ajross

17 ms·

421.
by ajross 8mo ago
"There will not be a coup" is on the tombstone of like every failed leader ever. Economics doesn't change. Countries aren't people, even if the people running them try desperately to make you think so. I'm not say
422.
by ajross 8mo ago
That's misunderstanding the model of actors. "Russia" isn't "Putin". "Countries" act in the best interests of their power structure, not their leaders. Basically: the way this ends is when the colle
423.
by ajross 8mo ago
There's something "Very HN" to see a comment in a discussion about literal political censorship of the news media pointing out the horrifying hypocrisy in one of those media sources running... something sort of like advertise
424.
by ajross 8mo ago
That doesn't work, because the Universities benefitting from the high-risk student loans are not the ones making bank from their grants and endowments. This is an imagined enemy fallacy. What you're really doing is demanding tha
425.
by ajross 8mo ago
It's not an economic effect. The news is all awful. If you're in the US and on the left, or outside the US, the world is descending into autocratic chaos and police state violence. If you're in the US and on the right, the
426.
by ajross 8mo ago
This is hilarious, but it's also not crazy surprising? It's an example of a "hidden context" question that we see all the time on exams that trip all of us up at one time or another. You're presented with a questi
427.
by ajross 8mo ago
The compiler space in 1985 was really thin. You were basically looking at Microsoft/Lattice C and Turbo Pascal. And while I don't have any of them handy for a test, that's pretty much exactly the character of the code the
428.
by ajross 8mo ago
This was the era before optimizing compilers.[1] The overwhelming majority of commercial games were shipping hand-coded assembly still. Forth had the advantage of low overhead, no-worse-than-a-compiler speed, and better-than-assembly prod
429.
by ajross 8mo ago
They're variants of the same software stack. But that's sort of the thing: email filtering (the only thing that makes email useful) requires tuning and heuristics. Decisions that are effective for personal email may not be fo
430.
by ajross 9mo ago
If you have a client app that you think is reliably filtering spam, then to be blunt: you aren't receiving any spam, at least to first approximation. My stack of stuff on my three decade old personal account has a 95%+ hit rate (somet
431.
by ajross 9mo ago
Even more alarmingly, a US cabinet secretary came out with a public statement about the incident that was a complete fabrication (labelling it a "cartel drone incursion"), has issued no retraction, and no one seems to care. (Less
432.
by ajross 9mo ago
Exactly. This minutiae is all so weird. Email as a formal specification does not work , and the industry as a whole has accepted that for decades now. It's not possible to filter spam from valid traffic without applying a truckload
433.
by ajross 9mo ago
As others are pointing out, this isn't true. You can absolutely infer the software state of a system via physical measurement. But what's interesting isn't your mistake, it's why the mistake was made. The abstraction
434.
by ajross 9mo ago
> While skeptical, he did not have much skepticism against mainstream theories. That's tautological. The definition of a "mainstream theory" is one that is widely believed. And while, sure, sometimes scientific paradig
435.
by ajross 9mo ago
I dunno about "demand". But sure, I think most of us would prefer people prioritize like we do. And in particular many of us would view this kind of hobby project as tone deaf and tell people about that in public. My freedom to
436.
by ajross 9mo ago
I'd prefer to see more of them do so, personally. That said, to watch Tan wading into a local fistfight about school curriculum and housing zoning and whatnot in the age of ICE abduction, targetted political prosecution and wanton mac
437.
by ajross 9mo ago
> Their primary purpose is not to protect you but to spy on you Here I was thinking the primary purpose was to see who's at the door and check if Doordash and packages have been delivered. We've also used them to "spy&quo
438.
by ajross 9mo ago
Reuters has it too. It was indeed a lie.
439.
by ajross 9mo ago
Well, sure. You can turn off host key checking in ssh! But that isn't responsive to a point that (1) host key validation exists in ssh and (2) host key validation is on by default in ssh.
440.
by ajross 9mo ago
And I was merely commenting on the likely veracity of the quote you posted. No shooting happening here.
441.
by ajross 9mo ago
Host key verification is a client feature and is on by default. Have you really never gotten the giant warning after a reinstall? That's what that is. SSH is telling you that the server has changed and isn't what you think.
442.
by ajross 9mo ago
It's... not about the file format. The point is that a "private" cert is not a "cert" as commonly understood. The important part to a certification authority is the AUTHORITY part, not the data format. Either th
443.
by ajross 9mo ago
It's... not super clear from the article whether this is a port block or a stateful protocol thing. But yes, you're probably right and SMTP spoofing is probably safe for now.
444.
by ajross 9mo ago
> Nobody verifies host keys, The known_hosts file is verification of host keys. It's not verification of a host cert, which is a different thing. Most sshd instances are running on ad hoc hardware without the ability to associa
445.
by ajross 9mo ago
None of this affects the use of telnet the client program nor the ability to run a telnetd on your own host (but do be sure it's patched!). What's happened is that global routing on the internet (or big chunks of it, it's n
446.
by ajross 9mo ago
> believe that their children will have good lives Again, no. That's a patronizing abstraction implying you need to convince them of the general value of the activity, and assumes she's doing it all "for the kids" an
447.
by ajross 9mo ago
> I like to hang out on fertility twitter. I'm gonna assume that "fertility twitter" has about the same gender distribution as HN, and posit that you're all probably wrong. It's the mothers, not the dudes, who m
448.
by ajross 9mo ago
> This is basically how Let's Encrypt / ACME accounts work That's how they're implemented . How they "work" is a trivial pushbutton thing as documented by a well-known and trusted provider who cares deeply
449.
by ajross 9mo ago
Point being that if you get a valid TLS connection from a client cert, and then you get another valid connection from the same cert tomorrow, you can be very certain that the entity connecting is either the same software environment that co
450.
by ajross 9mo ago
A client cert can be stored, so it provides at least a little bit of identification certainty. It's very hard to steal or impersonate a specific client cert, so the site has a high likelihood of knowing you're the same person you

More ›