fay59

10 ms·

61.
by fay59 5y ago
My understanding is that the NCMEC actually has the pictures, and they’re basically the only people in the US who can legally hold onto them.
62.
by fay59 5y ago
The government will have to overcome the same issues compelling NCMEC to add pictures to its data set that it would have to overcome with Apple. Additionally, by compelling the NCMEC, the government cannot increase the scope of searching or
63.
by fay59 5y ago
> One of the most powerful arguments in Apple’s favor in the 2016 San Bernardino case is that the company didn’t even have the means to break into the iPhone in question, and that to build the capability would open the company up to a mu
64.
by fay59 5y ago
Given that enforcement is only possible on photos uploaded to iCloud, the fact that classification happens on device seems like a distinction without a difference.
65.
by fay59 5y ago
Has anyone ever publicly talked about controls on user data access at Google? There’s several folks defending Google here, but employees’ goodwill above sont number of people who have access will almost necessarily fail at some point.
66.
by fay59 5y ago
Mac OS 9 has virtual memory (it uses virtual address translation and it can swap pages to disk), but it still has a single address space that is shared between every application.
67.
by fay59 5y ago
You could have saved yourself a fair amount of embarrassment with just a little bit of reading. Apple can’t decrypt beacon locations. https://support.apple.com/en-ca/guide/security/sece994d0126/...
68.
by fay59 5y ago
Genetic determinism is pseudoscience that is generally associated with eugenism and scientific racism. Giving this much importance to genes is a fringe belief.
69.
by fay59 5y ago
Given the extremely short supply of telescopes deserving naming, it’s absurd to think that anyone who doesn’t have a telescope named after themselves has been erased from history. What you’re defending is James Webb’s immaculate memory. Ple
70.
by fay59 5y ago
These attacks are reported to have long-lasting consequences. That would be (I think?) incompatible with mass hysteria or nocebo effects.
71.
by fay59 5y ago
It’s in a very precise midpoint between Notepad and an IDE that preciously few other text editors stand in.
72.
by fay59 5y ago
Security fixes are backported with some frequency, but new mitigations are usually not. If a bug is made inexploitable by a mitigation in the latest OS, older OSes that have the same vulnerable code can probably be exploited, even though th
73.
by fay59 5y ago
No, you’ve missed the point. It’s still much better to have a trap than “any other imposed behaviour” because the compiler can reason that this condition is impossible on the happy path and remove code accordingly. Removing code is both amo
74.
by fay59 5y ago
You could also take a measured approach and, like rust, just define signed overflow to wrap. UB and its current interpretation is not worth whatever small sliver of performance the current implementation of LLVM appears to give you.
75.
by fay59 5y ago
That's not a good take. Compilers love UB because it signals unreachable code, and unreachable code can be removed and/or its surroundings can be simplified. If UB was instead defined to trap, most optimizations that are made poss
76.
by fay59 5y ago
Have there yet been reports of the AI writing code that has security bugs? Is that something folks are on the lookout for?
77.
by fay59 5y ago
They have to load it before first unlock by definition, and at this point I don't believe that it would be possible to establish persistence. Restart your phone when it's handed back to you by people you don't trust.
78.
by fay59 5y ago
It’s always been known that your carrier has access to your unencrypted cell traffic (including voice and text) and that carriers are slimy. You’re also protected by using secure services over IP. I think that the set of people for whom thi
79.
by fay59 5y ago
One of the points brought up by privacy folks in review of Apple’s plan to have your ID in your digital wallet is that the mere convenience of allowing access to ID may create ID requirements for users where none existed before, which is a
80.
by fay59 5y ago
I have no idea what people use to mine cryptocurrency these days and quite frankly I would rather it all stop, so no, I’m not saying that.
81.
by fay59 5y ago
I absolutely despise cryptocurrency, so this may not be accurate, but my understanding is that they’re only reliable if many independent people mine. If NVIDIA kept all its GPUs and mined Bitcoin instead of selling them, it could control mo
82.
by fay59 5y ago
The problem is that not having the library usually means you also don’t have the headers, so you can’t compile the C code that would use it. What you’re talking about isn’t impossible, but it probably requires either a binary distribution b
83.
by fay59 5y ago
I’m assuming that instructions to disable the AirTag are basically instructions for how to take off the battery.
84.
by fay59 5y ago
There's a good point to make that Patreon's donation tiers mean patrons can be rewarded for their donations. I would hope that the digital equivalent of a tip jar is a different category since it's not a purchase.
85.
by fay59 5y ago
I completely disagree. The developer offers the same version of their game for free to everyone. Donations are solicited, but people who donate don't receive anything in return. In-app purchases have value to developers to verify payme
86.
by fay59 6y ago
I don’t remember the exact controversy, but I remember some controversy during the Obama years where a prominent US company complied with some censorious Chinese requirements. Obama said something along the lines of “I wish you’d come to us
87.
by fay59 6y ago
You're right that in the end, the FSF does not have to produce anything of value. However, that is literally the rock bottom of standards to hold an incorporated entity that receives donations. The problem with the FSF being stagnant a
88.
by fay59 6y ago
To say that the FSF failing is different from people not caring enough, you have to define the goals of the FSF in a way that it can succeed regardless of whether people care about it or not. I don't think that this is possible, and th
89.
by fay59 6y ago
This definitely riled up a lot of people. The comments point out many flaws, but I’m not seeing rebuttals to what I find to be the core arguments: * The overlap between what the FSF thinks a majority of users want and what they actually wan
90.
by fay59 6y ago
What is non-sketchy offensive cyber-security to you?

More ›