g_p

33 ms·

301.
by g_p 5y ago
The problem when dealing with government or public works is that the provider simply isn't better at estimating that probability, since they aren't empowered to bulldoze ahead. The contractor can accurately price in (and insure ag
302.
by g_p 5y ago
It's not accomplishing a lot, but it just plays into making it harder to logistically do the grey box imports. You need multiple SIM cards going into your pile of devices, you need to have someone in the original market working with yo
303.
by g_p 5y ago
The OEMs' justification for this is to try to make it harder for greybox importers/resellers or box shifters to tamper with the firmware on phones. It's not unheard of for modified firmwares with malware to get put onto phone
304.
by g_p 5y ago
Kafkaesque?
305.
by g_p 5y ago
To add a data point, the UK makes available 3.8 to 4.2 GHz spectrum on a local basis (with some transmit power limits), nominally for "verticals" and private networks. Not aware of any issues with radio altimeters, but the power l
306.
by g_p 5y ago
> Is there any past examples of investment/crowdfunding for a lawsuit, where the investors earn returns if a lawsuit succeeds? Sounds like you're describing litigation funding (a fairly established market). You'd probably
307.
by g_p 5y ago
You can also create an apple ID, and get no-cost software from their app store (and update preinstalled ones) without a payment method, according to this article which is pretty recent. I did this myself many years ago and it worked. https
308.
by g_p 5y ago
Compared with a button based yubikey, someone else can't trivially tap this one if it's left behind, as you say. From a threat model perspective, biometrics are far from perfect. This setup avoids disclosing the biometric to the h
309.
by g_p 5y ago
Indeed - the lack of backups in WebAuthn is a design feature (although I can see credible usability issues in online services where users should really enrol several, but struggle to keep them in different locations and ensure they register
310.
by g_p 5y ago
In essence, you require both the Yubikey in question, and the information supplied by the fingerprint reader to the Yubikey, in order to abuse this system. From the perspective of a U2F token, which uses a regular button, this is an increas
311.
by g_p 5y ago
Yes - eSIM is just the same keys used in 3GPP, but distributed differently. You could do a "SIM swap" to a traditional SIM in exactly the same way, using phone customer support or retail store IT.
312.
by g_p 5y ago
Even better than this, large sites have found they actually made more from non-targeted ads [1]. Same for the NYT - revenue continued growing after turning off ad exchanges for European visitors [2]. There's also the question around
313.
by g_p 5y ago
Very true, but I guess from a probabilities perspective, you're highly likely to encounter a stationary car in the driving lane (i.e. a badly parked car). I can't think of a time I've driven and not encountered this, and it&#
314.
by g_p 5y ago
Similarly curious - my understanding is that Tesla w/ FSD effectively drives as a relatively selfish and "reactive" driver, theoretically dealing with anything entering its driving path. I'd also be interested to know if
315.
by g_p 5y ago
> Would also be interested to know if there's a way police could work with Tesla or other autopilot carmakers to broadcast special codes like don't-hit-us-here-is-our location, or just send a signal blocking autopilot, or whate
316.
by g_p 5y ago
I wonder if Tesla FSD is properly considering a windowed sample of images at a high enough sample rate to see modern high intensity strobe lights used on emergency vehicles. Clearly the dash cam used is sampling at a high enough rate to see
317.
by g_p 5y ago
Good idea RE the TPM event log - that should show the definitive perceived hash of the option ROM. Will need to see if I have any computers that require an Option ROM - somehow I suspect shipped-with-Linux Dell XPS laptops aren't going
318.
by g_p 5y ago
The "default" boot chain is using a Microsoft CA key, but you can easily change it. In fact, the "root" for your system is the platform key, which is most probably signed by your OEM. Pragmatically speaking, I'd be
319.
by g_p 5y ago
An idea I just had around this, for if you run your own PK/KEK/DB chain - is it feasible to "dump" these Option ROMs? If so, you should be able to whitelist their sha256 hashes in your DB database, since the DB can conta
320.
by g_p 5y ago
Plaintiffs appear to be the Rhode Island employees' retirement fund, and the City of Warwick retirement system, as investors in the business.
321.
by g_p 5y ago
I believe in some areas there was a shortened, truncated form of the public key being used as an "address". If a device went offline and was forgotten about (but still trusted), an impersonator spoofing the same (truncated) public
322.
by g_p 5y ago
One rather effective way to get much higher (approx 99%) on iOS is to use a DNS over HTTPS provisioning profile (or app), and use a DNS server that blocks ads. If you run your own server, you can get to 100% by turning on blocking for a cou
323.
by g_p 5y ago
It seems that increasingly, companies are asking users to break the golden rules of security they once preached (or are breaking them for users). Once they were told to never under any circumstances share their password with anyone else. No
324.
by g_p 5y ago
Indeed, I have definitely seen an increase in "convenience" or "time" driven offerings for private healthcare - usually focused around opening hours or "avoiding waiting". Some seemed to be trying to deliver NH
325.
by g_p 5y ago
> Will these tests be covered by the NHS? The marketing copy on the website seems to suggest this is for private healthcare ("All your private healthcare needs in one app") I will be interested to see how this goes, because the
326.
by g_p 5y ago
There's a few negative results journals now - https://www.negative-results.org/ for example. The only concern I have around a disincentive to not publishing is that in some fields, the peer review process can be quite
327.
by g_p 5y ago
GDPR in Europe makes a number of provisions for under-18s, including data removal I believe. This is likely an attempt to get ahead of enforcement of those rules by privacy groups.
328.
by g_p 5y ago
It seems like the previous browser antitrust ruling in Europe was 2010, with the browser ballot screen being required until 2014. Given the scale of the fine Microsoft received after breaking their agreement by breaking the ballot system an
329.
by g_p 5y ago
I wonder from a technical perspective how many of the bad developer experiences like this are arising almost entirely from a lack of continuity between app reviews. A number of commenters have pointed out their experiences in resubmitting t
330.
by g_p 5y ago
The UK's competition/antitrust regulator (CMA) is investigating online platforms just now, and is specifically looking at whether the switching cost is a factor that furthers the case to argue for a monopoly and anti-competitive s

More ›