baby_souffle

34 ms·

661.
by baby_souffle 3y ago
> Things have definitely changed here recently. At least in San Francisco, at-table terminals are now the norm in sit-down restaurants. Staff generally use the same device for order-taking and payment. I used to work in PoS industry. Th
662.
by baby_souffle 3y ago
> Cophones are VMs with virtual stacks How can this be determined? I'd imagine that only those with direct access to the "which number belongs to which provider" database could see that a given number belongs to $comapnies
663.
by baby_souffle 3y ago
> It also tells you with near certainty that the request is malicious and future requests from that IP can be blocked. So I can still use this to DDOS. My malware running somewhere on your network just needs to submit a bogus request fro
664.
by baby_souffle 3y ago
> Makes it impossible for anyone with a camera to put together a location database, but the car is still identifiable by law enforcement if necessary. Isn't it LEO that's deploying most of these systems? At least around here,
665.
by baby_souffle 3y ago
> It doesn't mean that having a cryptographically secure way to make requests more expensive to produce isn't a tremendous help. A malicious actor wouldn't bother. They'll tap `/dev/random` when it comes tim
666.
by baby_souffle 3y ago
> And the flaw here is that the proposal doesn't do enough. If that signed blob allowed you to uniquely ID the device it would help solve a lot more problems. This is more or less what the proposal does? It's akin to the same s
667.
by baby_souffle 3y ago
> Security people hate features and creativity. Not all of us. _This_ security guy just didn't like having to patch an entire fleet against a new critical exploit in the flash VM every week.
668.
by baby_souffle 3y ago
> To be fair it's only a matter of time until CV and NNs replace Webdriver/Selenium as the goto for scraping. First using accessibility APIs and later on imagine something you plug into USB C that emulates DisplayPort and HID d
669.
by baby_souffle 3y ago
> Why should sites be obligated to let anyone in? They're not. Depending on your competency, you have a _ton_ of tools at your disposal for filtering traffic ranging from basic throttle to sophisticated behavior/request profil
670.
by baby_souffle 3y ago
> Remember when Apple killed Flash? Yes. Every SECOPS person let out a collective sigh of relief when the weekly p0 patches for flash stopped coming. Apple may have been trying to push towards 'native' apps but that was almost
671.
by baby_souffle 3y ago
> Cryptography cant save us here, people will figure out how to send AI images to the crypto hardware to get it signed in months. Possibly (who am I kidding. *PROBABLY*!) will use chatGPT to help them design the method :)
672.
by baby_souffle 3y ago
Yes, but 11.7 has been the "stable" release: https://github.com/pytorch/pytorch/blob/main/RELEASE.md#rele...
673.
by baby_souffle 3y ago
There’s a million little features and tricks you can do but you’ll never stumble into them unless you’re actively googleing “how do I …”. You might look for some pcap based CTFs with walkthroughs to get exposure to some of the more unique t
674.
by baby_souffle 3y ago
So what if I choose to spend a decent amount of time and resources improving myself along other non software engineering facets?
675.
by baby_souffle 3y ago
> The Level1Techs KVM switches are rebranded Startech switches with 'dumber' firmwares whose dumbness affords better compatibility with niche DisplayPort features. Rextron [1] is the actual ODM. They don't do any direct t
676.
by baby_souffle 3y ago
This is my question as well. Is there a more nuanced way to tell how personal data is used other than confirming that an OpenAI key is or is not needed?