admax88q

63 ms·

571.
by admax88q 7y ago
It could result in more people hosting their own stuff. Back to the "good old days" that many on HN pontificate about.
572.
by admax88q 7y ago
> you can make a case before a court if you think a work has been abandoned That's an absurd amount of additional work to put on the legal system.
573.
by admax88q 7y ago
Sure but that's not the argument that the article made. Thats an important point to discuss and there may be ways to mitigate the damage of such a compromise (multiple curves, per key escrow). The article made a ridiculous argument for
574.
by admax88q 7y ago
Theoretically you could just electrolyze water on site using power from existing grid. It wouldn't be that much more difficult infrastructure wise than building charging facilities for EV. However according to the diagram included on
575.
by admax88q 7y ago
There are other means of backdooring rather than setting key size. I'm not saying its a good idea, but there are means to make cryptosystems that are breakable by the NSA but not anyone else. Consider the concerns around the Dual_EC r
576.
by admax88q 7y ago
/r/iamverysmart
577.
by admax88q 7y ago
"My anecdote trumps your data."
578.
by admax88q 7y ago
Event just a single site from the alexa 100 would be too obvious. I'm sure some security researchers and/or companies are already monitoring the certificates issued from major websites for abnormalities.
579.
by admax88q 7y ago
If the NSA was using their own certificates to MITM all HTTPS traffic it would be easily noticed by security researchers. Its not like they obtain the private keys of every US company. They'd have to make their own replacement certai
580.
by admax88q 7y ago
Modern bikes are built yo tight tolerances for their purpose. Taking an inch curb in a mountain bike is nothing, taking it in an ultra weight optimized road bike is a different story.
581.
by admax88q 7y ago
Neither of those is necessary for a basic bicycle. A wooden frame with a fixed gear ration and chain or belt would work just fine for moderate riding
582.
by admax88q 7y ago
Glad were in agreement :)
583.
by admax88q 7y ago
You continue to miss the point. Its not a question of _why_ I trust my compiler or my computer. If you trust npm packages and ship them then that's not malpractice. Its about admitting you _don't_ trust npm packages, but you go
584.
by admax88q 7y ago
The tradeoff will be different for electric cars.
585.
by admax88q 7y ago
It's not a question of establishing an absolute scale of trust. It's about admitting that you consider npm packages to be insecure, but you run them in production anyways. Imagine you believed that steel had a 10% chance of spont
586.
by admax88q 7y ago
I don't get why people who even admit that they dont trust these random npm packages can think its okay to ship them in production and put all their user's data at risk. It's malpractice.
587.
by admax88q 7y ago
Your device is as secure as you make it. Why are you installing "lord knows what npm package" on your laptop?
588.
by admax88q 7y ago
No questions asked after years of denying there was even a problem.
589.
by admax88q 7y ago
This was a fairly pedantic post but I'll reply anyways. > First off I'm not policing anything, because, how would I have the authority to do that? Maybe policing isn't the right word, but your earlier post was fairly conde
590.
by admax88q 7y ago
Sure and the source code has also been leaked before. But a "clean room" implementation is not allowed to look at such things.
591.
by admax88q 7y ago
Why are you policing other company's employees and presuming to know what their job is?
592.
by admax88q 7y ago
On the other hand it would incentive you to host your content yourself.
593.
by admax88q 7y ago
Unfortunately same UID is not sufficient, if my program is running some other script or respnsing to input provided by an external user or attacker. JavaScript is the easiest example of this.
594.
by admax88q 7y ago
Running emacs in a terminal defeats the entire notion of "without a GUI" Emacs in a terminal is still a GUI, its just one that is poorly drawn using characters for every cell rather than using pixels. If you're going to use
595.
by admax88q 7y ago
Yeah avoid indirection. Instead of > x.start_with("foo") do > x.length >= 3 && x[0] == "f" && x[1] == "o" && x[2] == "o" Now the reviewer doesn't have to jump to
596.
by admax88q 7y ago
What about that makes it sound targeted? Seems like standard vulnerabilities chained together, nothing specific to the "target"
597.
by admax88q 7y ago
Doesn't even have to be free, you could sell it on the internet. Self publishing is easier than it has ever been. Sounds more like an excuse than a reason.
598.
by admax88q 7y ago
Honestly, if one minor bad experience prevented you from ever contributing to wikipedia again, you're not the type of user that would become a long term editor. Wikipedia is rife with conflict due to being an open, easily anonymous pla
599.
by admax88q 7y ago
If only these TV companies had access to people's eyeballs. Selling the data is not the long term play, building profiles for targeted advertising is. TV viewers are already accustomed to ads.
600.
by admax88q 7y ago
It's advertising. There's tons of money to be made. Maybe your data is not worth a lot alone, but viewing data of the entire TV watching population would be huge. If you don't think there's money to be made in collecti

More ›