brians

37 ms·

541.
by brians 10y ago
There are lots of faults. The software failed. The process that directed a helpdesk tech to install AV was a failure of some manager. The decision to engineer systems and networks in a way such that AV seemed like a good idea was a failu
542.
by brians 10y ago
For software critical to human life, test the rare code paths.
543.
by brians 10y ago
No. That changes whether the turbine is pitching up and down on top of the post, but doesn't change the fact that the turbine shaft is pulled out (or pushed into) the turbine with different force at the crossover point. That will crea
544.
by brians 10y ago
This is a common and dangerous mistake. The size and timing of requests is visible, as is the hostname. It is straightforward to watch a cafe and identify all the requests corresponding to Wikipedia, and within those the Tienenman Square
545.
by brians 10y ago
You might—I do. Your inverter won't power the house when the grid supply is down. Why? Well, because if the grid supply's down, it's probably because there's a line down somewhere. Therefore there's a lineman tr
546.
by brians 10y ago
It might be someplace whose laws don't recognize the authority of that court---say, Beijing. And now the US FBI has put a NIT on a non-US computer. That's a problem. It might be someplace that doesn't let governments use NITs
547.
by brians 10y ago
Well, we'll see. https://github.com/blinksh/blink
548.
by brians 10y ago
Figure that was probably a CDN, and you don't know the origin configuration
549.
by brians 10y ago
Yes. We call these "cells". Typically there are many more than two elements of the self-reinforcing complex.
550.
by brians 11y ago
Good question. Racket tries, and because it's Scheme gets a good part of the way. Mozart/Oz tries, with a different basis, and gets somewhere good. Visual Basic also seems quite close, especially with features like Linq.
551.
by brians 11y ago
That hardly seems necessary. Only so many objects have a foo method to find. With free cores, search from both ends and meet in the middle.
552.
by brians 11y ago
The only plausible NSL served on Reddit is for subscriber information related to a national security investigation. Reddit was compelled to provide the records they already had on some username's real name, billing details, and similar
553.
by brians 11y ago
Nonsense. Read https://www.law.cornell.edu/uscode/text/18/2709 ; you just can't twist that to compel a computer manufacturer to unlock a computer and reveal data. It's targeted at telecoms providers
554.
by brians 11y ago
Because NSLs are very tightly constrained. They're only for telecoms metadata and subscriber information, and they're only for national security use. There almost certainly were NSLs served on the shooters' phone companies---
555.
by brians 11y ago
No. That means you have up to date protection against being infected.
556.
by brians 11y ago
Yes! Some reliable ways to extract an RSA key, and some less reliable ways to swap two cache lines. Virtualization on x86 is a helpful tool for configuration management, but should not be mistaken for a security feature.
557.
by brians 11y ago
Octal. Aaaand they dropped one.
558.
by brians 11y ago
If the new software they are to write also tried 10000 pass codes, would that count?
559.
by brians 11y ago
What makes you think the US Gov't can't break in and take this, once Apple has built it? They'll have to QA it, it'll be on at least a handful of machines---and the order requires it be network connected. At that point
560.
by brians 11y ago
Reasonable engineering practice requires that that software be tested before it is used. If it is handed over untested, and bricks the unique device, Tim Cook is going to get found in contempt. The order as written says to only make one sp
561.
by brians 11y ago
That would involve lying to a court. Intelligence folks might do that. Law enforcement? Not a chance; it would be career-ending even to discuss it.
562.
by brians 11y ago
Yes. Lex/legis is law; litem is lawsuit.
563.
by brians 11y ago
Actually, yes. The vast majority of snail mail I receive is open catalogs and other junk mail. Its content is entirely public.
564.
by brians 11y ago
That does happen! Enable TLS 1.2 only and you're in pretty good shape. TLS 1.3 will drop more bad stuff and add a bit more good stuff.
565.
by brians 11y ago
Windows XP. Python through about 2.6. Java until quite recently. Old Perl code that I shudder to think about. <shudder> Oh, and some old Android. The Android version that started supporting SNI is apparently also the version that
566.
by brians 11y ago
At the time that was written, only the frontends did TLS---remember, there wasn't universal strong encryption or authentication within Google's back-end until after the Snowden leaks.
567.
by brians 11y ago
Nope. The symmetric crypto is basically free. The asymmetric crypto is cheap. IPv4 addresses cost. Most big sites can't quite go SNI-only yet. Soon! Customer support costs. Why would TLS involve more customer support? Because it's
568.
by brians 11y ago
No they haven't. There's no TPM in modern Apple computers of any brand. And there's certainly nothing like the NGSCB Nexus, which I'd think essential to calling something "literally Palladium."
569.
by brians 11y ago
Someone did! There's an editor for Emacs called Rudel that's supposed to work with the Gobby protocol. I've never gotten it working.
570.
by brians 11y ago
You are right: it allows active impersonation, but not passive eavesdropping.

More ›