nulluk's comments

nulluk | 10 years ago | on: VW Has Spent Two Years Trying to Hide a Big Security Flaw

As bri3d has mentioned, I think you are confused because the key actually has three independent functions and you need to make the distinction between them all.

    - Remote central locking via UHF
    - Immobiliser authentication via RFID (this is what is vulnerable) 
    - Key for the ignition barrel or manual unlocking of doors

nulluk | 10 years ago | on: VW Has Spent Two Years Trying to Hide a Big Security Flaw

As far as my limited understanding goes using the the key fob for remote central locking does not expose any risk, instead its the immobiliser part, so manually opening your door with the physical key provides no extra safety, its when the key is present near the ignition barrel, thats where the immobiliser kicks in and where this venerability exists

nulluk | 11 years ago | on: EU’s New VAT Rules Could Create a Mess for Startups

Yes and this is what is the most unsettling part, the TLDR for small businesses is if you don't sell through a marketplace your sod out of luck and now regarding the VAT threshold and need to burden the cost of becoming VAT registered

nulluk | 11 years ago | on: Show HN: Reviewo – Ebay feedback system for your website

Thanks! The quick response is we haven't got around to it yet. We have been hard at working integrating new features and with only a select few customers (that we can count on two hands) it wouldn't showcase the platform very well.

nulluk | 11 years ago | on: Show HN: Reviewo – Ebay feedback system for your website

Our initial customers are primarily retailers but we aren't intentionally limiting ourselves to that market, the platform works across a few different sectors.

We have a Magento plugin as our first drop in integration so if you are running a Magento webstore you can just install and configure a plugin and we will automatically ask all your customers for a review a certain amount of days after purchasing. We also have a few POS and Point of Delivery integrations currently in the pipeline but as it stands they are all custom integration jobs to be branded up as the registered company, maybe this could be addressed with an iPad app that restaurants could present when customers are settling the bill?

It's honestly something we haven't looked at yet but if a potential client wants this to come onboard with us then we are more than happy to put in the development time to provide the solution

nulluk | 12 years ago | on: Ask HN: Password best practices?

Good timing on this post, recently decided to shape up my own practices.

I'm currently storing everything in a separate OSX keychain with a strong 20+ character password but there seems to be very little out there describing how OSX encrypts the notes. I can only find articles from a few years ago staging it's 3DES but I would like to think its been upgraded since then.

nulluk | 12 years ago | on: Lock Picking – A Basic Guide

Trained as a locksmith out of college, dad and sibling still trade mainly on "warrant runs" for the large energy providers when they need to get access to house to cut people off.

It's really cool seeing people take an interest in picking, but just wanted to point out that professional & hobbyist picking is completely different. A professional’s first priority normally is to get into the property, damage generally not being a huge issue so the approach changes dramatically.

First you try all the doors, as you would be surprised by how many people just simply don't lock their doors whilst making a judgment what will be the easiest entrance. Then you target the door with the worst lock, normally a UPVC door with a euro cylinder and use an electric pick gun to give it a quick blast. This gets you in within 5 minutes 90% of the time. [1] If the pick gun doesn't work you snap the cylinder in the door and replace the lock for a total cost of about £5 [2]

The hardest part of the whole job is when you have to identify a mortice lock in order to bypass it and knowing if it's worth an attempt at a pick. (Simple 3 lever locks are worth a pick first before a drill) Once the lock has been identified though it's easy to drill, you get your template out [3], mark up the holes and drill out the stump

There are also other methods and the general gist of the story is you use the method which takes the least amount of time with doesn't leave an unreasonable amount of cost!

Some other methods/products to look at which are interesting and commonly used:

- Mica, a specifically made plastic for slipping rim latches, most commonly referred to as "yale locks": http://uklockpickers.co.uk/mica-shim.html

- Letterbox tool, very basic (its just posh string on a stick) but also very effective at knocking off deadbolts or opening a latch that won't slip: http://www.walkerlocksmiths.co.uk/bypass-tools/letterbox-too...

