g_p

64 ms·

601.
by g_p 6y ago
While better than nothing, I'd argue a bug bounty is perhaps the opposite of what's truly needed - incentivising the finding of vulnerabilities is good, but it needs people to fix those. Alas, this is what happens when tech policy
602.
by g_p 6y ago
This is another real issue I've seen in some places, especially regions that are trying to "do" tech, but where it doesn't come naturally. It hurts me to watch systems full of broken incentives emerge and have money thro
603.
by g_p 6y ago
Part of the problem with the process is that, for various well-intentioned reasons, there's a major focus placed on delivering objective evaluation on any kind of funded research or work. Bureaucrats want to demonstrate the impact thei
604.
by g_p 6y ago
An application firewall on the device serves a different purpose to that running off-device, namely the ability to filter traffic based on the origin (or destination) application. Clearly if your kernel or userspace are compromised that&#x2
605.
by g_p 6y ago
I wonder if there's automated ad purchasing going on here, bidding against the keywords of the top app names in relevant categories? It seems that Facebook bidding on Signal keywords is unlikely to gain them much, as those searching fo
606.
by g_p 6y ago
There's often a business driven narrative for how the GDPR holds back smaller businesses. I believe this originates from how it's scarcely enforced, and much easier for Google or Facebook to ignore it and create 5 years of delays
607.
by g_p 6y ago
The Mac mini M1 can drive two independent screens - one over HDMI, one over USB C. The limitation seems to be number of screen outputs, and a laptop has one already built in, hence only 1 external.
608.
by g_p 6y ago
I believe any enforcement Ofcom do these days is reactive, and in response to reports from licensed operators. A lot of the new "shared" access licenses do not give guarantees of interference protection though, so I imagine Ofcom
609.
by g_p 6y ago
That's the one, progressive enhancement. A great principle, and nice to see they even think about Lynx accessing the sites [0] The post I was thinking about with the analysis of why JS/CSS shouldn't be assumed to work was [1]
610.
by g_p 6y ago
When considering whether spectrum is used or fallow, we really need to consider the location as part of the function - if a given block piece of spectrum is only used in large cities (say mid- 2GHz TDD band) for capacity in urban environmen
611.
by g_p 6y ago
The UK now has a "use it or share it" regime for operator spectrum. I can go and get prime operator spectrum if it isn't in use in my local area, and use it at certain agreed power levels. That license is just for one locatio
612.
by g_p 6y ago
Indeed, although there's a huge amount of the economy built upon small businesses building things and selling them to other small businesses, neither of which wants to deal with a subscription-based volume license deal. The factory I k
613.
by g_p 6y ago
It's only available through their volume license scheme. And therefore people will continue to use regular versions and suffer from these issues. Microsoft seems to have forgotten that small businesses (who don't want to deal with
614.
by g_p 6y ago
Gov.UK had a good article a while back (appeared on HN) where they pointed out the importance of designing for no JS. All official gov.uk sites that I'm aware of will work without JavaScript. They had an analysis showing how many % of
615.
by g_p 6y ago
There's also huge amounts of UK Govt infrastructure code available online and open source. For all kinds of things, from all departments. You could pretty much spin up the code needed to run the boring bits of a country out of open-sou
616.
by g_p 6y ago
Interesting question. I wonder if Google has a scale speed limit for an individual tenant's sites, or perhaps each URL? It seems that the underlying gov.uk page remained up throughout though.
617.
by g_p 6y ago
This has happened in the UK and Europe already, I believe. The UK definitely - research only counts if it is open access and deposited within a certain number of days of being accepted. Otherwise it doesn't "count" towards ev
618.
by g_p 6y ago
The new EU digital services act (and digital markets act) does much of what you suggest here. Worth taking a look at them, noting they're not final yet.
619.
by g_p 6y ago
Chat-based interaction certainly sounds like it could work for tech-focused events - I think for CCC one of the challenges is the sheer number of parallel talks, and keeping track of them. Pre-recorded talks definitely seems like the way to
620.
by g_p 6y ago
Thanks, I was thinking of the server-side AP Token system (i.e. the signed per-device authentication tags that confirm the firmware is up to date and able to be installed), but then ended up describing the Nintendo Switch fuse system. Indee
621.
by g_p 6y ago
Not really, by my understanding. Corellium is effectively providing a hosted virtual machine, presumably running on their own custom hypervisor, with their own management stack to give a convenient user experience. You "spin up" V
622.
by g_p 6y ago
Wallabag [0] may do what you require, with regard to having a browser extension to reduce friction when saving something. There's a bit of friction in getting the browser extension set up, but once you do so, it's there as a statu
623.
by g_p 6y ago
Thanks for this! Really useful to see how the experience went, and what worked as a speaker. I find the same issue with no audience feedback, but it is good to hear that you've already received mail directly. I guess the loss of in-per
624.
by g_p 6y ago
Out of interest, based on your comment from having done last year's as well, how did you feel the experience was as a speaker? A lot of the videos seem to be recorded by screen capture of live streams of screen captures, but I was wond
625.
by g_p 6y ago
The Schneier stream is pretty much unusable, although it seems that the conversation between the speakers is going fine, so the issue must be in the capture and/or streaming broadcast system. What's a shame is that it doesn't
626.
by g_p 6y ago
I think one root of negative sentiment comes from the real-time bidding (RTB) system. Under RTB, there's outward information exchange of a granular personal profile to an uncontrolled number of third parties, based around a taxonomy th
627.
by g_p 6y ago
I can definitely see this working for tech-savvy users on additional accounts. The problem with email is that it's still used/needed as the "universal" online way to establish/initiate correspondence with someone. I
628.
by g_p 6y ago
The specific problem on network equipment (i.e. Cisco) is actually that these "default" accounts are really backdoors, since they are not exposed in a list of accounts in the UI or shell interface. Therefore auditors will look and
629.
by g_p 6y ago
"Huge" is a tough one to quantify, but in speaking to a lot of the regulated sectors like legal, this is a big area, and one that people are waking up to. One part of the issue is most aren't even aware they're breaking
630.
by g_p 6y ago
As tech savvy users, showing actual from addresses would be a big step forward from the modern trend (thanks, Apple?) of showing only the display name of the sender. Sadly recent versions of thunderbird seem to default to this as well, but

More ›