gorkish

35 ms·

451.
by gorkish 3y ago
> If only we actually had that ability. "We" do, if people would ask properly for it instead of trying instead to break the customer/common carrier contract. The carriers withhold information from customers that is useful
452.
by gorkish 3y ago
IMO the attestation level isn't really actionable data though. A legitimate call may come through missing attestation for reasons that are not malicious. Similarly for things like B2B, the calls themselves may be attested and legal, bu
453.
by gorkish 3y ago
The only technical advantage that Google maps retains in any way is having good imagery. The rest of it (and by that I mean not only maps but the entirety of Google) is built on a fundamentally broken social contract between the products an
454.
by gorkish 3y ago
>I am the customer and I would love to see the data of which providers _originated_ each call that I'm about to answer. The telcos have this information, but they only usually relay the CallerID (which is user-specified, ie "sp
455.
by gorkish 3y ago
> The dangerous issue is that if a spam operator has 33% legit traffic, do you kill the spam operator and the good traffic with it, or what? You are implying that "you" means the telco or FCC decides on behalf of "everyone
456.
by gorkish 3y ago
SHAKEN/STIR are implemented but the providers have given no tools to the end users to actually do anything actionable with it. Heck, they haven't even exposed it unless you are a megacorp. The telcos might be a common carrier, but
457.
by gorkish 3y ago
It's still the same effect. Supply doesn't have to overshoot. Computer chips aren't just stamped out instantly; a complex chip with many hundreds of process steps can take months to manufacture. The latency of design/rev
458.
by gorkish 3y ago
As someone who has been attempting to smash computers together into 'hyperconverged infrastructure' since before Y2K, I could not be happier for the buzz around Oxide; hopefully we'll see smaller scale versions of the concept
459.
by gorkish 3y ago
If this is seriously your level of supply chain scrutiny, being an Oxide early adopter probably isn't the best idea.
460.
by gorkish 3y ago
O+F is posted to youtube, I get the auto-generated transcript from there. It's unscripted/unstructured, so if you are primarily wanting to hear discussion of the oxide hardware/software/progress it's pretty difficul
461.
by gorkish 3y ago
Yes by all means, let's use the threat of a possible attack on EMV to continue to prop up the magstrip and completely disregard that pretty much all of the successful attacks against chip or contactless involve legacy magstrip emulatio
462.
by gorkish 3y ago
Yes I was being a bit pedantic as well! :) Seriously though I do like the workflow you've put together with KeenWrite. I have a potential application where it might be a great fit to replace some markdown->pdf workflows I have built
463.
by gorkish 3y ago
Markdown "supports" embedded HTML but that does not mean that your chosen implementation must support it. Personally, I think it's a misfeature and wouldn't want to touch any markdown lib that tried to put too much emp
464.
by gorkish 3y ago
KeenWrite looks cool and useful; thanks for the reference. It does appear that the real heavy lifting in this workflow is still all done by TeX, and that Markdown (with lots of extensions) is more or less a database of blobs to feed the tem
465.
by gorkish 3y ago
This advice does appear to be coming from someone who writes webpages using roff... The core argument simply seems to be that markdown lacks sufficient structure to build "documents," which I agree is absolutely true and essential
466.
by gorkish 3y ago
Where did I suggest this? The customer payment terminal is not the register. Both have card readers; one is fantastically less likely to be tampered with than the other. There is absolutely nothing wrong with putting your cashier in between
467.
by gorkish 3y ago
> I need a solution that lets me, the card holder, check these. This ain't it. No you don't. All you need to do is use a payment method that is actually secure. Demand it. When they tell you tap doesnt work, ask why. Hand your
468.
by gorkish 3y ago
Properly configured merchants don't even need the payment terminal to complete a transaction. They should be able to key the card number if all else fails. I say corrupt your magstrip if it makes you feel better.
469.
by gorkish 3y ago
Lowe's. Lord help the poor souls who maintain that system; it looks like the kind of thing that's just chock full of COBOL.
470.
by gorkish 3y ago
Sure is. Good thing criminals are too dumb to find it, and especially too dumb to replicate it. I'm sure they will never be able to modify their skimmers to circumvent it. They will rue the day they messed with Target's IP lawyers
471.
by gorkish 3y ago
I was suggesting "Just use contactless" for customer accessible payment terminals. Want to use something less secure and more likely to result in fraud? You can hand your card to the cashier or walk inside instead of paying at the
472.
by gorkish 3y ago
This little micro-arms-race to develop and patent a plastic wedge that doesn't need to exist in the first place is ridiculous. The irony is that there is something of a perverse incentive not to solve the actual problem now that such a
473.
by gorkish 3y ago
It's right here: https://patents.google.com/patent/US11507762B2/ Took me five seconds. You can make one if you feel like it.
474.
by gorkish 3y ago
Alternatively they could just remove the slot and require self-pay terminals to be contactless. It really makes no sense to me why merchants don't already do this proactively; they are well incentivized: 1) Contactless merchant fees ar
475.
by gorkish 3y ago
The RCE is related to ssh-agent's support for PKCS#11, so, yeah you are right this is a valid method to prevent key access or theft via the agent (I also have to approve every use of my PK), but in this case it's not protecting ag
476.
by gorkish 3y ago
Anyone who has saved any early prompts/responses can plainly attest to this by sending those prompts right back into the system and looking at the output. As to why, it's probably a combination of trying to optimize GPT4 for scale
477.
by gorkish 3y ago
This isn't a 'coding slip up.' The original issue, as egregious and terrible as it is, could have been a a mistake. However, whoever implemented 'the fix' is someone acting acting with unforgivable malice and deceit
478.
by gorkish 3y ago
It's not as exciting as you might expect-- group of meth heads on the street he was attending to, and one insane lady just hopped in and drove off.
479.
by gorkish 3y ago
Kinda sucks that a distro neutral configuration manager would mandate that it has to run on SuSE. Most people who actually need CM don't want to take another major vendor through compliance just to roll out a tool. In any case, "m
480.
by gorkish 3y ago
Our local police department had a guy get his squad car stolen TWICE during traffic stops, and they installed an ignition interlock switch on their entire flee to prevent it happening again. Also they relegated the guy to motorcycle duty af

More ›