eridius

86 ms·

871.
by eridius 8y ago
> As a software engineer in the tech industry though (especially at a place like Google), you can tell your employer to fuck off and you can find a new high-paying job tomorrow. A white or asian man can do that, sure. But that's n
872.
by eridius 8y ago
Getting the super easy case right doesn't justify completely failing at the entire fundamental premise of the feature, which is to inform viewers that an ad was paid for by a particular political entity. When anyone can buy an ad that
873.
by eridius 8y ago
No. "Iron manning" is stupid, it's just an excuse to dismiss a response because they weren't charitable enough towards your flawed argument. Strawmanning is bad too of course. But responding to a reasonable interpretati
874.
by eridius 8y ago
So what you're saying is, because a senator could conceivably be running ads, then any ad that claims to be by a senator should be approved without scrutiny? Besides being preposterous, that same argument applies to literally anybody i
875.
by eridius 8y ago
Agreed. For iOS, the rollout was so smooth that most people weren't even aware it was taking place, with the only observable effect being that the iOS upgrade took a bit longer than usual. For the macOS rollout, there were more hiccups
876.
by eridius 8y ago
There are so many bugs that I've caught in code review that would not have been caught by automated or manual testing. Two big reasons for that: 1. Automated testing is still written by a human. A human who doesn't understand th
877.
by eridius 8y ago
According to the article, a step isn't skipped because it had a transient failure, it's skipped because it returns a special error code ENOSYS that means the syscall hasn't even been implemented, and therefore there's no
878.
by eridius 8y ago
You know what I hate more than code review? Shipping bugs. The author of this piece admits that they have to change the code they write in response to comments. This means the code review is flagging areas of improvement. Surely the resulti
879.
by eridius 8y ago
I don't know a single person that is awake at 6am. Where does this "most people" claim come from?
880.
by eridius 8y ago
I'm not sure what your point is. If you're aware that an embargo exists, then you're aware that patches are already being worked on . Telling the world that a vulnerability exists in a particular product, without knowing the
881.
by eridius 8y ago
There's a hell of a lot more different between the families you described then whether they used spanking.
882.
by eridius 8y ago
All spanking is child abuse. Full stop. From what you've described, there is zero reason to believe that the spankings your peers in the strict Muslim and Christian homes was a factor in their later success.
883.
by eridius 8y ago
Wow that's pretty awful. I kinda get the rationale for breaking embargo and disclosing information about a vulnerability to the world. I don't agree with it, but I at least understand why someone might think that's a reason
884.
by eridius 8y ago
Would it have been possible to tell Theo "hey, a serious issue is going to be released at <deadline>. I know you have a big release coming up. I strongly advise you to delay the release by a week so you can properly react to the
885.
by eridius 8y ago
There's not really any motivation for people with access to GrayKeys to confirm things that GrayKey has said. I would imagine that GrayShift frowns upon its clients talking publicly about GrayKey, so there'd have to actually be a
886.
by eridius 8y ago
Why are you accusing the parent of suggesting Apple is in the wrong for hindering GrayKey's efforts? They didn't say that. The question is whether an employee has an ethical obligation to their former employer to disclose security
887.
by eridius 8y ago
The tweak made to ARM pointers is a protection against return-oriented programming attacks. While it's conceivable that GrayKey's operation relies on attacks of this nature, in all likelihood this is not the answer.
888.
by eridius 8y ago
Why would it be unethical to get a job trying to break the security you previously helped implement? Security is not accomplished via obscurity so it's not like there's a trade secret issue here. Really the only problem I can thin
889.
by eridius 8y ago
Given that customers themselves had access to the beta, if that were true it would have been pretty easy for someone else with access to a GrayKey to refute that.
890.
by eridius 8y ago
The storage is encrypted using keys known only to the secure enclave on the device (and those keys cannot be extracted from the secure enclave). If you remove the storage, it's useless.
891.
by eridius 8y ago
During the iOS 12 betas it was reported that GrayKey was able to operate despite USB Restricted Mode. No information was given as to how though.
892.
by eridius 8y ago
If the very first thread that's created has to do some bookkeeping that the other created threads rely on, what happens if you create a second thread at the same time as the first one? Or in other words, what happens if you don't
893.
by eridius 8y ago
Every single action that was available in the contextual menu (hidden "behind the ctrl key") was supposed to be available elsewhere as well, typically as an actual app menu item.
894.
by eridius 8y ago
I'm not about to try it right now (don't want to mess up my contacts) but I'm pretty sure you can just tell Siri that "suchandsuch is my wife" and she'll update the relevant Contact cards for you.
895.
by eridius 8y ago
On the contrary, we already expect Google to try and monetize its users any way it can.
896.
by eridius 8y ago
When you rename yourself on GitHub, their Help says they put in redirects for all of your repositories (that last until such time as someone else claims your old name and creates a new repository with the same name as one of your old reposi
897.
by eridius 8y ago
What happens if the CA change was an intentional change by the server and not the result of an attack?
898.
by eridius 8y ago
How does client-side hashing solve the "server shouldn't have the password" problem? Doesn't that just make the hash into the real password? It may solve the problem of password reuse across different sites, but it doesn
899.
by eridius 8y ago
Most users will just happen to be dependent on cloud providers for DoH not because of anything inherent to DoH, but because at the moment only cloud providers are offering DoH-enabled resolvers. If you don't like this, then instead of
900.
by eridius 8y ago
DOH does not rely on cloud companies. The requirement for DOH has nothing to do with cloud companies "try[ing] to insert themselves as middleman". You certainly could argue that ESNI should be used even if DNS isn't done over

More ›