daxelrod

15 ms·

91.
by daxelrod 7y ago
My point is that it is possible for your password manager to sandbox regex execution at least as well as your browser does. I totally agree with your concerns about scope creep increasing the attack surface.
92.
by daxelrod 7y ago
I too have worked at a roboadvisor and to my understanding (as an engineer, not a financial advisor), its advice was more complex and useful than how you describe Wealthfront works. I haven't personally used Wealthfront so I'm not
93.
by daxelrod 7y ago
> In order for them to be trusted with full control of your money, they would have to be satisfied with growing their profit simply by increased customer base and not want to increase profit per customer. > It is just a matter of time
94.
by daxelrod 7y ago
> Wealthfront tries to sell how advanced they are, but it's mostly a re-packaging of what Vanguard has been doing for decades. Can you elaborate on this? My understanding is that Vanguard provides a variety of passively managed fund
95.
by daxelrod 7y ago
Counterpoint: if you allow your browser to run JavaScript, it’s already executing arbitrary regexes it finds on the Internet.
96.
by daxelrod 7y ago
Holy crap, thank you! I’ve been trying to remember the name of Rom Check Fail for years so that I could play it again.
97.
by daxelrod 7y ago
This only works when the app has already been granted camera access.
98.
by daxelrod 7y ago
While the cases in which a court could compel you to provide your password are much narrower, note that they still do exist. https://arstechnica.com/tech-policy/2017/03/man-jailed-indef...
99.
by daxelrod 7y ago
October 15 of what year? https://knowyourmeme.com/memes/ok-boomer identifies it being used on Twitter as early as April 2018, with a surge in popularity in Jan 2019.
100.
by daxelrod 7y ago
That's my point. Every Unicode character may not be universally appropriate, but it's just as silly to age-rate a dictionary as it is a keyboard that simply contains a list of Unicode characters.
101.
by daxelrod 7y ago
That sounds awful. Do you have a sense of how much of this was due to how Twitter is designed as a medium vs due to the culture formed by the people who tend to use it? I know both of these factors feed each other, but I ask because I’ve no
102.
by daxelrod 7y ago
Thank you for listening and reconsidering based upon feedback.
103.
by daxelrod 7y ago
Continuing this metaphor: what age rating would you give to a dictionary containing the word "fuck"?
104.
by daxelrod 7y ago
Your threat model should also include your VPN provider's ISP.
105.
by daxelrod 7y ago
Counterpoint: BoFA can invest in tech that makes sense for its specialized use case that Amazon never would.
106.
by daxelrod 7y ago
When setting workplace norms, there may be a substantial difference between discussing, for example, social issues, policy, partisanship, governance, and ethics. Depending on context, any of these may be "politics". It feels uncha
107.
by daxelrod 7y ago
https://emojipedia.org/right-pointing-magnifying-glass/ is part of Unicode Emoji 1.0 https://unicode.org/Public/emoji/1.0/emoji-data.txt as 1F50E and it's represented on the page no
108.
by daxelrod 7y ago
Sudo works by being setuid root. You need some way of becoming root to set that in the first place.
109.
by daxelrod 7y ago
Pretty sure they do. Part of the point is that they can revoke the signature once it’s found to be malware, and likely the signatures for everything associated with that developer account.
110.
by daxelrod 7y ago
I had a Treo from Cingular, it had absolutely no restrictions on installing programs. The preferred way to do so was generally by HotSyncing them from a desktop, but that wasn't any sort of developer mode, it was just how things were d
111.
by daxelrod 7y ago
Samsung made Apple panels long before OLED was used in iPhones.
112.
by daxelrod 7y ago
My favorite way to do that has been to indicate “Not a blocker” to differentiate nits that I’m picking from things that would make me not approve the review.
113.
by daxelrod 7y ago
The attack that I believe fwip is concerned about is: Alice sends an email to Bob and clearsigns the message. Bob, or anyone else who intercepts the email is now able to paste that message into the form and remove Alice's key from the
114.
by daxelrod 7y ago
My alternatives are to break my lease or get all of my packages at a P.O. box. Even if I never purchase a single item from Amazon, all packages sent to me from anyone go into the Hub.
115.
by daxelrod 7y ago
This is a very broad assertion about laws that may differ from state to state. It gets even more complicated when you try to answer what "on your own time" means for a salaried worker, and when you consider the broad IP agreements
116.
by daxelrod 7y ago
Farming, landscaping, gardening.
117.
by daxelrod 7y ago
The apartment building I live in already has a business deal with Amazon. Not for appliances, but for an Amazon Hub Apartment Locker. https://www.amazon.com/b?node=17337376011 I get an email with a pickup code to the email
118.
by daxelrod 7y ago
If you’re an alcoholic, a bar may be one of the hardest places for you to resist.
119.
by daxelrod 7y ago
It depends on your definition of “kill”. OpenSolaris -> Illumos Hudson -> Jenkins OpenOffice -> LibreOffice MySQL -> MariaDB (not killed, but forked out of fear it would be) And a non-Oracle example: Node.js -> IO.js (arguabl
120.
by daxelrod 8y ago
Can you elaborate on how you see this as an integrity problem? A new malicious version was released; at no point did the attackers represent their new release as the same code as the previous release.

More ›