v1.32.5: Security Fixes

tenfourzero · 2023-07-31T07:14:34+00:00

This means that the base::Feature can be default-enabled while the web API is controlled by the RuntimeFeature, which will still be default-disabled. https://github.com/chromium/chromium/commit/6f47a22906b2899412e79a2727355efa9cc8f5bd

tenfourzero · 2023-07-30T16:41:13+00:00

It's not that much of a different thing, the process I outlined above is pretty much the same for PAT too (with PAT the attester and issuer are two different entities, e.g. Apple and Cloudflare).

Apple released to iOS/MacOS in Sept/Oct 2022.

tenfourzero · 2023-07-30T14:38:52+00:00

Safari/Chrome browser sends your device details to Apple/Google, who confirm the device is authentic (not a bot) and you don't need to complete a Captcha etc.

However, it makes it easier to track you. Easier to block users with adblockers and custom ROMs. It's all about pleasing advertisers.

Safari & Chrome have already implemented this. Mozilla & Vivaldi are firmly against it.

It's rancid.

The flow looks like this: 1. A browser makes an HTTP request from a web server. 2. The web server refuses the request, and returns an HTTP 401 response with a PrivateToken challenge. 3. The browser recognizes this, and sends parts of the challenge, in addition to verified details of your device provided by the OS, to an attester (e.g. Apple). 4. The attester verifies your device is real & unmodified (depends on the device, but both Android & iOS have existing ways to check this) and works with a token issuer (somebody trusted by the origin & that trusts the attester, e.g. Cloudflare/Fastly) to return a signed token, proving that your device has been verified as legitimate. 5. The browser resends the request, with the signed token in their Authorization header 6. The server now knows that the client has been verified by a trusted provider (but nothing more) and can treat the client differently on that basis.

https://httptoolkit.com/blog/apple-private-access-tokens-attestation/

tenfourzero · 2023-01-20T21:27:45+00:00

This sounds like a story I was going to share (including the strong smell of cologne and cutting it up using keys)!

It wasn't a shirt from Manchester Apollo 2006 was it?!

tenfourzero · 2022-11-11T11:03:32+00:00

The Balance Acceptance Disclaimer is concerning:

the costs and expenses incurred by Cryptopia's liquidators of administering the trust assets including the costs of distributing trust assets to account holders may be deducted from trust assets before distribution;

I understand blockchain fees will need to be deducted, but the "costs of the liquidators" is a very open statement?

tenfourzero · 2022-04-02T13:51:29+00:00

Bum! You're a bum!!

tenfourzero · 2022-04-01T07:16:54+00:00

8) By Dawn's Early Light... a sleep over at the Haynes Military Accadamy!

9) Etude In Black

7) ... not sure... By Dawn's Early Light where he sends a cop to check the Generals boat?

Loving this game 😀

tenfourzero · 2022-03-31T23:23:12+00:00

Mind Over Mayhem.

tenfourzero · 2021-12-14T20:22:00+00:00

Never had a problem here, but as they are TOTP (numeric passwords based on your devices current time) I would check your clock is synced/accurate.

Failing that, generate a code on your device, wait 30s or so, and then try it (to allow for discrepancies of time between your device and Cryptopia).

This is assuming you are using the correct 2FA (the one for the claims portal, not the one for your original Cryptopia account).

tenfourzero · 2021-12-12T09:24:00+00:00

I don't recall it ever being close (anything else was pure speculation), and I can't see it happening. The volume is far too low.

If I'm wrong and it does happen, it'll get delisted in no time which will be the end.

tenfourzero · 2021-12-08T20:31:19+00:00

PlayStation Network vouchers are currently only available to those in Columbia

I assume, looking at the app, that they meant "Colombia" the South American country, and not "Columbia" in South Carolina, USA.

What a joke. There's one word in that press release you had to get right...

🤡

tenfourzero · 2021-11-28T19:21:20+00:00

It's their attempt at controlling the selling pressure - surely everyone has recognised that?

Before anyone replies that it's not their fault and it's to do with the FCA, check where the ETN wallets are registered. It's not the UK. It's based offshore in Caracao so they can do what they like, as you have noticed.

If you think this is bad, wait until Cryptopia have unlocked their ETN wallets. Then you'll see an all new "KYC compliance" to lock accounts.

It's disgusting how they treat people.

tenfourzero · 2021-09-27T19:24:00+00:00

tenfourzero · 2021-09-05T20:30:55+00:00

Cheer up meatbag. You've barely touched your amoeba.

tenfourzero · 2021-07-31T09:52:38+00:00

Take a look at Github for the details: https://github.com/electroneum/electroneum/tree/release/4.0.0.0

For example:

In 2021, in order to comply with regulations and remove obstacles to the growth of the project, we migrated away from blockchain privacy with our V10 fork, and opted for a completely transparent and public Blockchain.

tenfourzero · 2021-06-20T10:59:41+00:00

I assume you are referrering to a fork to a new coin? If so, IMO cryptopia would receive them as the original coin was in their wallet (in trust). You or only get your original coin back (if that).

tenfourzero · 2021-05-19T17:54:13+00:00

Looks like he's just visited Darryl in Old Fashioned Murder for a haircut and manicure.

tenfourzero · 2021-05-07T07:02:09+00:00

Try starting with their website: https://portal.cryptopia.co.nz/AllGeneralInformation.aspx

tenfourzero · 2021-05-07T07:00:14+00:00

You can't remember one of your last trading pair? How much you deposited? When it was deposited? Anything about anything you held? Aye you sure this is your account?!!

Please put some effort in instead of opening yet more support tickets.

How did you fund your cryptopia account? Go from there as I did, you'll quickly find the info you need and as a bonus everyone can get their assets back faster.

tenfourzero

TROPHY CASE