joshuamorton

8 ms·

91.
by joshuamorton 11mo ago
I will simply say that Google is one of the few places that, to a first approximation, has this. We have our (pretty good) suite of tests. We can run only affected tests. We can them with instrumentation (*SAN), we can run them under variou
92.
by joshuamorton 11mo ago
> A hobby project is not a product, and its developers are not vendors But it's developers do offer paid consulting as ffmpeg maintainers, which Google does pay for.
93.
by joshuamorton 11mo ago
To be more precise, the law requires employees to publish the nlrb notice in well trafficked or otherwise conspicuous locations. I think there are other places where "government mandated corporation inform people of their rights"
94.
by joshuamorton 11mo ago
Two this, first, I want to jump back to something you said earlier: > Nullification of immigration laws is, in fact, a right that states can exercise, but it's overt nullification is absolutely an escalation that undermines public t
95.
by joshuamorton 11mo ago
All sorts of consent decrees, a huge amount of union and workplace law requires things to be posted for employees.
96.
by joshuamorton 11mo ago
> I mean this is demonstrably false: https://en.wikipedia.org/wiki/Deportation_from_the_United_St ... You're doing a motte and bailey again. I, at least, don't object to some level of immigration enforcemen
97.
by joshuamorton 11mo ago
The counterargument to this is pretty straightforward: what is being done in Midway blitz isn't democratic and is bordering on autocratic. We have a responsibility not to normalize and acquiesce to a transition to an undemocratic syste
98.
by joshuamorton 11mo ago
> we don’t use the repeated inflammatory “kidnappings” of our concern is merely detainees treatment. No, but we do use it for otherwise unlawful stops without probable cause that lead to people being put in detention facilities that don&
99.
by joshuamorton 11mo ago
You're doing a selective quoting thing. Not assisting with enforcement acts you don't feel are worthwhile is not nullification. I'm not engaging in "nullification" when I don't call the police on a jaywalker. O
100.
by joshuamorton 11mo ago
> I do not think it is a reasonable position to consider deportaion of folks overstaying visas as "a violation of human rights" in the vast majority of cases. This is a motte/bailey. Deporting people is not inherently a vi
101.
by joshuamorton 1y ago
Amusingly, my first intro to the Whole Earth Catalog was the cocktail menu at Trick dog in 2019[0], which is very clearly a reference to the Fall 1970 issue. [0]: https://www.sfchronicle.com/file/484/6/4846-Wh
102.
by joshuamorton 1y ago
> Yes, "we" were, definitely. I am not unaware of the potential dangers of device attestation. > Would you be ok if for example your government's website to pay your taxes mandated a device with attestation knowing you
103.
by joshuamorton 1y ago
More specifically, the theory is that cannot compel you to lie , there are all kinds of cases where businesses are compelled to share specific messages.
104.
by joshuamorton 1y ago
> A couple of years back I switched password managers, I didn't go over 1000 sites and changed all my passwords, my password manager exported a plaintext file and I had it imported in the other after a small transformation step. And
105.
by joshuamorton 1y ago
I mean, I would agree that it's not a particularly useful thing for consumer-phone-bank usecases, but that doesn't mean the feature is bad (or harmful). Just to be clear, no one is saying > banks have to use it to be compliant
106.
by joshuamorton 1y ago
I'm not sure what your point is here. How credentials are stolen today is irrelevant to the fact that today , right now, at this very moment, banks can and do already do the thing you're worried will be possible only due to the p
107.
by joshuamorton 1y ago
> Even without copyable keys, if your friends and family can be tricked into pasting their plain text keys into a scam site, they can be tricked into pasting their encrypted keys and their associated password to a scam site. The point is
108.
by joshuamorton 1y ago
> If you are worried your system is running malware that will steal your plaintext keys No, I'm not worried about this since I do not and will not copy my keys. I'm worried about my friends or family using the most secure optio
109.
by joshuamorton 1y ago
> Or logging in to your bank without an iPhone or an android. This is already possible (and common!) many banking apps, for better or worse, use device attestation features that require varyingly official copies of android. Were you alre
110.
by joshuamorton 1y ago
public/private keypairs (and therefore passkeys) provide cryptographically secure anti-phishing properties that passwords cannot.
111.
by joshuamorton 1y ago
> It is basically indisputable that we are exposed to less trauma than people in the past. To a laughable degree. And standards of living and life expediencies have gone up and to the right. That 100 years ago people managed to cope with
112.
by joshuamorton 1y ago
I don't think this is quite right. The git wrapper was never fully supported and had some rough edges (I think it was only ever a 20% project, and also its, like, really old). And the customized mercurial has been around for more than
113.
by joshuamorton 1y ago
While you may have whatever feeling about any issue, legally this isn't about "privacy and safety and dignity for women", it's about discrimination. And it's extremely difficult to contort shared facilities into &qu
114.
by joshuamorton 1y ago
Do you think that, to use this site's language, it would be a 1A violation to create a rule under which > students can be reported for merely expressing their opinions about controversial political and social issues of the day or ev
115.
by joshuamorton 1y ago
> If the policy of MIT or any other institution states that certain spaces are designated as single-sex only, then no, people of the opposite sex do not have the right to use these spaces. Correct, but this is not MIT's policy today
116.
by joshuamorton 1y ago
> No, the expectation is that people will respect boundaries and voluntarily stay out of the single-sex spaces they have no right to be in. So currently, these people have the right to be in these spaces (whether or not you disagree that
117.
by joshuamorton 1y ago
This is both just historically inaccurate (many of these laws were written, specifically, with black people in mind, even in northern states), and even if it were true, would still be a clear example of anti-irish racism. > Of course p
118.
by joshuamorton 1y ago
Yes, I've also had wells fargo require me to read codes that were emailed back to them, and while this was mitigated by me calling them, it sketched me out every time I had to do it.
119.
by joshuamorton 1y ago
Does your MacBook require you to enter a password to log in?
120.
by joshuamorton 1y ago
Two factor usually means "something you have + something you know". So your MacBook + your password is two factors. I've seen references to "three factor" auth which is often a push notification to a phone, and then

More ›