andreyf

24 ms·

121.
by andreyf 10y ago
That's the kind of retaliation I can get behind whole-heartedly :-)
122.
by andreyf 10y ago
This is not the first time Google has disclosed unpatched vulns in Microsoft product [1]. Anyone know any more? What's up with them not being able to patch on time? How is 90 days not enough to get a patch out the door? That's a
123.
by andreyf 10y ago
Also surprising to many westerners is the extent to which Chine encourages and provides the opportunity for folks to volunteer for a eugenics programs: https://www.edge.org/response-detail/23838
124.
by andreyf 10y ago
This can be generalized to similar spectrum in quite a few domains: those who fear of rocking the boat on one end and those who do it without good reason. Part of working in a larger organization is the politics of knowing when the right ti
125.
by andreyf 10y ago
Nah, way bigger than that. I'm saying 10 times as big as a few gazillion at least a few gazillion times! (key words are "at least")
126.
by andreyf 10y ago
I think the consensus is that it's possible, but expensive. So like, nation-state espionage yes, corporate espionage no. But anyone who actually knows anything won't be talking about it on HN ;)
127.
by andreyf 10y ago
It's not possible unless you have zero-days against the USB drivers or firmware on your laptop, in which case being logged in or not doesn't really matter.
128.
by andreyf 10y ago
> in fact on average they have to have gazillions of pre-images each pretty sure "on average" they have at least a few gazillion orders of magnitude more than a few gazillion pre-images each ;)
129.
by andreyf 10y ago
But that's the great thing about BTC... all you need to accept them is a computer, and all you need to know when you got some is an ISP.
130.
by andreyf 10y ago
Well, it makes it pretty darn obvious now that Aaron's prosecution was related to his political activities and aspirations, no? I know Aaron didn't like this cynical interpretation of the judicial system, but it seems difficult to
131.
by andreyf 10y ago
> One system for everything else and one system for Apple. This seems to have worked out pretty well for innovation in the mobile OS market, no?
132.
by andreyf 10y ago
Why so combative? How is a JavaScript API standard going to benefit from Vulkan support on Apple platforms? More specifically, how will a JS API benefit from being built exclusively for Vulkan, instead of multiple "APIs that have nuanc
133.
by andreyf 10y ago
Call me when a circuit court makes a decision, at the least. SCOTUS will almost certainly decide on "forgetting your password is not a crime".
134.
by andreyf 10y ago
There has been tons of precedent, on both sides: http://www.zdnet.com/article/florida-court-says-password-dis... This is the only sane interpretation, though, as people have more and more encrypted devices, it's u
135.
by andreyf 10y ago
If you have something, a court can order you to give it up. If you know something which might incriminate you (e.g. a password), your testimony is protected by the 5th.
136.
by andreyf 10y ago
CNN also reports that Bannon feels free to over-rule DHS legal counsel on constitutionally questionable immigration actions as part of their PR strategy [1]. 1. http://www.cnn.com/2017/01/28/politics/dona
137.
by andreyf 10y ago
There's nothing to prevent your phone or laptop or smart TV / fire alarm / etc from doing so, either. Why single out Alexa?
138.
by andreyf 10y ago
Echo only records if you trigger it with the key phrase. Or do mean Echos that have been hacked?
139.
by andreyf 10y ago
Why?
140.
by andreyf 10y ago
Still don't see why they can't just accept bitcoin. Buying BTC via credit card is trivial via Coinbase (and they won't ban customers), and while they won't get 100%, they're much more likely to get quite a bit more
141.
by andreyf 10y ago
Seems like something simple like "look for the last N and the most common {M0, M1, M2} in the past {week, month, year} before doing a full scan" should hit the vast majority of use cases, no?
142.
by andreyf 10y ago
What about the "this is the most common setting used by our clients"? Is that not a good "excuse" for being the default?
143.
by andreyf 10y ago
Also, MySQL [1]. Are you sure that you're right and all these major db projects are wrong? 1. note the default value of "bind to *": http://dev.mysql.com/doc/refman/5.7/en/server-options.ht
144.
by andreyf 10y ago
No matter what your defaults are, if a sysadmin doesn't understand that some software is OK to connect to a public-internet addressable interface while other software is not, their shit is going to get hacked (or, as in this case, acce
145.
by andreyf 10y ago
What has he done with machine learning? He sounds like a good coder, but not really an ML heavy-weight...
146.
by andreyf 10y ago
I imagine most developers do, but his point stands. Here's the summary from my latest: > My two new MacBook Pros came with SIP disabled. And the one before it: > I reported a related bug (#19495560) where the FileVault on a brand
147.
by andreyf 10y ago
I'd be curious to see a list of devices which ship with this enabled. I imagine it's shorter than the article makes it sound. I imagine DMA was a trade-off for speed. Security is about such trade-offs.
148.
by andreyf 10y ago
Still seem like non-issues -- Hillary's and Bernie's answers to "should states abolish the death penalty?" and "how will you help people with lead poisoning from municipal water supplies?" were prepared long be
149.
by andreyf 10y ago
That sounds like (1), not (2). The DNS head leaked a single question to one of the candidates, and it never even did Hillary any good. It's not just not-a-big-deal, it's literally an issue of zero importance that had zero impact o
150.
by andreyf 10y ago
He also said "Donald Trump will not be allowed to win" the weekend before the election. Pretty sure Julian sees the world not wholly accurately these days :-/

More ›