gnfargbl

18 ms·

301.
by gnfargbl 2y ago
> I am speculating here, but it seems like DoE must believe that anything beyond simple shapes may provide bad actors (i.e. anyone but US Govt and allies) clues as to how to build a thermo-nuke. And with good reason: https:/&#x2F
302.
by gnfargbl 2y ago
I'm not contemptuous or mocking, and I'm sorry it came across that way. I am annoyed at having my time wasted by what I feel is a clickbait article. Given the article title, the accusation of straw-manning is really unfair. Your
303.
by gnfargbl 2y ago
There's a lot of detail about why the author thinks it is notable that Sandia released this image. There's very little about what it is in this image itself that the author finds interesting, save for some comment about a dip whic
304.
by gnfargbl 2y ago
If the story here is that the US DoE is now implicitly confirming common public-domain knowledge that can be found immediately on Wikipedia then sure, that's a story of minor interest. That story is nothing like the title of the blog,
305.
by gnfargbl 2y ago
Yes. And as you'll know, since we both read the article, the author mentions what I believe to be the correct conclusion: > The “obvious” answer, if my above assertions are true, is that it must not actually represent a thermonucle
306.
by gnfargbl 2y ago
OK, but my question remains: what is it that the author thinks is particularly unusual about this image? I'm not a nuclear scientist, but I did study nuclear physics to master's level. To my eye, there's nothing at all inte
307.
by gnfargbl 2y ago
What is it that the author thinks is particularly unusual about this image? Pretty much every schematic of a Teller-Ulam type weapon -- a schematic which you will find in every introductory Nuclear Physics textbook -- shows a large cylinder
308.
by gnfargbl 2y ago
Indeed. You could buy https://www.tesco.com/groceries/en-GB/products/251618381 , for instance, which is a perfectly good razor and costs 70p per unit. Assuming one lasts you a week, that's £36 per year. M
309.
by gnfargbl 2y ago
I was repeatedly asked to categorize a colour that I can only honestly describe as turquoise, as either green or blue. At the end of this process, I was told that I had failed to recognize turquoise. How silly.
310.
by gnfargbl 2y ago
Part of good engineering is having a solid understanding of your business domain and being able to spot things that just don't smell right. An experienced professional software engineer on an industry standard salary, having been provi
311.
by gnfargbl 2y ago
I'm sure that these groups are producing specifications, and I'm sure those specifications are being followed to the letter (and perhaps even being validated as such). The problem is that the spec only ever contains about 80% of r
312.
by gnfargbl 2y ago
> Almost all problems occurred at interfaces between companies (prime vs. sub, customer vs. prime) or between different groups within the same company, where one group misunderstood what another group was doing, or at actual mechanical
313.
by gnfargbl 2y ago
Sure, but that's the same argument I'm making: the unit of blocking will be the largest unit that is routinely allocated to a single user. In IPv4 space that's a /32, so people block by /32. In IPv6 space that'
314.
by gnfargbl 2y ago
Well, that's the answer. Thank you.
315.
by gnfargbl 2y ago
I really think this solution is underrated. Port knocking is robust, doesn't use any special technology, and servers using it can't reasonably be scanned for. The only real disadvantage is that any passive observer can see your kn
316.
by gnfargbl 2y ago
We have two perspectives, the normal user and the scraper. The normal user either acquires a /64, /56 or /48, depending on the whim of their ISP. There is typically no cost difference between these options, which means that t
317.
by gnfargbl 2y ago
They already do. The IPv6 public routable prefix is the first 48 bits, so a /48 is what ~everyone uses as the analogy of the v4 /32, for rate limiting purposes.
318.
by gnfargbl 2y ago
Well, it's a very usable language which is strongly typed (by any layman's definition), easy to pick up, easy to get stuff done in, relatively easy to live with and easy to maintain. If it's hyped then it's only in the s
319.
by gnfargbl 2y ago
It feels extremely strange to see Go described as a "hype" language. It was somewhat hyped around seven years ago, which is when I started using it almost exclusively. Before that, it had a strong hype peak about fourteen or fif
320.
by gnfargbl 2y ago
Or attempting to discourage it from becoming a pile-on.
321.
by gnfargbl 2y ago
Ausco Products do indeed appear to still be making these brakes. Here's one of their retrofit systems for Land Cruisers: https://www.auscoproducts.com/wp-content/uploads/2023/03/102...
322.
by gnfargbl 2y ago
Then the author needs to take a properly scientific approach and measure why that is, rather than waving their hands about.
323.
by gnfargbl 2y ago
Indeed. If the attack works by exploiting (reliable) TCP re-ordering algorithms in the server then why also bother with (unreliable) IP fragmentation? Just send a larger number of out-of-order TCP packets, surely?
324.
by gnfargbl 2y ago
Is that so unreasonable? If I agree to forward someone's mail you would probably expect me to do some basic sanity checks in order to establish whether I am likely to be forwarding IRS documentation or anthrax. Why does the internet al
325.
by gnfargbl 2y ago
That's just the classic attack/defence asymmetry though, no? When playing defence you have to find every reachable vulnerability. When playing attack, you have to find one.
326.
by gnfargbl 2y ago
It didn't read as particularly diplomatic to me. In particular, this paragraph.. > It is possible today for security tools to balance security and reliability. For example, security vendors can use minimal sensors that run in ker
327.
by gnfargbl 2y ago
10TB/day is, roughly, a single saturated 1Gbit link. In technical bandwidth terms, that is the square root of fuck all . The crazy thing here is that the target site is content to pay ~$700 for the volume of traffic that you can move
328.
by gnfargbl 2y ago
Exactly. In our household Alexa is used for playing Spotify, switching some lights on and off, and as an intercom. There is absolutely no chance that I am paying a subscription for a device that is pretty bad as an intercom, and only okay
329.
by gnfargbl 2y ago
Given the harm that Crowdstrike caused Microsoft here, it does seem like they missed an opportunity in not calling this tool Blue Falcon.
330.
by gnfargbl 2y ago
They haven't leaked anything even if they do have a capability, because we can't know what they did. From a Bayesian point of view the information we gained here does nothing to help us distinguish between potential alternatives l

More ›