djao

6 ms·

31.
by djao 2y ago
Schnorr wouldn't have helped in this specific case, since Schnorr is equally vulnerable to biased nonces ( https://ecc2017.cs.ru.nl/slides/ecc2017-tibouchi.pdf ). EdDSA, which is essentially deterministic Schnorr, d
32.
by djao 3y ago
Now, to be fair, first-party MS Office also has this problem. The online versions can't handle absolutely everything that the desktop applications generate (although they do better than Libreoffice), and even compatibility between, say
33.
by djao 3y ago
Libreoffice tends to break on more complicated documents. For example this implementation of a CPU in Excel ( https://www.theregister.com/2024/02/02/16_bit_cpu_excel/ ) doesn't work in Libreoffice.
34.
by djao 3y ago
With all respect, only a very small minority of Windows users actually *need Photoshop for work.* If you are one of them, I fully agree, you need Photoshop. As for Word, I use Word (unwillingly) for work, and I am able to get what I need fr
35.
by djao 3y ago
1. Word works just fine in a web browser. Yes, it's not the full featured version, but I don't need the full featured version. 2. I know a lot of people even on Windows who use Gimp because they get more value out of using Gimp
36.
by djao 3y ago
I've not heard of build quality described as luxury. I think for most people functionality and bodily integrity is a basic requirement of a car, not a luxury item. You're not buying a new car every day. As long as you have one goo
37.
by djao 3y ago
Even if you use a scheme where the password never traverses the wire, the schemes still require the server to know what your password is in order to perform the authentication. So a compromised server still leads to compromise of your secre
38.
by djao 3y ago
It's a little bit more complicated than just sending a hash of the password, but there are ways to authenticate using hashed passwords without sending the password over the wire, for example https://en.wikipedia.org/wik
39.
by djao 3y ago
If a man in the middle relays a public key challenge, that will indeed result in a valid connection, but the connection will be encrypted such that only the endpoints (or those who possess a private key belonging to one of the endpoints) ca
40.
by djao 3y ago
As someone who knows people who died in a crash with another drunk driver, it is hard for me to accept your view. Certainly, at a bare minimum, the penalties for drunk driving that results in fatality should be much harsher than they are no
41.
by djao 3y ago
The payload is simply remote code execution. But we'll never know the secret knock that triggers it, and we can't probe existing servers for the flaw because we don't konw the secret knock. I imagine that we could in short or
42.
by djao 3y ago
Maybe they didn't have time to test? They could have been scrambling to make it into timed releases such as Ubuntu 24.04 or Fedora 40.
43.
by djao 3y ago
I'm with you except the part where you say to "simply go in." I see no reason why I should go in. The aggravation of interacting with a dealer is not worth the pennies I might potentially save (but only potentially, and only
44.
by djao 3y ago
The stable releases don't have this particular backdoor, but they're still using older versions of the library that were released by the same bad actor.
45.
by djao 3y ago
Tesla redefines luxury. Traditional luxury car snobs object mightily to this new definition. In a way, I can understand their view. If some new group of people comes in and redefines a word that you've been using for decades, then it&#
46.
by djao 3y ago
This is a straw man. We all agree that legally, one is allowed to pay the loan off early. The question is: do you lie to the dealer and say that you're going to finance, when you're not really going to finance? I once got a long
47.
by djao 3y ago
That may be strictly speaking true, but it conflicts with another equally important priority: I want to minimize interaction with dealers as much as possible, precisely because I find them reprehensible.
48.
by djao 3y ago
The point remains. If a Tesla is a privileged expensive purchase then so is the average new car. There is no possible way of refuting this statement. It is simply mathematically unavoidably true.
49.
by djao 3y ago
The point remains. If a Tesla is a privileged expensive purchase then so is the average new car. There is no possible way of refuting this statement. It is simply mathematically unavoidably true.
50.
by djao 3y ago
1. Leasing is like a car purchase but with mandatory financing where the true underlying interest rate can legally be obfuscated behind cryptic language that you can't understand. Quick -- is a "money factor" of 0.0074 an att
51.
by djao 3y ago
An apples to apples comparison means ... you should be picking cars that are roughly equal in price. You didn't. So it isn't an apples to apples comparison. You're contradicting yourself. Look up what the word "average&q
52.
by djao 3y ago
Even if you adopt that point of view, I still argue that not buying from a dealer at all is the best way to stick it to dealers, far better than becoming their customer and attempting to win at their game.
53.
by djao 3y ago
A Tesla Model S is definitely not the money saving option. The vast majority of Teslas sold are Model 3/Y. Compared to an EV, which has only tires, wiper fluid, and wiper blades -- yes, ICE cars have a lot more required routine mainten
54.
by djao 3y ago
I've never bought cars in the UK, but as I understand it, the standard way to "buy" a car in the UK is not actually to buy one, but to lease it. Leasing is its own category of hustle, entirely different from purchasing.
55.
by djao 3y ago
The first problem is automatically avoided if you didn't finance your car in the first place, as I am suggesting. For the rest, if you drive your car until it has lost all value, which is what I do, and typically takes 20 years, then t
56.
by djao 3y ago
Even pre-tax interest arbitrage opportunities are rare, never mind after-tax arbitrage. Think about it. If you can get 5% by depositing money in a bank, so can the dealer. If the dealer can get 5% by depositing money in a bank, why would th
57.
by djao 3y ago
We then fundamentally disagree on the principles that comprise honesty and integrity. I do not agree that just because something is in a contract it is automatically honest and ethical.
58.
by djao 3y ago
Actually, yes, I have a Tesla and use it as my only car. I am intimately familiar with the repair costs. An ICE car is about three times more expensive to maintain and repair. Tesla's service centers are on average overwhelmed with wor
59.
by djao 3y ago
By that token, there is nothing dishonest about a dealer selling you an extended warranty. It's all fair in the contract.
60.
by djao 3y ago
It's a stupid game because it's really really rare for this kind of arbitrage to exist in the system, especially if you do the computation correctly and count after-tax income rather than pre-tax income. In the rare instances wher

More ›