delroth

16 ms·

121.
by delroth 6y ago
Some of the recommended steps like removing machine-id to prevent fingerprinting are especially funny when the rest of the article perfectly describes how to get your system in a completely uniquely fingerprintable state via obscure knobs m
122.
by delroth 6y ago
> 1). This group of modders was planning on profiting from their hack That's wrong, or at least unsourced and unsupported by current facts. > 2). Copyright exists and generally must be enforced lest the holder wishes to lose thei
123.
by delroth 6y ago
And 1/4 (Safari) already only implements declarative request blocking, and has done that for years while being touted as the alternative for privacy conscious folks.
124.
by delroth 6y ago
Aren't you basically describing big.LITTLE, which has been standard in most mobile SoCs for years now? (And was probably introduced in Android before iOS.)
125.
by delroth 6y ago
You cannot run any internet service without collecting personal information. IP addresses are personal data per GDPR, and by serving TCP connections you are collecting IP addresses of your clients. In the case of DNS, your DNS query is also
126.
by delroth 6y ago
> To protect our users from these types of attacks Google Account sign-ins from all embedded frameworks will be blocked starting on January 4, 2021. (emphasis mine) So I don't follow how this would have anything to do with banning
127.
by delroth 6y ago
My understanding is that there are certain legal requirements associated with content moderators who may have to review illegal content, especially around child abuse / sexual imagery. This is what I've been told in the past by fr
128.
by delroth 6y ago
Repository mirror: https://archive.softwareheritage.org/browse/origin/directory...
129.
by delroth 6y ago
No, it does not.
130.
by delroth 6y ago
Do you realize that a single reprocessing plant releases more than 10x more tritium in the ocean yearly than the amount currently contained at Fukushima? This has been happening safely for decades, under constant monitoring for impact on fi
131.
by delroth 6y ago
Browser extensions have the benefit of being more resilient against phishing (since they can perform origin checks), which I would definitely recommend for most users.
132.
by delroth 6y ago
As far as I can tell, there is nothing in the writeup that suggests the file wasn't there from the beginning and present on all Cloud SQL instances. I know this was a standard practice in a few of the products I worked on where we expe
133.
by delroth 6y ago
This is blatantly wrong. Apple's CPU and GPU designs have been years ahead of Qualcomm/Samsung/... for years now, especially regarding single core performance. Check any mobile device benchmark.
134.
by delroth 6y ago
You're generalizing your own opinion. If I could buy an iPhone and run Android on it, I would do that. Instead I'm stuck choosing between good hardware with crappy OS (Apple) vs. outdated hardware with an OS that fits my needs (al
135.
by delroth 6y ago
I don't know where you're getting your info from, but Google salaries in Switzerland are extremely competitive with California. The average for software engineers at Google Zürich is around $300K at L5 I'd say. And the housin
136.
by delroth 6y ago
Instead now you have most online services allowing you to pre-download the game (and often the day 1 patches too if any) and just do a quick install on release day. The experience isn't significantly worse, it's just different. Ev
137.
by delroth 6y ago
Or rather "we give you the option to work flexibly and be present either mornings or evenings and still get benefits". My employer provides breakfast and dinner in the office, and I don't think I actually know anyone who is p
138.
by delroth 6y ago
2FA that actually carries a payload to verify like Duo will be much harder to exploit, indeed. As to whether making your life harder for routine system administration tasks will actually make stealing your personal data harder, I still have
139.
by delroth 6y ago
If you've got persistent malware on the machine (-> keylogger), 2FA with a hardware key will barely help. The malware can just notice your "sudo" call, pass through your password + 2FA token to its own "sudo" inv
140.
by delroth 6y ago
This is cargo-cult hardening without specifying a threat model. Some of the things in there make no sense in most contexts -- for example, logging in as root on a tty to perform administrative actions because you might have an X11 keylogger
141.
by delroth 7y ago
How do you measure "is it worth" without a good idea of the risks and costs involved in the decision making? Just because it doesn't directly answer your question doesn't mean it's not applicable. In fact, I'd
142.
by delroth 7y ago
Nintendo's emulators are usually equivalent to what the state of the art was 15-20 years ago. They have plenty of bugs, usually fixed with duct tape and game specific hacks. They are designed to run the set of games they sell and nothi
143.
by delroth 7y ago
Counting the GameCube and the Wii as two consoles is kind of cheating, the Wii is barely more than an overclocked GameCube with an irrelevant OS running on the side exposing some I/O through a fairly well defined I/O interface. Th
144.
Monitoring and Tuning the Linux Networking Stack: Receiving Data (2016)(blog.packagecloud.io)
3 points by delroth 7y ago|0 comments
145.
by delroth 7y ago
Just because law enforcement asks for it doesn't mean Google has it. They might just ask for it because many companies actually do keep that data, but Google provides in its privacy policy some fairly strong guarantees on data deletion
146.
by delroth 7y ago
For example, because I don't want people to have to sign a CLA to contribute patches to my weekend side projects? That's incredibly dev hostile.
147.
by delroth 7y ago
> most have not complained the OSS releasing process is heavyweight Citation needed. I have been at Google for 6 years and I have seen many people either 1. quit in frustration at our OSS policy; 2. stop contributing to OSS projects on t
148.
by delroth 7y ago
Do you see any other alternative than trust for such a system? - Building a fully local system will not provide the same coverage and doesn't allow sharing findings across users (which means that when a new phishing page appears, it wi
149.
by delroth 7y ago
The N one or the G one? They're both surprisingly similar to the Nix configuration language: https://nixos.org/nix/manual/#ch-expression-language
150.
by delroth 7y ago
> I exclusively use the unstable branch on all my Nix/NixOS machines. I rarely do rollbacks. But it's important to note that I'm a developer with commit access, so I can basically "just" fix things if they'r

More ›