eridius

8 ms·

61.
by eridius 7y ago
I mean, you just described mobile numbers. If someone calls my cell phone, the phone system has to figure out what tower I'm connected to and therefore how to reach me. That's roughly equivalent to figuring out what IP address the
62.
by eridius 7y ago
Looks like the Dell XPS 13 uses a single rectangular battery, though it still requires unscrewing the whole case, disconnecting a battery cable, and then unscrewing the battery, so it's not something you can do on the fly. The 2018 Mac
63.
by eridius 7y ago
If Apple were going to ditch the lightning connector on the iPhone I would have expected them to do it last year. More generally, the lightning port is actually slightly slimmer than a USB-C port, which is important. While the iPad isn&#x27
64.
by eridius 7y ago
Lightning cables have a computer inside them, that would destroy the cable.
65.
by eridius 7y ago
If you know the wifi environment of your intended victim, you could pre-configure it with the network in question.
66.
by eridius 7y ago
Opening up a terminal while the user is actively using their computer is going to be a huge red flag and give the whole game away. Presumably with a local attack, the attacker will wait until the user is distracted or away from their comput
67.
by eridius 7y ago
Ok, then whatever the equivalent is for landlines. I don't know how telephone numbers are assigned to particular physical lines, but however that's done, it can be changed.
68.
by eridius 7y ago
Correct. Apple doesn't make money off of your interaction with BofA either way. They care that you have the best experience and continue to use their platform, but whether you use bankofamerica.com versus a mobile app, it doesn't
69.
by eridius 7y ago
> Even if EV certs are not any better than DV at preventing phishing, they're better for investigating phishing. Except general phishing sites won't use them, which means they won't do anything for investigating phishing
70.
by eridius 7y ago
> The intent with EV was that the presence of its UI element--regardless of what it said--would confer trust. I don't see how you can say that. If I go to paypal.com and see "Joe's Pizza Shack" in the green text, th
71.
by eridius 7y ago
But it literally is the selling point. If customers aren't expected to see the green text in the status bar and implicitly trust it, then EV has no value whatsoever. Because 0.00000001% of people will actually click through to see anyt
72.
by eridius 7y ago
> Anyway letsencrypt already serves 80% of market. So it's already too big to fail, I don't see much difference between 80% and 100%. The difference is all the big websites still pay for certs, so if LE is distrusted then you
73.
by eridius 7y ago
I, for one, have absolutely no idea if my bank uses EV. Let me check... ok yeah they have it. But I would not have noticed in a million years if they got rid of it. The real security here isn't the cert, it's the fact that I use
74.
by eridius 7y ago
That's assuming you even get an EV cert though. EV failed because it didn't provide any benefit, as evidenced by sites like PayPal (which you would think is the poster child for EV) ditching it. Because it didn't matter to us
75.
by eridius 7y ago
You've got a bit of circular reasoning here. Phishers weren't using SSL before HTTPS Everywhere much because it didn't matter. Most users (and in particular, unsophisticated users that are more likely to fall for phishing att
76.
by eridius 7y ago
> The point of an EV is that it ties TLS authentication back to a legal identity. Ian even helpfully points out that that the two "Stripe" companies, his and the famous payment company, have different corporate filings. He eve
77.
by eridius 7y ago
> And even for well-known domains, https://www.xn--80ak6aa92e.com/ (currently still works in Firefox) How is it that this still works in Firefox? It's been fixed for years in all other major browsers. I'm ser
78.
by eridius 7y ago
Why do you claim Apple dislikes a decentralized tool for establishing identity? No part of Apple's business is even remotely related to what EV certs do, and the closest they come to "identity" in general is the recently-anno
79.
by eridius 7y ago
It sounds like you're describing IP addresses, except people don't type in IP addresses to go to their bank. They type in domains. In fact, phone numbers are absolutely the equivalent of domains, and the equivalent of IP addresses
80.
by eridius 7y ago
That trial wasn't a "statistically spurious event", it was a flawed trial > the reason the first trial came to an exaggerated impression seemed to be the number of patients who might not have fully progressed to SPMS Sto
81.
by eridius 7y ago
> Povey, 43, also wrote a 1,600-word essay about what happened, along with a treatise about how he believes white males are discriminated against in “this environment” and how he is expected to act like a “neutered puppy-dog." If
82.
by eridius 7y ago
Reddit is the poster child for why unfettered free speech is a huge problem for online communities.
83.
by eridius 7y ago
If I call you on the phone, I expect a synchronous response. If I text you, I expect an asynchronous response. It's ok if you get back to me 3 hours later (well, context-dependent). If I call you, ask you a question, and then you wait
84.
by eridius 7y ago
Presumably the article is talking about Canadian tax laws, whereas the parent is talking about US tax laws.
85.
by eridius 7y ago
Building new stuff is always more attractive to engineers than maintaining and incrementally improving existing stuff. Google suffers from this problem somewhat worse than most companies, where its best engineers jump to new projects and th
86.
by eridius 7y ago
You can go even simpler json_source_on_stdout | jq If you give `jq` no arguments it acts like `jq .`
87.
by eridius 7y ago
If you have `jq` installed then you can just pipe any JSON to `jq` and it will beautify and colorize it automatically. pbpaste | jq
88.
by eridius 7y ago
No but it's going to prevent a PR disaster when a phone's "Apple" battery explodes.
89.
by eridius 7y ago
You need good people before you can hire good people. If you don't already have any sysadmins on your staff, how are you supposed to identify the good sysadmin candidates from the bad ones?
90.
by eridius 7y ago
I'm willing to bet Apple has seen counterfeit batteries that claim to be Apple batteries and this is a reaction to that. The other stuff this article claims was designed to stop third-party repairs, such as the stuff to do with Touch I

More ›