ghughes

12 ms·

61.
by ghughes 6y ago
Not developing features that pretend secure remote computation is a real thing.
62.
by ghughes 6y ago
Signal's increasing reliance on SGX is the elephant in the room. They keep announcing new features that require sending your cryptographic keys to someone else's "super trustworthy" computer.
63.
by ghughes 6y ago
Cloudflare and Fastly should step up and add this header for all domains by default. That would probably be enough to kill this idiotic mal-feature.
64.
by ghughes 6y ago
This is common, it essentially means “don’t cache this”.
65.
by ghughes 6y ago
That thread between FB & Apple is fascinating. The potential solutions being discussed have significant implications: 1. Apple: "not support eTLDs in PCM and only support TLDs" - so no more ad attribution for multi-tenant doma
66.
by ghughes 6y ago
This is interesting in that it positions security engineering as an that is to be
67.
by ghughes 6y ago
Avoid for now if you use django-cachalot; one of the monkey patches is broken in Django 3.2.
68.
by ghughes 6y ago
This quote says nothing at all. Obviously the perp is someone with intricate knowledge of their network. They might as well come out and say they have well-developed evidence that the perpetrator has an IQ over 50.
69.
by ghughes 6y ago
It’s not a google scale market
70.
by ghughes 6y ago
That’s great. I have similar stories. I burned some CDs with an autorun executable written in VB6 that would play a certain Rick Astley number at maximum volume until the user logged off. Left them lying around with various enticing labels.
71.
by ghughes 6y ago
10 years ago, yeah. https://en.m.wikipedia.org/wiki/JailbreakMe
72.
by ghughes 9y ago
Thanks for writing this up; it was something of a wake-up call from a recent bout of fanboyism, and I found myself agreeing with most of your examples. I'm still learning and I haven't found any of these things to be dealbreakers
73.
by ghughes 9y ago
> Publishers shouldn’t know what people are interested in until they actively go to their pages. Yes, that privilege is reserved for Google.
74.
by ghughes 9y ago
Care to illustrate your point with an example? I’m wondering what kind of “unnecessary complexity” you’re talking about.
75.
by ghughes 9y ago
Who made this?
76.
by ghughes 9y ago
Can you talk a bit about why you chose Ubiquiti over eero?
77.
by ghughes 9y ago
I hear Intel's PR department is hiring, if you're interested.
78.
by ghughes 9y ago
GP's statement is fairly accurate and so is yours. All mainstream news outlets are competitors in the online ad market, and The Guardian is about as good as you get in terms of independence and objectivity.
79.
by ghughes 9y ago
> We show that this bias holds across multiple populations (college students, MTurk respondents, shoppers at a local mall, and participants from a large, income-stratified online panel) MTurk workers are incentivized to answer quickly, n
80.
by ghughes 9y ago
> My worst fear is that Coinbase is insolvent. Surely they would have to be thoroughly pwned for that to be true? They claim that 98% of customer funds are in cold storage, and they ought to be raking it in on transaction fees and with B
81.
by ghughes 9y ago
I can attest to this. I filed a ticket over a week ago because I'm locked out of my account. It took them 8 days to reply with a canned response, then 5 more days to say they don't have an answer for me yet because they're so
82.
by ghughes 9y ago
Money quote: > It has been clear to us that the current bitcoin network is completely incapable of functioning as a payment processing network, not just for "cups of coffees" but even for multi-million dollar transactions, and
83.
by ghughes 9y ago
Or in other words, they are listening, just not to your voice. Their product is an intelligence-gathering apparatus that works at scale without microphones or other traditional surveillance tools.
84.
by ghughes 9y ago
Link to the original report: http://www.politico.com/story/2017/10/05/john-kelly-cell-pho...
85.
by ghughes 9y ago
And on iOS there’s no way to see them without triggering the copy/paste menu.
86.
by ghughes 9y ago
It's the other way around.
87.
by ghughes 9y ago
Amazing work. If you like this, check out Multi Theft Auto and San Andreas Multiplayer, two mods that add online multiplayer support and scripting capabilities to GTA Vice City and San Andreas. MTA:SA even adds a map editor that works insi
88.
by ghughes 9y ago
That’ll be nice for some lawyers. I’d prefer to see severe civil and/or criminal penalties for the senior management folks who allowed this to happen on their watch. Expect many more breaches of this magnitude until C-levels start to f
89.
by ghughes 9y ago
IANAL, but I'm not sure that you are correct. The agreement refers to claims "arising from or relating to the subject matter of this Agreement or the Products", and the title of the agreement is "TrustedID Premier Terms
90.
by ghughes 9y ago
I doubt you’d get very far trying to negotiate this with any employer that has a legal department.

More ›