insanitybit

116 ms·

1. 1891.▲
   by insanitybit 4y ago

   > It all sounds great until you encounter an actual robo-taxi in the wild. Which is rare: I see them all the time. They work fine.
2. 1892.▲
   by insanitybit 4y ago

   Incognito supports blocking 3rd party cookies, you just toggle a switch on the new tab page.
3. 1893.▲
   by insanitybit 4y ago

   Guest users are their own thing already in Chrome. And you do have a profile, you can even bring extensions into your incognito mode.
4. 1894.▲
   by insanitybit 4y ago

   That isn't what's happening. Chrome, "the trenchcoat", is in no way "naming" you while in incognito mode.
5. 1895.▲
   by insanitybit 4y ago

   > Now you can browse privately, and other people who use this device won’t see your activity. However, downloads, bookmarks and reading list items will be saved. Learn more > Your activity might still be visible to: > Websites you
6. 1896.▲
   by insanitybit 4y ago

   You're misreading or misunderstanding. It's not your fault, the plaintiff is taking great pains not to say "Google Chrome sends this data" and make it unclear.
7. 1897.▲
   by insanitybit 4y ago

   > "users of the Internet enable ‘private browsing mode’ for the purpose of preventing others ... from finding out what the users are viewing on the Internet." OK but Chrome explicitly states that it only protects against other
8. 1898.▲
   by insanitybit 4y ago

   Thanks, this looks like it could form the base of what I'd like.
9. 1899.▲
   by insanitybit 4y ago

   Thanks
10. 1900.▲
    by insanitybit 4y ago

    I've wanted to do this for years and I've tried doing it a few times in some weird ways. I'm finally doing it in a hacky but more straightforward way and it's going well.
11. 1901.▲
    by insanitybit 4y ago

    Thanks, yes. I'll add those to my profile.
12. 1902.▲
    by insanitybit 4y ago

    Interesting idea. I could imagine something like that but it's a bit tough.
13. 1903.▲
    by insanitybit 4y ago

    I'll see if I can open source it this weekend. I'm not trying to be the "like and subscribe for updates" but if you want to see it when it's open source I'd suggest following me on Twitter (or Github? Does Gith
14. 1904.▲
    by insanitybit 4y ago

    So, I got sniped hard by this. 1. I've re-opened by hashing PR and I'm going to suggest that they adopt ahash as the default hasher in the future. 2. I've re-written my "reduce allocations" work as a POC. Another
15. 1905.▲
    by insanitybit 4y ago

    This is great. I'm building something similar, an effects system for rust, and it looks quite a bit like this. The difference is that my effects system compiles to a seccomp + apparmor profile so that your rust program is sandboxed at
16. 1906.▲
    by insanitybit 4y ago

    These seem decent: https://github.com/tkaitchuck/aHash/blob/master/FAQ.md
17. 1907.▲
    by insanitybit 4y ago

    The PR I have lets you provide the algorithm as the caller, although I did benchmark against fxhash and I think it would be a good idea to suggest `ahash`. I'm certainly interested. `ahash` has some good benchmarks here: https:/&
18. 1908.▲
    by insanitybit 4y ago

    FWIW my company is a customer so we've already got a shared Slack/ account reps :P Feel free to reach out to colin@graplsecurity.com though (me) if you want to chat about it.
19. 1909.▲
    by insanitybit 4y ago

    I'd be happy with a few things: 1. Benchmarks of "pure" code like the response parser, which I could `cargo bench`. I may actually work on contributing this. 2. Some way to run benchmarks against a deployed server. I wouldn&#
20. 1910.▲
    by insanitybit 4y ago

    There are probably a bunch of reasons, which is why I want an easy "run benchmarks" command that I can use. I'd even be fine using infra so long as I had pulumi/terraform to set it all up for me. I just don't want t
21. 1911.▲
    by insanitybit 4y ago

    Are there simple benchmarks that I can run for the Rust counterpart? I've worked a bit on the scylla rust code and I see plenty of room for improving efficiency (there's a lot of unnecessary allocation imo, and the hashing algorit
22. 1912.▲
    by insanitybit 4y ago

    Because auth to the VPN should have required a device cert and/ or unphishable 2FA. Also because the SMS phish was one of the first details leaked. Obviously access to the VPN shouldn't also be a full system compromise. There are
23. 1913.▲
    by insanitybit 4y ago

    Yes, you're correct. They don't. And it's pervasive - it's not just Uber, it's the developers of the software Uber writes. Shake out the tree of any Uber service and you'll find that maybe 0.1% of the code is w