anfedorov

9 ms·

31.
by anfedorov 9y ago
That's nothing. I once ran 20 services before breakfast.
32.
by anfedorov 9y ago
Not a lawyer, but would guess because it would be a waste of their lawyer's and the court's time.
33.
by anfedorov 9y ago
How easy is this, in practice? Has anyone inspected the WhatsApp binary? How much of it?
34.
by anfedorov 9y ago
Similar reason on why evolution doesn't have wheels — less restrictions on where it can go.
35.
by anfedorov 9y ago
What's a good resource for understanding broadband markets as a whole? At least in SF in the past 5 years, Comcast seems to have upgraded 100Mbps connections to 1Gbps connections. Not sure whether that translates to a bigger shared pip
36.
by anfedorov 9y ago
Definitely misleading -- "document metadata" seems materially different from "file metadata".
37.
by anfedorov 9y ago
Sigma ( https://sig.ma ) | Millbrae, California | full-time | ONSITE / VISA | Software Engineers We're bringing memberships, certificates, licenses, and credentials into the connected era via a platform built on Scala, G
38.
by anfedorov 9y ago
Just realized the list contains facebook.com as well as mail.google.com, so perhaps a little overly broad there.
39.
by anfedorov 9y ago
Here it is newline-separated in case you want to import it into the Adblock DNS filter for iOS: https://gist.githubusercontent.com/anfedorov/1fa7dc8871b20da...
40.
by anfedorov 9y ago
"on-sharing the data with cross-site aggregators"? The ToS and Privacy Policy of an analytics company discloses what the that company may do with their client's users' data, not what the client can do with their own user
41.
by anfedorov 9y ago
I think this might fall under "doesn't solve the same problem at all".
42.
by anfedorov 9y ago
So are they bullies that need to be stood up to or are they stressed out folks who need to chill? Given nothing else than what is here, I would err on reading those tweets as coming from a place of struggle, not a desire for domination. Fol
43.
by anfedorov 9y ago
While I definitely see where you are coming from, simplifying people's emotional reactions to things to "some people need to chill out" belittles their feelings in a way that isn't helpful. We can support folks who are b
44.
by anfedorov 9y ago
Good point. Most importantly, that's the far less annoying use-case: one can imagine a simple UX with a list of applications bound to LISTEN on an external interface for you to whitelist for an hour, a day, or indefinitely. I think bro
45.
by anfedorov 9y ago
Because it's annoying and it doesn't help — most people don't care for managing a firewall, nor should they. If an attacker has run an executable on your laptop, whether you block it from phoning home or not is hardly your ma
46.
Apple’s new version of macOS is called High Sierra(theverge.com)
2 points by anfedorov 9y ago|0 comments
47.
by anfedorov 9y ago
Not sure which "we" you're talking about, but most folks you want to be excited about this know the difference between www and the internet, and some even have strong opinions: https://softwareengineering.stackexch
48.
by anfedorov 9y ago
Bob Kahn, not TBL, is the other "father of the internet". > Today we are proud to announce the Blockstack browser, which allows developers everywhere to access a whole new internet. reminded me of then-Senator Ted Stevens'
49.
by anfedorov 10y ago
Microsoft is assuredly fixing this into overtime. Microsoft assuredly knew this was in use in the wild. They're already working beyond full speed, and Microsoft has a history of sharing mitigations with third party security vendors.
50.
by anfedorov 10y ago
Most importantly it tells MS "fix your shit when your users are being attacked". Seven days ago was a Monday. That means they had a full week and a weekend to fix this. I understand that big bureaucratic organizations move slowly,
51.
by anfedorov 10y ago
Worse? Did you miss the part where this vuln is being actively exploited? I'd much prefer if Google disclosed this sort of thing to trusted software vendors immediately and the public within 24-48 hours of finding out.
52.
by anfedorov 10y ago
Not moving heaven and earth, just fixing it in a week when you're notified that there's a critical vuln that's actively being exploited against your users. Yes, Google could lower the bar two two weeks, or three, or four, but
53.
by anfedorov 10y ago
To clarify, Let's Encrypt validates identity by trusting DNS resolution of a domain and then trusting a TCP/IP connection to the IP, correct? It's good to encrypt things, but I wouldn't be too surprised if it were possib
54.
by anfedorov 10y ago
I think sunglasses will become the standard opt-out, and perhaps the legal one at some point.
55.
by anfedorov 10y ago
Not just stored: http://www.cnet.com/news/facebook-scans-chats-and-posts-for-...
56.
by anfedorov 10y ago
http://qz.com/493542/japan-is-building-a-giant-robotic-lettu...
57.
by anfedorov 10y ago
Including Alan, or is he still heading VPRI?
58.
by anfedorov 10y ago
Location: San Francisco Remote: Yes Willing to relocate: Yes Technologies: GAE, AWS, Python, JavaScript, Rust, Swift, Go, etc. Résumé/CV: https://anfedorov.com/resum%C3%A9.pdf Email: me@anfedorov.com I'm an end-to
59.
by anfedorov 10y ago
If you know of any such endpoints you should report them. Sending auth cookies over HTTP is a security vulnerability.
60.
by anfedorov 10y ago
With that kind of reserve, is it possible that Apple simply outbids everyone for any security vulnerability placed on any market they can get in on?

More ›