- Try out keys for mortice locks with a low number of levers: http://www.walkerlocksmiths.co.uk/mortice-picks-tools/try-ou...

- Plug spinner for when you pick the lock the wrong way: http://www.youtube.com/watch?v=fUmCUj44BPg

[1] http://www.youtube.com/watch?feature=player_detailpage&v=mTt...

[2] http://www.youtube.com/watch?v=FqhhXyROxQM

[3] http://www.eltonlockservices.co.uk/drill%20template%20new%20...

nulluk | 12 years ago | on: A Social Network for Crohn’s Disease – Crohnology (YC S12)

With both myself and my partner having Crohns we have found a lot of value it Crohnology and its absolutely an amazing idea, simply for the community thats grown around it.

However my single annoyance is all the treatments are display by brand name and over here in the UK medicine is generally never referred to by its brand name, meaning it was extremely difficult to input my past treatments without a lot of googling

nulluk | 13 years ago | on: What to expect in SEO in the coming months [video]

Apologies your right. Trying to bring it back around to my original point by rephraseing my orgional statement then.

If your worried about this update then you haven't been doing seo right and If your relying solely on a 3rd party for the existence or profitability of your company then you have bigger issue at hand than just your seo.

nulluk | 13 years ago | on: What to expect in SEO in the coming months [video]

Yes probably I am, because we are talking millions of sites and statisticly your going to get anomolies. Then again if your business model is based primarily on your SERPs then you have a bad business model and should be doing everything you can to mitigate that risk.

It's one of the risks you take which should of been identified if your a competent business owner that wants to survive.

nulluk | 13 years ago | on: What to expect in SEO in the coming months [video]

Keyword stuff is abusive, bolding all your keywords should rightly get you penalised. It's not far off the old days of stuffing the defunct meta keywords tag.

First point on googles webmaster guidelines says it all. Your chasing google, build a site for your users first, google will follow because it's in there interest to provide the most relevant content.

  Avoid tricks intended to improve search engine rankings.
  A good rule of thumb is whether you'd feel comfortable explaining what you've done to a website that competes with you, or to a Google employee.
  Another useful test is to ask, "Does this help my users? Would I do this if search engines didn't exist?

nulluk | 13 years ago | on: What to expect in SEO in the coming months [video]

I can't deny negative SEO is a worry and yes whilst Google opened up the doors for it they also recognised it and have started providing ways to hopefully protect yourself. (Disavowing links etc)

If your in a competitive market where you have to worry about negative SEO so much so that it is making an impact on your SERPs then I'm sure the web spam team would be more than interested in hearing from you

nulluk | 13 years ago | on: What to expect in SEO in the coming months [video]

I understand it's all algorithmic and there will be some truly innocent collateral damage involved but Google wouldn't be pushing this out if they didn't feel the overall quality of search would increase.

Most of the collateral damage is going to be people straddling the grey hat line and rightly so in my own opinion.

nulluk | 13 years ago | on: What to expect in SEO in the coming months [video]

If matt says it's more substantial than penguin 1.0 then its going to have a big ripple effect, the last penguin update effected more than 10%+ of SERPS.

If your worried about this update then you haven't being doing "SEO" right.

nulluk | 13 years ago | on: Coinbase Response: Data On Merchant Pages

Disallowing a link in robots.txt will not stop google from indexing the page. Google "reserve the right" to index the page if they see links going towards it to stop webmasters shooting themselves in the foot, they however won't fetch the page in accordance to robots.txt.

The recommended way is to allow google to crawl the page but explicitly "noindex" the page via the robots meta tag (or even the x-robots header) - http://support.google.com/webmasters/bin/answer.py?hl=en&...

Edit: Matt, explaining in a video: http://www.youtube.com/watch?v=KBdEwpRQRD0

nulluk | 13 years ago | on: Sick of SEO Scumbags

My SEO 101 has always been "Build a technically sound website with good content and UX. Then talk about it."

Google will follow, you shouldn't be chasing them. They are in the business of providing the most relevant results, make it easy for them to crawl you and the rest will come over time with trust.

page 1