jfindley

25 ms·

211.
by jfindley 10y ago
I thought about that, but that would mean it's then probably not possible to review the images you've taken to ensure that you got the shot you wanted.... I guess you could keep a second copy in a buffer somewhere, but I think ho
212.
by jfindley 10y ago
I'm not certain this has been thought through sufficiently. If an organization is in a position to confiscate the camera from a journalist, they're almost certainly ALSO in a position to extract the encryption password from the j
213.
by jfindley 10y ago
For overly clickbait-y titles (such as this one), I tend to start by reading the comments here to get a sense of if I should bother reading the article itself. It's so far been a occasionally effective defense against the growth of cl
214.
by jfindley 10y ago
Definitely apply - that's useful experience to have at Google. After all, what's the worst that can happen? :) Bear in mind that our hiring process is SLOW, so be prepared for it to take a lot of time. Best of luck!
215.
by jfindley 10y ago
Vess has been in the AV industry a LONG time. A really long time. So long that I don't think he's really able to see the state of the industry for what it is anymore. In the days of windows 95/8, the desktop landscape was v
216.
by jfindley 10y ago
What I'm really interested in now is what happens if/when circumvention becomes significant. I'll be particularly interested in what happens to websites that publish circumvention techniques - will they be blocked? Will spec
217.
by jfindley 10y ago
> As for [0]; even if no relevant metadata is collected today by whoever owns the servers, nothing stops the party providing the service from doing so tomorrow. This is a point I see bought up a LOT. I don't believe it to be useful
218.
by jfindley 10y ago
Be careful doing this - this may well be against the ToS of your VPS service.
219.
by jfindley 10y ago
Given that we've seen exactly how little information Signal maintains about its users [0], this seems to me to be alarmist spreading of FUD, potentially to advance the author's agenda of dfederation in Signal, which the developers
220.
by jfindley 10y ago
Oddly I can't find any other sources reporting this. I'd have expected it to show up in at least one other place else (e.g. BBC news for example). I'm not trying to imply that it's not accurate, I'm just confused b
221.
by jfindley 10y ago
I agree, AIUI this is no longer the case.
222.
by jfindley 10y ago
This is not all that new of an idea. I had one of these around 2005/2006: https://www.quietpc.com/hfx-mini-metal - completely fanless and (virtually) silent - back in those days there were no SSDs, so one had to conte
223.
by jfindley 10y ago
Google play music and Apple music are IMO viable alternatives, in some cases depending on what devices you use. Available music is comparable, price is equivalent (and google music includes youtube red as well).
224.
by jfindley 10y ago
Yeah. It leaves an unpleasant taste in my mouth to hear npm blaming Microsoft for this. As noted elsewhere, 404's are supposed to be very cheap to handle, otherwise DoS attacks become embarrassingly easy. I feel like the npm team h
225.
by jfindley 10y ago
I'm not sure that a single sticker for $50 really qualifies as a large reward. I'd be very surprised if these cost more than $2 per sticker, including distribution costs (note: the entire process from production to distribution i
226.
by jfindley 10y ago
The 645D is a really great camera, but in common with all medium format cameras has very basic autofocus - indeed most modern m4/3 cameras would beat it in that regard. High speed autofocus is not why you buy a medium format camera!
227.
by jfindley 10y ago
Please don't take this as any sort of put-down, but I definitely wouldn't regard the Pentax K-30 as "decent pro-sumer". It's an entry level DSLR. There's absolutely nothing wrong with that - some really excel
228.
by jfindley 10y ago
That looks great! I'd love not to have to carry so much weight to carry around with me. I do wonder if it might still struggle to keep up with the controllability of the pro DSLRs, which I discussed in a different reply, but until I c
229.
by jfindley 10y ago
Some of them have started doing this - tech is always marching forward. However no mirrorless system in the world comes close to a highend DSLR. The Sony a6000 is probably the best mirrorless system I'm aware of right now for autofoc
230.
by jfindley 10y ago
Two key reasons: 1) m4/3 and similar cameras use EVFs (electronic viewfinders) instead of optical ones - these have inherent and percievable lag. It's getting better, but still present (and due to the way they work, it's unl
231.
by jfindley 10y ago
It's a really really interesting idea - I'm looking forward to see how it turns out. If it really is as good as claimed (and actually makes it to market), I'll almost certainly buy one. However, I'll be buying one in a
232.
How Does Obama Respond to Russia’s Cyberattacks?(slate.com)
2 points by jfindley 10y ago|0 comments
233.
by jfindley 10y ago
Your crypto choices seem somewhat unusual. PBKDF2, while not necessarily unsafe, is a fairly old KDF to choose for a new product. Can you go into more detail about your rationale for choosing this over newer KDFs? Why did you choose AES2
234.
by jfindley 10y ago
It doesn't. GFS2 is a clustered filesystem, ZFS is not. GFS2 is for sharing a single filesystem between multiple nodes, with a distributed lock manager to avoid corruption. It's complex to fix when it breaks, generally fairly s
235.
by jfindley 10y ago
I think your category 3 could use a lot more division. It's mostly possible for a skilled team to build sites that can defend against targeted professional attacks (e.g. crime gangs) - at the very least you can make your systems expens
236.
by jfindley 10y ago
You shouldn't need to wrap pulls with flock anymore, the pull code got completely rewritten and should be fine now. Also hosts shouldn't need to be rebuilt THAT often. Of course, your infrastructure should automatically nuke and
237.
by jfindley 10y ago
Sadly it's still used by even recent software projects, notably systemd.
238.
by jfindley 10y ago
I've never seen AES-CCM used in practice. As far as I know, no browser supports it, and neither do most crypto libs - I think OpenSSL is the only one that does. I've heard many very smart people say bad things about GCM for a wh
239.
by jfindley 10y ago
Linux is the only OS that fully implements the RFC, and thus the only one that's vulnerable. OSX, Windows and FBSD either don't implement it or partially implement it, making them not vulnerable.
240.
by jfindley 10y ago
So far it looks pretty real. CVE exists[0], been picked up by RedHat[1]. It's possible that they're wrong - I haven't personally verified it - but at this point it'd be very surprising. Apart from anything else, these

More ›