ajross

15 ms·

241.
by ajross 6mo ago
> USA is blockading Iran, they don't blockade anyone but Iran. For fuck's sake, as it were: https://x.com/WhiteHouse/status/2043344995181011027 "Effective immediately, the United States Navy, the
242.
by ajross 6mo ago
> the process of liquidating and transferring securities is much slower than ACH or Zelle. That doesn't seem relevant here. The account disappeared due to a data maintenance error; it wasn't extracted via a legitimate transfer
243.
by ajross 6mo ago
> they wont force USA to do anything since its not USA that is illegally blocking it. The USA is literally blockading the strait to prevent tolling. I mean, in some sense you're right: the Trump threat is fake and he'll cave
244.
by ajross 6mo ago
Again, they don't have to capitulate. They hold all the cards. The world needs that strait open, and 100%, undeniably, without any question at all will pay Iran tolls to get it. To the extent that this ends in military action, it&#x2
245.
by ajross 6mo ago
The blockade is 100% unsustainable. It's a joke. The world can't absorb a 25% cut in oil production for anything more than a few months. Reserve capacity is already being tapped. The futures market says it's only a mild
246.
by ajross 6mo ago
It's not really an "if". Iran is in a stronger geopolitical position (than the one they held before the war) today . Any deal they make can only improve things for them, by definition (or else they wouldn't take it).
247.
by ajross 6mo ago
... by loading it? There are many ways to get the kernel to suck in a module you can then bang on over sysfs or whatever API it presents. You can have a local exploit in a binary with CAP_SYS_MODULE, subsystems can be fooled into passin
248.
by ajross 6mo ago
> p0wned from where? Where's the vector attack? For clarity: the example upthread about pwning was TCP/IP, not AX.25. Also the idea that "there are no local exploits in this kernel code because it's not used by the ru
249.
by ajross 6mo ago
> kernel/user space context switching, in high performance context has to be seriously evaluated. Of course. But that's true for all userspace solutions too, and there are many options for async APIs (io_uring et. al.) which
250.
by ajross 6mo ago
> more modern protocols (in userspace) That's really it. The list of things that "need" to be in the kernel is shrinking steadily, and the downsides of having C code running in elevated privilege levels are increasing. N
251.
by ajross 6mo ago
While surely someone has done human-driven editing with sed, that's not what it's for. Remember that ed is the standard editor.
252.
by ajross 6mo ago
Hilariously, this is what the Gnome 2 people would have called an "Unbreak Me" option, something they tried culturally to eliminate more than a decade and a half ago. With... not total success, I guess, but the resulting environm
253.
by ajross 6mo ago
I dunno. An op-amp is a high-impedance differential amplifier with (conceptually) infinite gain and monotonic behavior at the crossover. Hook it up in feedback to exploit those properties and walk away. Any other chip is going to work
254.
by ajross 6mo ago
An even simpler reason is the way the device works. Like op-amps, a BJT transistor is very much a jellybean component. They all work the same. Sure, there are edge cases like high voltage/speed and very low/high power where you
255.
by ajross 6mo ago
> We clearly aren't talking about that You aren't. I was. Go. Read. What. I. Wrote. Strawmanning is bad form and bad faith. Please don't do it.
256.
by ajross 6mo ago
Yeah, those number seem cherry-picked. The fact that refineries exist in gulf isn't saying that refinery capacity doesn't exist elsewhere to manage the crude that is transiting the straight. It doesn't mean they do either
257.
by ajross 6mo ago
Is there a cite for that explanation? That doesn't sound right to me. My understanding is that almost all Hormuz oil is crude, the refineries are elsewhere.
258.
by ajross 6mo ago
Exactly. This is a pipeline architecture, you don't buffer more than absolutely necessary. What matters is how much fuel is flowing, not what the storage fill size is. Right now it seems like we've entered a detente where (1)
259.
by ajross 6mo ago
I said this elsewhere in the thread, but to repeat here: Can you explain why securing the ssh keys on a host that was fully compromised like that is anything but theater? Fine, you can't get the key out. You can just run the command
260.
by ajross 6mo ago
> The advantage of this approach is that malware can't just send off your private key file to its servers. The use case is ssh keys! If malware can run an ssh command on the remote host, it doesn't need to steal your key, it c
261.
by ajross 6mo ago
> evil maid attack So does a pass phrase though, with significant less complexity and fragility. Again, the linked article and responses here are making IMHO a pretty bad mistake with threat model analysis.
262.
by ajross 6mo ago
Or, alternatively, don't. Stuff in a TPM isn't for "security" in the abstract, it's fundamentally for authentication. Organizations want to know that the device used for connection is the one they expect to be con
263.
by ajross 6mo ago
> You're still against against a strawman. No, I was arguing with you, who posited that the difference between Dropbox and iCloud Photos was the "locus of control" and the "change in consumer relationship". That
264.
by ajross 6mo ago
Dependency cooldowns are theater. They will do nothing. Supply chain hacks get caught when someone gets pwned, and all this does is push the deadline out. You find attacks via cross-organization auditing, like you do in Linux distros, and
265.
by ajross 6mo ago
> * In contrast, "all my photos are in the cloud and my friends and family can collaborate on shared albums" is different, it permanently moves the locus of control. No, it doesn't. You're fooling yourself. All the
266.
by ajross 6mo ago
> You didn't frame your initial post around the market of grandmas, your rhetoric was targeted to those reading your post; "How much of your personal data", "do you still have your email". Uh... that's wildl
267.
by ajross 6mo ago
Is your Unraid free and unlimited then? Funny argument, indeed. I'm amazed at the number of people jumping out here to insist that people don't use or value cloud storage because of the existance of one or thirty or whatever klud
268.
by ajross 6mo ago
Counter-take: this was almost entirely wrong, and the author should be embarassed looking back after 17 years. I mean, it was 2009. How much of your personal data from then is still around on non-archival media you still control? Even amo
269.
by ajross 6mo ago
YouTube is actually the least engagement-driven/addition-maxing social video provider, by far. Meta and TikTok are famous for discouraging external linking, limiting reach to non-targetted users, heavily moderating content to match en
270.
by ajross 6mo ago
I repeat: almost everyone has some kind of money market instrument, the cash balance of which is stored primarily in US treasuries (along with other short term debt). Almost everyone benefits, to the extent they have that asset, by interes

More ›