bonyt

24 ms·

241.
by bonyt 8y ago
I recently started collecting blu-rays. A lot of them are available for $5-6 and I like having a shelf and feeling some sense of ownership over them (bizzare DRM aside[1]). Best Buy has a bargain bin with some gems, Book-off in NYC has a n
242.
by bonyt 8y ago
Question: What is the meaning of life, the universe, and everything? Aristo's Answer: 42 Confidence: 36.98%
243.
by bonyt 8y ago
I wonder if the official MapKit one uses vector rendering? It looks like all leaflet can do is display pretendered tiles. EDIT: Oooh, https://github.com/mapbox/mapbox-gl-leaflet
244.
by bonyt 8y ago
It's amazing how hard it is to make something secure when considering side channels. Almost any bit of information can be used to extrapolate more - just consider this type of power-based attack, timing attacks, meltdown/spectre,
245.
by bonyt 8y ago
http://prior.sigchi.org/chi96/proceedings/desbrief/Sullivan/... is a fun read. At the time, the very concept of a UI on a computer was itself alien to many of Microsoft's target users - they did a
246.
by bonyt 8y ago
For patent litigation (fighting out infringement claims in court), I'd say it's mostly done by large general practice firms and medium-to-small boutique firms that focus on IP. For patent prosecution (drafting of patent applicatio
247.
by bonyt 8y ago
This was one of the reasons I went to law school after getting a CS degree. I now practice law, focused on patent litigation. My experience generally has been that the work is more varied, and there is more learning as opposed to mechanical
248.
by bonyt 8y ago
This is cool. I've got a couple Chromebooks where I re-flashed the firmware (SeaBIOS or, more recently, Tianocore UEFI) to get a full linux distro running, but it looks like this will get you full linux software with Chrome OS's s
249.
by bonyt 8y ago
Looks up to the OEM. “Requirement 10: OPTIONAL. An OEM may implement the ability for a physically present user to turn off Secure Boot either with access to the PKpriv or with Physical Presence through the firmware setup.“ https:/&#x2
250.
Microsoft is now selling ARM-Based Windows 10 Machines(windowscentral.com)
28 points by bonyt 8y ago|2 comments
251.
by bonyt 8y ago
To be fair, Windows RT (the locked-down ARM version) was discontinued shortly after Satya Nadella took over[1]. [1]: https://en.wikipedia.org/wiki/Windows_RT#Demise
252.
by bonyt 8y ago
I don't think the API gives actual train locations? It just gives an estimate of how long until the next train arrives. I've found that it is pretty accurate on some lines, but it feels like just a guess on others. I recently wai
253.
by bonyt 8y ago
I think the type of information you can get from other Pigeon users about delays would at least be more granular than what the MTA provides. The notices from the MTA are often late, sometimes wrong, and cover large areas. It might be use
254.
by bonyt 8y ago
If you find that kind of thing fun, there are a bunch of free online CTF-style "wargames" that involve exploiting software with intentionally added bugs in a sandbox. Not nearly as difficult and impressive as this kind of real in-
255.
by bonyt 8y ago
Traffic meant to go to 1.1.1.1 (cloudflare DNS) could be routed elsewhere. Since this is a common DNS server, this could be used to alter domain resolution for people that use it.
256.
by bonyt 8y ago
That's poking fun at a common contract clause called a severability clause[1]. The idea is that if one provision is held unenforceable (say, an unconscionable arbitration clause or limitation on damages), the rest of the agreement rem
257.
Facebook suspends 200 more apps in Cambridge Analytica investigation(washingtonpost.com)
2 points by bonyt 8y ago|0 comments
258.
by bonyt 8y ago
Sounds like the same kind of thing that happened with APFS encryption passwords recently, too. https://www.mac4n6.com/blog/2018/3/30/omg-seriously-apfs-enc...
259.
by bonyt 8y ago
I think you can add it to ssh-agent with ssh-add -s /usr/lib/.... But, it's acting funny for me, particularly if I remove the key.
260.
by bonyt 8y ago
Yeah, it's cool! A couple extra tips: - You can put "PKCS11Provider /usr/lib...." in your .ssh/config file (even tied to a specific Host block) to make it load the module automatically instead of having to use
261.
by bonyt 8y ago
Neat! Out of curiosity, the YK4 supports PKCS#11 in PIV mode, why use GPG instead of that? I use it for SSH all the time. For SSL, I believe that OpenSSL has a pkcs11 engine. https://developers.yubico.com/YubiHSM2/Usa
262.
by bonyt 8y ago
My parents are actually frightened of the new Apple TV remote. They hide it somewhere where they won't knock into it, because they know it'll switch the TV's input to the Apple TV, and they'll have to hunt down a differ
263.
by bonyt 8y ago
What ever happened to user-mode-linux (UML)? It seems like gVisor takes a similar approach, a "kernel" in userspace handling syscalls. I was playing with UML the other day, a UML kernel is still in Debian's repo and appears
264.
by bonyt 9y ago
You've still got to trust the software doing the encryption, and the other software on your machine that might be able to interact with the software doing the encryption (e.g., browser and other browser add-ons, particularly when using
265.
by bonyt 9y ago
You can pick this stuff up with a cheap RTL-SDR - it’s the ADS-B transponder on the planes. I believe services like FlightAware use this to track planes too. https://en.m.wikipedia.org/wiki/Automatic_dependent_surveill.
266.
by bonyt 9y ago
It's still useful for some applications. ATSC digital broadcasts in the U.S., for example, are in MPEG-2, as are the signals provided by many cable companies. I have an HDHomeRun Prime, and purchased the MPEG-2 HW Decoder license[1]
267.
by bonyt 9y ago
Here is an interesting dilemma: should HSTS persist in incognito mode? If not, then this becomes bad advice, because all the attacker has to do to disable HTTPS is not redirect http sites to https ones (sslstrip). If so, then the list of si
268.
by bonyt 9y ago
Well, sslstrip still likely works on websites that don’t use HSTS, or that you’re visiting for the first time. I suppose the HTTPS Everywhere plugin might mitigate this. Do any browsers try https first yet? Now that I think of it, I guess m
269.
The FCC just voted to repeal its net neutrality rules(washingtonpost.com)
6 points by bonyt 9y ago|0 comments
270.
by bonyt 9y ago
Expanding on that, zk-snarks[0], a kind of non-interactive zero-knowledge proof[1] are really interesting. They're used as the basis for the anonymous cryptocurrency zcash[2], where one can prove they haven't already spent an inpu

More ›