delroth

25 ms·

181.
by delroth 8y ago
Most bad actors doing abuse at scale have access to large networks of proxies on residential or mobile IPs, usually backed by malware on workstations, laptops and mobile phones. Even as a newcomer without the right contacts on the black mar
182.
by delroth 8y ago
Your sources disagree with your statement. In [1]: > The updated version of Google’s code of conduct still retains one reference to the company’s unofficial motto [2] is not about Google and explicitly says: > Google, which will going
183.
by delroth 8y ago
Open https://abc.xyz/investor/other/google-code-of-conduct.html and ^F "evil". You should verify your facts before repeating provably false information.
184.
by delroth 8y ago
herself
185.
by delroth 8y ago
Does it matter if Helm is pushing auto-updates?
186.
by delroth 8y ago
It's also pretty easy to contribute to FOSS projects on your own time, as long as you're OK with Google being the owner of your contributions (I personally don't care since it's open source licensed anyway). https:&#x2F
187.
by delroth 8y ago
Other view on this: if you have a job as a SWE at Google, you might have had to relocate to a different country where you are not super well integrated (for example, only basic knowledge of the official language). Leaving your job might mak
188.
by delroth 8y ago
It does, and all the technical details mostly match up. From the plausible attack vector (targetting the BMC with an implant) to CG animations of a compromised motherboard showing the implant at the exact spot between the BMC and its firmwa
189.
by delroth 8y ago
We try to keep up, but the truth is that it's a 15 years old C++ codebase implementing some weird hardware in even weirder ways. We're far from where we'd want to be code quality wise -- close to no automating testing infrast
190.
by delroth 8y ago
Many FPGAs can load their bitstream from Flash.
191.
by delroth 8y ago
Seems like the title got changed as usual for something generic and meaningless. I think the news here is that Google released a new "Site Reliability Workbook", downloadable for free for a month.
192.
by delroth 8y ago
What do you mean, "stays an April's Fool"? There are circuit schematics as well as software for it, all available under an open source license: https://github.com/google/mozc-devices/tree/master
193.
by delroth 8y ago
Hindsight is 20/20. I guess nobody should ever do anything because it always has a tiny chance to go wrong? The coach probably didn't even take a wrong decision based on the information available at the time (it isn't rain se
194.
by delroth 8y ago
https://www.lexpress.fr/actualites/1/styles/protection-des-d... tl;dr: a non-profit got fined 75K€ because their website leaked 42,562 private documents from their users. Anyone could modify numbers in the UR
195.
by delroth 8y ago
Similarly, SPDY was not compatible with HTTP2 before the standard was finalized, but then Google quickly switched to the standard once it was available. I don't think there is too much to worry about there.
196.
by delroth 8y ago
Do you have evidence that people coming on an H1B visa get paid less than their non-H1B coworkers (at same level / same seniority / same office) at Google?
197.
by delroth 8y ago
Google has https://peering.google.com/ for that purpose. My understanding is that it provides similar tooling for ASNs that have a relationship (peering, etc.) with Google ASNs.
198.
by delroth 8y ago
> Who greenlit this. > “We understand if this is disturbing -- it is designed to be. This is a thought-experiment by the Design team from years ago that uses a technique known as ‘speculative design’ to explore uncomfortable ideas and
199.
by delroth 8y ago
Google has ~always had chat, email, and phone support for most of their paid-for B2C products. For products like Pixel it's even integrated in the settings UI for example. https://support.google.com/pixelphone/answ
200.
by delroth 8y ago
How does providing the source code help with proving trust? You don't know that the service is actually running the source code that was published. If you're willing to believe that the service matches the published source code, w
201.
by delroth 8y ago
The nice thing with the console hacking scene is that the people doing actual useful work and the people causing drama are mostly disjoint sets.
202.
by delroth 8y ago
On that same web page: > We don't correlate or combine information from our temporary or permanent logs with any personal information that you have provided Google for other services. Of course, all of that is meaningless if you wan
203.
by delroth 8y ago
> Things like “12573238458 bytes / 22 days in Mbps” used to do the unit conversions and print the answer. https://i.imgur.com/pun2Jnm.png
204.
by delroth 9y ago
How do you know how much Waymo's approach rely on maps vs. vision? My expectation would be that maps are really only used for "macro" navigation but anything beyond that (lanes, avoiding obstacles, etc.) would be done on the
205.
by delroth 9y ago
What attack vector would be mitigated by switching to a stronger hashing scheme for this specific use case? And are there other mitigations that exist for this attack vector that would be more appropriate? To me is seems that this feature o
206.
by delroth 9y ago
Wouldn't this still be subject to confirmation bias? As in: you'd be more likely to notice advertisement that is related to a word you pronounced recently, since you would be training your brain to look carefully for these words.
207.
by delroth 9y ago
Disclaimer: I work at Google, not on cloud. I think this is just coincidence though. Apple most likely performs their own layer of encryption on top of what Google already does. They protect against two different attack scenarios: Google do
208.
by delroth 9y ago
I currently work at Google, and from what I know and have seen about how we handle privacy internally I'd be really surprised and appalled if that was the case. Mind sending me more details? My nickname @google.com. Anonymous reporting
209.
by delroth 9y ago
Meh. Timing issues become almost irrelevant in a world where consoles have dynamic clock scaling, deep sleep modes, etc. Games are usually not written around specific timings anymore. Bugs and errata can be a concern (I think I remember som
210.
by delroth 9y ago
Recent consoles are well abstracted from the hardware. The only case where this is usually not true is the GPU, and it's rare to have something completely custom there nowadays (the 3DS and its weird PICA chip is very much the exceptio

More ›