gnode

81 ms·

781.
by gnode 8y ago
I think you're missing the point. The operators of these sites are not interested in respecting user choice. I'm sure they're aware that the most ergonomic thing to do, and arguably the only legal thing to do, is to present u
782.
by gnode 8y ago
> now they need to try every possible private key to see if they can open our encrypted SNI. The idea was to have a single common introductory keypair which all tenants publish to their DNS, in order to encrypt the SNI. That way there is
783.
by gnode 8y ago
Forgive me if there's some flaw I've overlooked in this approach, but couldn't you use DNS to aid in this? I.e. add Bob's public key to the DNS for fight.club which you get for free in round trips, as you're resolvi
784.
by gnode 8y ago
Doesn't really save you anything; DTLS still involves a connection with a handshake, so you have increased latency and memory overhead. Its usefulness is in low latency transport where head-of-line blocking would be detrimental (e.g. r
785.
by gnode 8y ago
In my opinion we don't want TLS at all, but rather a UDP based protocol, so that the latency advantages of DNS aren't lost. I believe DNSCurve solves this.
786.
by gnode 8y ago
You're missing that you're a technically skilled individual, and most browser users are not. The design decisions must cater to the unskilled, because they will not opt in manually. By default most OSes will use their ISP's D
787.
by gnode 8y ago
Ironically, some amount of centralisation can improve privacy. Security is about confusion and diffusion; to get lost in a crowd you need to not be differentiated, and to not be the whole crowd. Encrypted SNI would mean ISPs could tell you
788.
by gnode 8y ago
> Only because it causes collateral damage? But why do I care Because the collateral damage may not be worth it. The website a handful of dissidents use may not be worth blocking everything running on Cloudflare for all your citizens, fo
789.
by gnode 8y ago
> but I refuse to let anybody know that I want to communicate with Bob That's not the problem though. You're not trying to stop an eavesdropper knowing you're communicating with a particular server, but rather which hostna
790.
by gnode 8y ago
I think a better term is financially independent. I would say a better definition of being rich is having plentiful wealth such that you enjoy freedoms well above what's typical of the general population, or ones personal expectations.
791.
by gnode 8y ago
That's not riches; that's status. They often go hand-in-hand, but it's important to not confuse the two, as the article mentions.
792.
by gnode 8y ago
There seems to be little point of doing this, in my opinion, when SNI doesn't secure the hostname.
793.
by gnode 8y ago
AI Winter was referring to how the potential of current AI methods is limited, and aren't going to naturally evolve into artificial general intelligence. However I don't think it matters in this case. There are still many untapped
794.
by gnode 8y ago
> I think the bigger power consumption for standby phones is RAM. Looking at this analysis, it seems the cellular radio is the largest consumer of power in standby, with RAM being minimal: https://www.usenix.org/legacy&#x
795.
by gnode 8y ago
Yes, although if we're talking about improvements in RAM density (lithography improvements) rather than just putting more equivalent RAM in a machine, then that tends to mean lower power consumption per bit.
796.
by gnode 8y ago
I think in light of recent processor bugs, there's also an argument that software protection is easier to patch than hardware protection.
797.
by gnode 8y ago
It's relative. ring 3 / the hardware isn't guaranteed to be free of vulnerabilities either. What probably has the most bearing on the securability of a platform is its simplicity, which is on WebAssembly's side.
798.
by gnode 8y ago
It may just mean that nothing is stopping a person marking their account as a bot (maybe in jest) and posting with it manually. Alternatively it may just be semantics. Are fictional characters "people"? Does "person" imp
799.
by gnode 8y ago
It's important to consider that the workers wouldn't have to replicate the tech tree of the past. With access to all industrial expertise, as assumed in the question, what could be done more efficiently, or what could be done to b
800.
by gnode 8y ago
From the premise of the question on SO: > For convenience, we assume that the humans would not age or die during their participation in this experiment. Not dying will come in very handy when handling the chemicals.
801.
by gnode 8y ago
Are you disregarding the hypothetical assumptions of the question? Particularly that the people would not tire, age, or die, and already have all required knowledge. Or, is your argument that the tasks involved in building an 8086-level com
802.
by gnode 8y ago
I agree that the letter could be written in a less threatening manner, but the specific questions are required, in my opinion. If you ask someone whether they are complying with the law, you're likely to just get an inconsiderate &quot
803.
by gnode 8y ago
I don't agree that this is trolling, even if it is a fishing expedition. The primary purpose appears to be to probe for GDPR compliance, which is a valid expectation of customers and prospective customers (Europeans at least).
804.
by gnode 8y ago
No; it applies to EU residents, and they don't have to be citizens. From Article 3 (2): "This Regulation applies to the processing of personal data of data subjects who are in the Union"
805.
by gnode 8y ago
That's not actually true; nodes can be non-exit and relay only. This helps insofar as to reduce the relaying load on the exits too.
806.
by gnode 8y ago
I wonder how regulators would look at this practise. It would depend on whether taking away formatting and any image / video content counts as degrading. For some people this is desirable, but for others it may not be. My interpretatio
807.
by gnode 8y ago
Yes, but this is in an article about people being captured by facial recognition surveillance. It appears to contradict itself. Maybe it's a typo?
808.
by gnode 8y ago
While I appreciate them being the first site I've seen that's actually trying to be GDPR compliant (not just giving me a "yes I accept tracking" and "no I don't want to see the content" choice), it's
809.
by gnode 8y ago
Yes, as long as they can recognise them. It's possible to selectively reveal IPs to customers, so an attacking ISP would need the perspective of multiple users to find all VPN hosts. At an extreme, ISPs could run a whitelist instead of
810.
by gnode 8y ago
The fundamental problem with this is that it's charity / freeloading. I don't mean this as an ethical complaint, just that the economic incentive isn't there. I could imagine cryptocurrency potentially offering a solutio

More ›