g_p

29 ms·

241.
by g_p 5y ago
I believe you're after https://sr.ht/
242.
by g_p 5y ago
You shouldn't use an HMAC here, since that's symmetric and the key sits inside the app. You should use public key crypto as you suggested - sign the serialised per-user information (technically you generally sign the hash of it, b
243.
EFF Client Erik Johnson and Proctorio Settle Lawsuit over Bogus DMCA Claims(eff.org)
6 points by g_p 5y ago|0 comments
244.
by g_p 5y ago
The problem would be establishing a web of trust of which PGP keys are valid, who still is "law enforcement", and whether they're on gardening leave or have retired etc. There's too many (US) law enforcement bodies to ma
245.
by g_p 5y ago
Great to hear, and nice work with the project so far! I think it definitely makes sense to focus on getting the minimum viable feature set ready first - the only reason for suggesting certificates was it seemed like the kind of area where a
246.
by g_p 5y ago
Yeah - I deliberately suggested engineering just to be controversial and test the idea, but I guess I'm thinking "any subject that isn't taught by a business school". A common pattern I've seen outside the US is a t
247.
by g_p 5y ago
> Technical people often lack communication skills and can lose the forest for the trees. This is definitely an issue in my experience. There's some who can communicate well. In cases where you don't have one of them though, th
248.
by g_p 5y ago
I wonder if there's a way to structure exec level employee incentives through accruing bonuses over longer periods of time, so that you get two impacts: 1. Bad managers who get "found out" in the longer term don't apply
249.
by g_p 5y ago
I wonder if the MBA would fare better if it was reset, and the roots as a masters degree were revisited - limit the entry routes so it becomes a pathway for postgraduate engineering education, after 10 years of industry experience, and thei
250.
by g_p 5y ago
> it's highly tied to the idea that you can run a company without understanding what the business actually does. I find this notion really interesting actually, as intuitively it makes no sense, yet it's clear this is what peop
251.
by g_p 5y ago
Playing the numbers really does seem to be the root of the issue - I've definitely seen occasions with too much focus on mantra-driven accountings practices (playing around shuffling beans from capex to opex), rather than on what actua
252.
by g_p 5y ago
In addition, these kinds of rules (in countries which have them) almost invariably do not apply to B2B sales, especially for machine to machine communications - at that scale the operator really only cares that they know which customer is f
253.
by g_p 5y ago
A trend I've noticed often among "business managers" (MBAs or wannabes) is to assume they can manage something they don't understand, then simply shift to the lowest common denominator of dollars and cents (or your local
254.
by g_p 5y ago
This looks very interesting. Is there any support (or plans) for SSH certificates? They help to manage some of the revocation and access control challenges, as well as the issues around trust-on-first-use and similar. (And also the fragilit
255.
by g_p 5y ago
Most of this guidance can be checked over by anyone with basic competency in the field, and cross referenced against documentation - in general a lot of the guidance from government security agencies is focused on solid and robust design pr
256.
by g_p 5y ago
Many private businesses already are expected to protect themselves from state (and similar capability) physical interference and attacks, especially if they are in the supply chain of critical infrastructure. It's one of the things you
257.
by g_p 5y ago
What you describe might be almost achievable using Android work mode, and an open source tool like Island - you can have a second instance of apps (like WhatsApp or signal or telegram) independent of the first instance, and you can turn wor
258.
by g_p 5y ago
Android phones can implement multiple user profiles at OS level, and these can at least provide security against cursory visual inspection. Ideally you'd use credential derived encryption for each user's storage area on the device
259.
by g_p 5y ago
In the UK, you can fly domestically without showing any ID (unless you check in luggage, where there's a cursory visual check against the ticket name). No ID is checked at airport security. On airlines that aren't trying to use na
260.
by g_p 5y ago
Part of the challenge is that governments tend to come and go on 4 or 5 year cycles, so their priorities tend to be focused on issues likely to (or certain to) happen before the next election or other democratic event. Governments often ass
261.
by g_p 5y ago
Yeah - of the 3 use cases heralded for 5G, enhanced mobile broadband (eMBB) is the one that has materialised so far. The other two (massive machine to machine communications, and ultra reliable low latency communications) were more intended
262.
by g_p 5y ago
Yeah, once TDD is implemented, things will get interesting for sure - also the CBRS band will open up opportunities for much lower cost radio devices that can have some "serious" range (i.e. small neighbourhood scale WiFi AP) - ma
263.
by g_p 5y ago
There's a new "G" every ten-ish years. Usually there is a lot of hype in the 2 to 3 years before the next G launches, at which point the early release standards are frozen. If equipment has a nominal 5 year replacement span,
264.
by g_p 5y ago
In essence you can build this using a software defined radio, and open source tooling like srsUE/srsRAN to decode the air interface packets [0]. The gotcha is you can't easily decrypt your own "data" over the air, as the
265.
by g_p 5y ago
Not even just that - in addition to imaging, write blockers should be used for evidential integrity as well.
266.
by g_p 5y ago
> Sounds like their EPC/packet core was compromised pretty seriously. Given the issues affected fixed voice, TV, and value added services like voicemail, I wonder if it was upstream of the EPC in the OSS/BSS environment like th
267.
by g_p 5y ago
When you dial a number, you generally look up the owner of the number range in a list, then initiate signalling contact with them. They may take the incoming messages, or they may point you towards another network the user can be reached on
268.
by g_p 5y ago
Rather than creating a central "government porting server", you could make this a "cost of doing business" of someone wishing to provide an email service to the public. In the event that an ISP or digital services provid
269.
by g_p 5y ago
Seems like hopefully an easy and obvious fix - no need for a fully open redirect here!
270.
by g_p 5y ago
It still uses localStorage - see the key "nyt-wordle-state" in the new site.

More ›