dane-pgp

86 ms·

901.
by dane-pgp 4y ago
The point being, the FIDO Alliance reserves the right to blacklist any device that an attacker manages to extract the secret keys from, which has the consequence that 99,999 other people have their devices bricked. Also, the Alliance could
902.
by dane-pgp 4y ago
> Laptops and modern computers also contains a TPM The root of trust for which extends to who knows where, and you're not allowed to look at the source code or learn how it works because that would threaten Hollywood's profit m
903.
by dane-pgp 4y ago
> additional layer-7 context about identity, ... more identification of you Mass surveillance. You can just say mass surveillance.
904.
by dane-pgp 4y ago
> that key cannot be reversed to get the original features "As a result, the early common belief among the biometrics community of templates irreversibility has been proven wrong. It is now an accepted fact that it is possible to re
905.
by dane-pgp 4y ago
> Can Apple/Google/Microsoft ever block/ban my account, preventing me from logging into my bank, etc If you don't accept their 10,000 word ever-changing terms of use, and if don't let them check for the marks on
906.
by dane-pgp 4y ago
> For some types of web apps (e.g. interactive games), it might require JavaScripts I can't help imagining that the correct fall-back implementation here is to make the game turn-based instead of real-time, although even a game as s
907.
by dane-pgp 4y ago
I don't want to further derail this thread by bringing politics into it, but let's just say that the term suddenly started being used a lot in news headlines starting in around 2016: https://www.salon.com/2016&#x2F
908.
by dane-pgp 4y ago
But "gaslighting" and "literally" fill completely different semantic niches! I feel like you're literally gaslighting me by suggesting that. /s
909.
by dane-pgp 4y ago
> the problem is that Google promotes people for "solving hard problems" So you're saying that the incentives misalignment at Google leads to engineers who aren't self-deprecating, and products which are self-deprec
910.
by dane-pgp 4y ago
Perhaps we need better tools for helping manual code review. Detecting high-entropy strings would be a useful semi-automated check to find obfuscated code and accidentally-committed secret keys. I think there should also be a culture of en
911.
by dane-pgp 4y ago
> 1) You need to get Microsoft onboard Given the work they are (ironically) doing on open source supply chain security[0], it would be embarrassing if they didn't end up implementing something similar for apps in the Windows Store.
912.
by dane-pgp 4y ago
Are there plans to integrate it with something like Crev[0] for tying trusted code/security reviews to the binary artefacts? I suppose the people you trust to audit some code will likely not be the same people you trust to do build ver
913.
by dane-pgp 4y ago
The "last modified" date is 2003, but the story supposedly dates back to 1998. Either way, its criticism of neural networks has not aged well: > Any automatically trained net with more than a few dozen neurons is virtually imp
914.
by dane-pgp 4y ago
> We chain the third attack with a fourth one against the implementation of the key exchange protocol on Telegram’s servers. This fourth attack breaks the authentication properties of Telegram’s key exchange, allowing a MitM attack. &
915.
by dane-pgp 4y ago
> The next step is nobody is going to use web applications anymore. Well, we should certainly be wary of falling into the trap known as "Service as a Software Substitute (SaaSS)"[0], but in principle it is possible for a web ap
916.
by dane-pgp 4y ago
That makes me wonder, how big does the gap have to be between a supposed prophecy and the supposed fulfilment of that prophecy before we can't call it "self-fulfilling" any more? I suppose that on a time scale of thousands of
917.
by dane-pgp 4y ago
> In evidence submitted to the UK’s parliament, network operator BT Group, which owns EE, said Private Relay would pose “significant challenges” if it is needed to block websites or services under the UK’s planned internet safety laws. H
918.
by dane-pgp 4y ago
Right, it's an unhelpful qualifier. I'm reminded of the comments of chemistry experts about the UK government using the phrase "military-grade nerve agent"[0]. Firstly, no military would ever admit to owning the stuff (
919.
by dane-pgp 4y ago
It might be possible to have a multi-layer identity system, where at the top level we have face matching and social vouching to implement uniqueness, and then we add a layer of zero knowledge proofs to allow people to mint new identities fo
920.
by dane-pgp 4y ago
> If you had to stake a tiny amount of money for each comment, I think it would reduce spam and trolling. I disagree with this unpopular idea so I'm going to mark it as spam...
921.
by dane-pgp 4y ago
I think that Sortition might be viable for an upper chamber of a bicameral legislature. Basically the (proportionally) representatively elected career politicians in the lower chamber would become experts at law making, and build up reputat
922.
by dane-pgp 4y ago
> the most disturbing part. Your natural reaction to this is based on sound moral principles, and I think those same principles were at work when the 3rd Amendment was written. Here's an article that tries to draw a parallel betwee
923.
by dane-pgp 4y ago
Well, customers who take holidays would have days when they don't transfer any data (assuming they turn off their router/modem while they're away) and customers whose connection is broken because of faulty ISP equipment would
924.
by dane-pgp 4y ago
If we survive long enough to make a self-sustaining colony on Mars, I would think that transporting humans to Mars could happen cheaply enough that basically everyone could afford it. For example, Elon believes that Starship's launch c
925.
by dane-pgp 4y ago
> Price: Free daily puzzles on mobile, $12 for full game > Platform: Windows (reviewed), Mac, iOS, Android I guess making it work in a web browser would be too difficult?
926.
by dane-pgp 4y ago
I think this is a great idea. Similarly ISPs should detect if they don't receive any packets from your connections for any 24 hour period, and refund you for that day.
927.
by dane-pgp 4y ago
> Why does he want to fix climate change? Is it because of all the harm it's causing (and will cause) for poor people in the Global South? Is it because of the injustice and inequality made worse by the climate crisis? Apparently no
928.
by dane-pgp 4y ago
> More generally, the SMART Copyright Act would give the Copyright Office a truly extraordinary power–the ability to force thousands of businesses to adopt, at their expense, technology they don’t want and may not need, and the mandated
929.
by dane-pgp 4y ago
> Numerous participants in our survey indicated a preference for not being required to use a smartphone, hardware token, or browser extension. We thus aim to allow users to use either a smartphone or a browser extension, based
930.
by dane-pgp 5y ago
I sometimes find myself wanting a Unix timestamp, or to convert one into a human-readable date, and usually it's simpler to go to an online tool than use time(1). It might be nice to have a command line tool which can guess from the ar

More ›