I would not have had to have Hindi as a subject AND would not have had to sit out a year of school (this was after leaving my American school a few months early -- they were okay with that because I had good grades. Imagine the situation people would be in if they didn't have the grades necessary to be able to leave school early.)

I actually still started after the school year was underway, but fortunately this school was okay with that. Didn't help the transition between education systems though.


Any person of Indian origin successful in west becomes local celebrity unless that person makes his dislike for India very public. India as a nation has very few contemporary role models to look up to so either they resort to mythology or look for successful PIO in west.


Not true at all. We have a lot of contemporary role models to look up to. In fact I can bet that 99% of Indians know nothing about Sundar Pichai. However, I can also bet that 99% would have heard of J.R.D Tata, Kirloskar, Narayan Murthy or Azim Premji. Have you heard of any of these people? I'm sure you haven't. These are local celebrities in India, not Sundar Pichai.

For us, an Indian going abroad and making it has a different charm. That's all. It does not suddenly accord him a celebrity status and put him on par with the likes of Tatas, Kirloskars etc. Don't look too much into it.


A lot? A phase that doesn't have perspective... What about their families and general patriotism and kinship with their birthplace?


Honestly, I've tried to switch to Atom in the past and I have found that it was slow.

Sublime has what I need and it's quicker to start. I don't need something that I can customise with CSS, I need a fast text editor with syntax-highlighting.

On a plus-note, I have just convinced myself to use Vim with the following options: set number, set mouse=a, set colorscheme evening and syntax enable


How would they enforce security? Remember that pirates exist, would the savings on human captains be enough that they could sail around dangerous areas?

I know this is a planned concept, but surely security is a major concern. Can anyone with further shipping industry knowledge chime in?


I had the same thought. But maybe, it's less of a concern with an automated ship.

If the steering and engine rooms are sufficiently hardened, that is. It's one thing for someone to get onboard, but it's an entirely different thing to stop the boat. Without humans onboard, who will stop it? And, without a crew, there aren't any hostages. If you're remotely controlling the boat, you could just keep going and bring the pirates with you to the nearest maritime/port authority (Coast Guard, etc...). There is still a risk to the cargo, but how are pirates going to unload a container ship that is still moving in the ocean with an uncooperative captain controlling it remotely?


They can just damage the ship. It would be also ridiculous to think that there won't be an onboard manual override for controls.


I'm not saying that they couldn't. I expect that they would. But, for large container ships, isn't the bigger concern hostages? No crew = no hostages.

I mean, pirates aren't going to be able to dock a large container ship at any random port. And even if there is a manual override, why wouldn't it require a key of some kind?

I guess the point I'm trying to make is that the threat model changes when you don't have a crew on board that you can threaten. Some parts of piracy (access) may be easier, but others more difficult.


If there's no crew on board then there's no risk to human life or ransom to pay, so the consequences of a pirate attack are lessened.

I doubt unarmed or lightly armed crews are much of a deterrent to piracy anyway.


> If there's no crew on board then there's no risk to human life or ransom to pay, so the consequences of a pirate attack are lessened.

I don't think this is really true. Each container is worth $20k - $1M,

https://people.hofstra.edu/geotrans/eng/ch3en/conc3en/table_...

so the whole ship of ~10k containers

https://en.wikipedia.org/wiki/Container_ship

would be worth $200M - $1B or more. With 20 or less crew on board, and lives being valued even in the (expensive) US at only ~$10M, it's very likely that the value of the cargo is much higher than the crew. Not to mention the cost of the boat itself, which can exceed $100M.

Those numbers seem to be confirmed by this talk

http://static1.1.sqspcdn.com/static/f/1340097/17625392/13341...


This is more along the lines of what I was thinking. As "we all know", security isn't security, it's merely a case of "how long do we have?". Pirates do go after the contents of ships, that's a fact. I have nothing to cite for the following, but I can't imagine that the pirates actually want people on board. To a business - unfortunately - people are replaceable for much less than what their cargo costs.

360 degree long-range turrets and sticking to international water seem like the best strategy they have here. :^)


> How would they enforce security?

Make them submarines?


Might that also lead to reduced stresses on the vessel, and less chance of something breaking? A failure might mean the whole lot ending up on the bottom of the sea?


You missed the joke. It's obviously not economically viable to build huge cargo submarines.


The Russians were thinking about doing just that with their SSBN sub design. It didn't come to anything, but people have been doing the research in a serious manner.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: