anfedorov

11 ms·

61.
by anfedorov 10y ago
Cached link: http://webcache.googleusercontent.com/search?q=cache:Ith6HIW... The ending is the clearest part: Although the Archivist has independent legal authority to determine the status of federal records under the Presi
62.
by anfedorov 10y ago
I would think the fact that they don't have an official bug bounty program makes it unlikely they have an unofficial one. Why is that? It seems to me that there are a lot of ways to run bug bounties, although I haven't thought t
63.
by anfedorov 11y ago
Source?
64.
by anfedorov 11y ago
Did to taper off or stop cold-turkey? I imagine taking several years to decrease dosage could be significantly more manageable than going off them right away.
65.
by anfedorov 11y ago
I wouldn't take it as gospel, as it's hard to know for sure, and some companies are betting a lot on there existing that evolutionary path. Their argument might be: why not? Just because there are too many orders of magnitude of i
66.
by anfedorov 11y ago
Perhaps one could legislate that legally immaterial changes have to be kept in separate commits than legally material changes, and that those have to be as atomic as is reasonable.
67.
by anfedorov 11y ago
I think there's a good argument to be made that personally accumulated wealth spent on experimental projects such as this one is used better than if it were taxed and added to the relatively enormous federal budget. DoD yearly spend is
68.
by anfedorov 11y ago
I imagine the NSA is a sophisticated enough actor that prosecuting anyone related to them would be pretty futile. We can certainly wish that everyone be equal under the law regardless of resources, but that's simply not the case in pra
69.
by anfedorov 11y ago
Oh, good point, thanks for explaining. I did think it strange that a prosecutor was implying he was part of the judicial branch, and chalked it up to not being familiar with the German judicial system. Still, I think it's better to lim
70.
by anfedorov 11y ago
Oh wow, that's actually a great articulation what he stands for. It still seems like a superset of open source, i.e. that open source advocates believe in a subset of those ideals, and often for practical in leu of ideological reasons.
71.
by anfedorov 11y ago
Non-paranoia theory: the state wants to make an empty gesture to appease the unruly masses upset about unpopular laws without actually changing them. What a show! Granted, I am not familiar with German systems for changing laws, but if we d
72.
by anfedorov 11y ago
Can you expound on why not? He certainly preached of open source software (and a superset of it) long before anyone else was thinking along those lines. With regard to Free Software, he is still before his time.
73.
by anfedorov 11y ago
It's probably legal, but it hasn't yet been tested in courts: https://www.torproject.org/eff/tor-legal-faq.html.en
74.
by anfedorov 11y ago
> safely bypass surveillance from across the world Is this true, for a global passive adversary? If all of the nodes which route your link go through a friendly IC that shares ToR traffic patterns, I'm pretty sure traffic analysis c
75.
by anfedorov 11y ago
And sometimes you have these curtains open? But what about privacy? Do you agree that sometimes people being able to look into your living room is not a big deal, even if it decreases your privacy by some definition? Great, then you agree t
76.
by anfedorov 11y ago
Entropy that changes when your local IP does? That's worse than useless for ad targeting. Even if it were useful, I don't think there's much of a chance that adtech companies will build out STUN servers to handle the kind of
77.
by anfedorov 11y ago
Privacy is not an absolute to be maximized at all costs. Do you have blacked out windows, or do you concede that the practical day-to-day infringement of your privacy is so minuscule and so easily mitigated by window shades that it's n
78.
by anfedorov 11y ago
> a random guy on the internet says something and you think it is true? Yes, if they identify themselves and their company and what they say aligns with my personal experience. > You don't have the foggiest idea what they are rea
79.
by anfedorov 11y ago
And by "exactly that purpose" you mean preventing ad fraud [1], right? They weren't using WebRTC to put you in a "VPN user" advertising segment. 1. https://www.reddit.com/r/netsec/comments&
80.
by anfedorov 11y ago
Good point re: VPN [0]. The example you point to is not a tracker, though. Looks like the Tor bundle disabled WebRTC about two years ago [1] [2]. I think a VPN user would expect the WebRTC connection to be routed via a VPN, as well, but I&#
81.
by anfedorov 11y ago
The external IP is leaked, too! Clearly this peer to peer encrypted video protocol needs to be restricted, for the good of privacy and security, of course. Sarcasm aside, what good can 192.168.1.4 possibly be to anyone?
82.
by anfedorov 11y ago
Not at all equivalent, because code isn't meant to be human readable, but computer interpretable. Because of these different goals, computer code is actually quite a bit harder to read than a well structured academic paper. I think pro
83.
by anfedorov 11y ago
Heuristics like that are a dangerous thing. Have you seen the line of reasoning used in the paper before, and what is the error?
84.
by anfedorov 11y ago
An expert would be able to skim it, recognize the path of reasoning as something he's seen a before, and narrow down on the error quickly. Reasoning about something by how many "waves in the community" it has made is a defere
85.
by anfedorov 11y ago
Nope. An expert would be able to skim it, recognize the path of reasoning as something he's seen a before, and narrow down on the error quickly. Reasoning about something by how many "waves in the community" it has made is a
86.
by anfedorov 11y ago
OK. Then you put a journalist in the video, who makes sure it wasn't staged, and we trust them because their careers depend on their integrity.
87.
by anfedorov 11y ago
What about moving to a board position, like Bill Gates or Alexis Ohanian? You're still part of the company, but don't have to worry about day-to-day...
88.
by anfedorov 11y ago
The two researchers say that even if their code makes it easier for malicious hackers to attack unpatched Jeeps, the release is nonetheless warranted because it allows their work to be proven through peer review. Huh? If they have a video
89.
by anfedorov 11y ago
People who don't understand what public crypto is, or the details of the mathematics behind it?
90.
by anfedorov 11y ago
What's the best way to follow a lawsuit? I'd be curious what happens to this one: http://www.courthousenews.com/2015/03/23/happy-birthday-a-ca...

More ›