cbsmith

58 ms·

811.
by cbsmith 3y ago
I do not. None of the locks for my home are on a network where you can broadcast key updates either. I also tend not to have one key that can access my house, my car, my safety deposit box, my safe, my bike, my locker, etc.
812.
by cbsmith 3y ago
Yup. Instead they stop working because of rust, corrosion, wear & tear, or heat distortion from improper storage... There seems to be an obsession that if a digital key doesn't comprehensively solve all problems, it's terrible
813.
by cbsmith 3y ago
Convenience is a key aspect of security, but consider the scenario where you have to replace all your locks while you issue a new key... you have to keep the extant key valid for a longer period of time.
814.
by cbsmith 3y ago
...and from this you're concluding that keys are a broken technology? It doesn't seem realistic to expect to build a tool that nobody misuses.
815.
by cbsmith 3y ago
> Because they don’t really have any other choice. You get a key with the lock. Even if they all happen to be the same blank, it’s substantial work and expense to get them all keyed alike for most people. You have lots of other choices.
816.
by cbsmith 3y ago
I mean, if you're using a key to get in to countless physical things, then you have the same problem.
817.
by cbsmith 3y ago
Exactly.
818.
by cbsmith 3y ago
The same is true for physical keys for cars, houses, lockers, etc., which is why people have an intuition to test out keys to make sure that they work.
819.
by cbsmith 3y ago
There's plenty of support for testable SQL. There's just a long tradition of not using it.
820.
by cbsmith 3y ago
...and there are, and they're remarkably similar to what you do with Yubikeys: you have extra keys, and when you lose one, you uses the other to get in, and then you invalidate the old keys (although in the physical world, this means g
821.
by cbsmith 3y ago
> People are constantly losing their keys prolly about as much as people reuse the same password for multiple services. But when they lose their keys, they have a pretty clear mental model of the security risk and how to mitigate it.
822.
by cbsmith 3y ago
Which is the magic of UAF: you have one key that opens all the computing doors.
823.
by cbsmith 3y ago
The usual solution for this is to have multiple keys. It's logically equivalent to having a backup key, but it's more secure because if you lose a key, you can use another key to disable the lost key.
824.
by cbsmith 3y ago
> The security community really needs to get a grip and start designing systems that are compatible with the extremely low-tech-interest population if we even have a hope of securing systems. If I knew what the solution was I'd be r
825.
by cbsmith 3y ago
I feel old.
826.
by cbsmith 3y ago
Just acknowledging the Nils Olav Easter Egg.
827.
by cbsmith 3y ago
> Well we don’t know how many people falsify data because, if it goes undiscovered, we don’t know it happened. It could easily be that the rate at which data is falsified is quite low and we are good at catching it, or it is high and we
828.
by cbsmith 3y ago
Consider how many studies are being produced each day. That there is a story every day like this suggests that academia is making an effort to identify bad actors, but the frequency of discovery is actually quite low.
829.
by cbsmith 3y ago
Sorry for the typeoh in the above. Examples: compassion, loyalty, endurance/perseverance, social/independence, love/hate, trusting, cynicism/optimism, etc.
830.
by cbsmith 3y ago
> The resulting grooves tend towards virtue or vice. Virtue & vice are kind of an arbitrary way to device up those "grooves", and what constitutes virtue or vice varies by context/perspective. I would argue there are a
831.
by cbsmith 3y ago
You forget that their real business is ads.
832.
by cbsmith 3y ago
Absolutely.
833.
by cbsmith 3y ago
He's been the maintainer of glibc (still a developer), and a variety of other key bits of open source software. He's kind of famously abrasive/obtuse: https://news.ycombinator.com/item?id=2378013 . The paper w
834.
by cbsmith 3y ago
Yes and no. A lot of the concepts about memory management and how memory functions are still the same or similar. It's a good baseline to start with, and then look at how things have changed since then (they certainly have changed, but
835.
by cbsmith 3y ago
The most important stuff in this paper isn't the numbers.
836.
by cbsmith 3y ago
Yeah, there's a pretty famous history on this paper (and with Ulrich Drepper).
837.
by cbsmith 3y ago
"the very typeface you've been trained to recognize since childhood" Man, I feel old.
838.
by cbsmith 3y ago
Yup. The only thing we know for sure is they've developed new tactics/strategies/tools.
839.
by cbsmith 3y ago
A decade after Snowden's leak, and this still constitutes "news".
840.
by cbsmith 3y ago
It means the headline is not wrong. You're also kind of walking a fine line on the "No True Scotsman" concept...

More ›