akerl_

25 ms·

541.
by akerl_ 11mo ago
My confusion here is that if you're doing that, why bother with the cryptography? You can just look the person up in the company database, call them, and say "Hey! Did you just request a password reset?". If one of your pre-r
542.
by akerl_ 11mo ago
No thanks, I think we’ve gotten all we’re going to get out of this thread.
543.
by akerl_ 11mo ago
I didn’t say the issue with this example scenario is PGP. The scenario is theater (if you have an out of band lookup for verification, just use that. Don’t bother asking for pub keys). Also in parallel PGP is trash.
544.
by akerl_ 11mo ago
I’m saying asking somebody for a public key in the example scenario is pure security theater, no matter if it’s PGP or some other scheme.
545.
by akerl_ 11mo ago
Just so I understand, you believe that age’s developer hasn’t thought enough about how to design cryptographic systems or tools?
546.
by akerl_ 11mo ago
So I email you asking for something. You say “send me your public key first”. I generate a key pair and send the public key to you. You encrypt response giving me what I wanted. How do you have any idea that I’m the person I said I am?
547.
by akerl_ 11mo ago
It’s so easy to use insecurely that I will argue that employees setting up PGP keys and then potentially trying to use them does weaken the company’s security posture.
548.
by akerl_ 11mo ago
Thats… not the same thing.
549.
by akerl_ 11mo ago
Every distribution I've seen is using chrony or systemd-timesyncd. Is there a distribution that's actually using ntpsec?
550.
by akerl_ 11mo ago
Insofar as racism, homophobia, and sexism are unpopular political beliefs: yes. Oh, also he doesn't really "contribute" to tech projects so much as "exists near/within them and writes long form ramblings".
551.
by akerl_ 1y ago
As an aside, I would be a lot less irritated with college admissions scandals like we saw a few years back if Lori Loughlin had to transform herself into a floating tank monster to pull it off.
552.
by akerl_ 1y ago
Oh. Well that’s certainly an opinion.
553.
by akerl_ 1y ago
Again: that’s contrary to how our laws and regulations work. Having a rule that applies to game developers after they’ve done something, entirely unrelated to anything in their control, is frankly horrifying. “Sorry, you can’t ship any more
554.
by akerl_ 1y ago
Your example seems to agree with me? Applying different rules based on how many of a physical object a manufacturer produces is 100% something the manufacturer knows at the time they take the action. If the regulation says "manufacture
555.
by akerl_ 1y ago
They can restrict your access to the server-side infrastructure that they run, yes.
556.
by akerl_ 1y ago
Can you give an example? To pick one of my own: defamation is something that is determined based on your actions and the state at the moment they happen. If I say something potentially defamatory about you, it’s judged based on what I knew
557.
by akerl_ 1y ago
WoW classic is a really odd example, because the developer chose to ship it and made many changes to the underlying game when they did so.
558.
by akerl_ 1y ago
Nobody is coming into your house to change the bits on your hard drive.
559.
by akerl_ 1y ago
My pitch is that it’s generally bad and dangerous for society to make rules that retroactively apply based on how the universe reacts to your action. If I ship a game and my obligations about updates change depending on how popular the game
560.
by akerl_ 1y ago
> Games people spend 1000 hours playing earn a level of cultural significance that deserves protection from rent-seeking publishers. It's not clear to me what you're suggesting here? 1. Are you saying that the developer shouldn
561.
by akerl_ 1y ago
Last I looked, windows and Mac installs both push the user to set up bitlocker or FileVault, respectively. You have to actively say no if you don’t want it.
562.
by akerl_ 1y ago
You really seem determined to keep digging this hole.
563.
by akerl_ 1y ago
I’d recommend giving your own goodwill in the future instead of accusing commenters and then asking for goodwill in response.
564.
by akerl_ 1y ago
What an intensely rude thing to say to someone who has been providing specialist knowledge in a very deep technical field up and down this page.
565.
by akerl_ 1y ago
(asked earnestly out of lack of familiarity with this field) Are maintenance/certification standards distinct between passenger and cargo carriers? It's hard for me to tell if this suggests a step backwards in application of the r
566.
by akerl_ 1y ago
> If it paid badly, just don't work there. These things push wages down for this kind of work, but this work probably shouldn't be done in service economies anyway. This paragraph is so tantalizingly close to putting its finger
567.
by akerl_ 1y ago
> But now notice that the company isn't going to purposely authorize you to view the evidence of their criminal activity, so maybe a law that imposes a blanket ban on anybody accessing anything a company doesn't want them to is
568.
by akerl_ 1y ago
What if I team up with another journalist, and I tell them about curl commands to run but never tell them that they're exploiting vulnerabilities in the company's website? That way they don't have the necessary intent and I n
569.
by akerl_ 1y ago
I think you've fallen into a message board hole. Of the humans alive today, basically a rounding error of them are ever going to come anywhere near the CFAA. Firstly, the intent requirement. Which has been pointed out to you upthread a
570.
by akerl_ 1y ago
It's a good thing that intent is a major element of the crime, then. If you just happen on a dump of a company's data, you didn't have the necessary intent. If you hit a login form and figure out that it has flaws and then us

More ›