jfindley

15 ms·

91.
by jfindley 7y ago
I suspect you're referring to the widely debunked claims of Ralph Neder here? Plutonium is, in itself, not all that toxic - it is significantly less toxic than many other heavy metals, and can be handled safely. I wouldn't suggest
92.
by jfindley 7y ago
This is a wildly oversimplified and inaccurate picture of nuclear waste, that I've seen all too often. Nuclear waste is problematic because it emits radiation. It emits radiation because the atoms are unstable, and are decaying into ot
93.
by jfindley 7y ago
They were designed for swamps, where apparently this tyre design works well. On snow, treadless tyres are essentially useless, and this was a large part of why the cruiser failed to achieve much of anything. I suspect that at the time produ
94.
by jfindley 7y ago
The Fibrox is a great knife for the price, but it definitely isn't even close to being one of the best knives out there. If you're happy with it, that's great but even a modest upgrade to a VG10 blade will allow for cleaner,
95.
by jfindley 7y ago
> That's not really a useful measure, though, because this can be said about every single vulnerability used in a mass compromise up to the second when that mass compromise happens. No. The difference between the vectors you describ
96.
by jfindley 7y ago
Couple of points: Most of those vectors would represent extreme levels of paranoia for the average home user. If you have sufficiently motified and skilled adversaries that they are prepared to start hijacking your DSL connection, you'
97.
by jfindley 7y ago
That only allows you to send replies along an existing TCP stream. In order to exploit this to compromise some home desktop, you first must persaude them to connect to you. Except... Oops! You now aren't bypassing NAT at all, you'
98.
by jfindley 7y ago
Perhaps you could expand on the threat model you're talking about where you, as a remote attacker, can somehow get a packet with an RFC1918 dest IP sent to the WAN port of your intended victims home router. It's perhaps worth poin
99.
by jfindley 7y ago
So how are you, with your publically routed IP of (for example) 56.10.10.100 planning to connect to the GP, who has (for example) a public egress IP of 73.100.100.10, but is in fact using NAT, and his desktop's real IP is 192.168.1.20?
100.
by jfindley 7y ago
For 1, you're spot on. For 2, the one thing that's missing from here is that we _know_ many ISPs are selling your data. I'm really uncertain why people are so determined to villify Cloudflare - who don't really stand to
101.
by jfindley 7y ago
Writing perfect laws is close to impossible - there's almost always unintended negative consequences. Legislation is a pretty blunt tool, and for this reason there's long history of governments asking various entities to behave ni
102.
by jfindley 7y ago
One of the key things that makes unbound amazing is how tiny and fast it is - this enables use-cases like running it on every node of a giant deployment to provide better dns failover and other things, without wasting too many fleet resourc
103.
by jfindley 7y ago
> I wouldn't expect low-level info like this in an FAQ. Maybe the "SCION Book" listed at the top of "Publications" that goes into it on a higher level than what the paper does. If not there is a huge number of ot
104.
by jfindley 7y ago
Although the FAQ claims "Guaranteed communication despite DDoS attacks", it offers no further details on how this is supposedly achieved. After some looking, I found [0], which appears to be what they're doing. It has some go
105.
by jfindley 7y ago
The TR4 socket is extremely sturdy, and can take a great deal of weight - far more than you may be used to for more home desktop oriented parts. Given that the new socket needs even more cooling I think it's a reasonable assumption it&
106.
by jfindley 7y ago
I particularly enjoyed the section where he talks about the importance of distributions for security, and how the product of two independent random primes in the {2^1023,...,2^1024} is harder to factor than the same in the {1,...,2^1024} sp
107.
by jfindley 7y ago
Safe as in safe from host interference? Not at all. But if your VM is running on a malicious host, you have bigger problems honestly.
108.
by jfindley 7y ago
ACID guarantees have nothing to do with relational vs non-relational. FoundationDB is one example of a non-relational key value store that none the less provides ACID guarantees.
109.
by jfindley 7y ago
I think the project has moved to https://dnscurve.io/ - I can't say for certain this is the same project but it's the current website for github.com/curvedns/curvedns which I believe is the software be
110.
by jfindley 7y ago
You do not have to point your DNS queries to a US company, this is completely false. You can point your DNS queries at whichever DoH provider you want - you can even run your own DoH provider if you want to.
111.
by jfindley 7y ago
Out of the box? Yep! I realise that will annoy people but honestly it's a good thing - any solution that would not bypass a pi-hole would allow governments and ISPs to do the same. To retain your pi-hole, you'll need to run a DoH
112.
by jfindley 7y ago
This is painful to read. Masses off unfounded FUD - the article deliberately buries that it's trivial to change your DoH provider if you're silly enough to believe that CF is actively logging DoH requests and selling them (CF is i
113.
by jfindley 7y ago
For convenience: https://web.archive.org/web/20190910010756/https://krebsonse...
114.
by jfindley 7y ago
The link was to www.churp.io which looks to me much more like a product than a research paper. One of the authors helpfully clarified below, but at least to me it was extremely unclear that this was the case - had it been more obvious I&#x2
115.
by jfindley 7y ago
Thanks that's great to hear! Would you mind updating your readme and website to reflect that? It would be a shame if anyone were to rely on this for anything critical as-is.
116.
by jfindley 7y ago
Even a very very cursory review of the code turns up giant red flags. As another comment noted it lacks tests, uses poor project structure and has private deps. Much more seriously, though, the encryption looks very very unsafe. The encryp
117.
by jfindley 7y ago
Hmm, as I understand it, the US/China trade war you're referring to has been going on for about a year, total[0]. Looking at the graph for soybean production in Brazil, the increase in the past year has been pretty small and act
118.
by jfindley 7y ago
Again, the US is a significant exporter of soy beans, and most of the rest of the west consume fairly little. China is by far the largest importer of soy beans, importing about 30x[0] more than the next largest. Aside from the US and Cana
119.
by jfindley 7y ago
Interesting, thank you! I was surprised by this, as it's the major component of natural gas (as used widely for cooking here), and this has a distinct smell. I went looking however, and discovered that's actually because Ethyl Me
120.
by jfindley 7y ago
Excessively large effect sizes are a warning sign in and of themselves. A good article on this is here: [0] -- simply if the effect is too huge, it becomes incumbent on the researcher to explain why no-one has noticed this before. Methane

More ›