kerng

26 ms·

271.
by kerng 5y ago
The criticism of FLoC is that it makes profiling a lot easier because a website can access the ID with javascript. And there are also a lot of design questions remaining that Google hasn't answered or is not sure about. Eg. How will ad
272.
by kerng 5y ago
Can you elaborate? I was recently thinking similar to what the article mentions and wonder about differences?
273.
by kerng 5y ago
Chase charges a $15 or $35 (dont remember exactly) minimum balance fee or something monthly - seems like the same idea. Banks are kinda hilarious in what they think they can get away with. So, I'm switching more and more accounts over
274.
by kerng 5y ago
I dislike it when companies allow you to sign up via mobile, but then dont allow you to cancel via the mobile app. I had this with Hello Fresh, where I had to log in on web to cancel (which I had never done before) - seemed quite annoying a
275.
by kerng 5y ago
I'd imagine Snowden is not interested to support/invest in someone/something related to a person who has been banned from trading securities for life by the Ontario Securities Commission, and thinks other should be aware if i
276.
by kerng 5y ago
It only kicks in after 250k in capital gains for the given year - doubt this will hurt anyone. If you make that much passively via capital gains, you are already very well off.
277.
by kerng 6y ago
I think the apology comes across as insincere because they don't just stop with apologizing but go on attempting to justify their actions and already look beyond the issue at hand. First, you just apologize for what you did and that&#x
278.
by kerng 6y ago
Where does such "research" end... sending phishing mails to all US citizens to see how many passwords can be stolen?
279.
by kerng 6y ago
Well, or do what an ethical research would do and seek authorization from the board of Linux foundation before doing any (who knows potentially illegal social engineering attacks) on team members.
280.
by kerng 6y ago
What I dont get... why not ask the board of the Linux foundation if they could attempt social engineering attacks and get authorization. If Linux foundation sees value they'd approve it and who knows maybe such tests (hiring pentesters
281.
by kerng 6y ago
Very easy, if its not authorized it's not a pentest or red team operation. Any pentester or red team considers their profession an ethical one. By the response of the Linux Foundation, this is clearly not authorized nor falling into an
282.
by kerng 6y ago
If this were to succeed, then not too far out any website a user visits on the Internet can basically reverse engineer to a high degree (and at least approximate) the sites a Chrome user was on. Additionally, combined with just IP address i
283.
by kerng 6y ago
Targeted ads are powerful manipulation tools and its okay to call people out for working in these areas. You can do ads without profiling users and violating their privacy.
284.
by kerng 6y ago
Today I looked at the source code of Chrome where this is implemented, so I'd understand it better. It made me realize that there is indeed (of course) software engineers (meaning: people) working on this who actually write that code.
285.
by kerng 6y ago
Agreed. Extremly disappointed. Before donating money ever again to Signal, I want to see prioritize (maybe vote on some proposed features, etc...) to understand what's coming up and what I'm supporting
286.
by kerng 6y ago
I really think Signal should (if at all mingle with crypto) become a Lightning Wallet - that would actually be useful and enable micro transactions - but rather my donation is spent on pitching some obscure coin with conflict of interest.
287.
by kerng 6y ago
Instead of fingerprinting out of millions of browser users a company now just has to have a rather small set (Floc) + old school finger printing to 100% uniquely identify a user. I wonder how this feature even passed an internal Google priv
288.
by kerng 6y ago
Instead of fingerprinting out of millions of browser users a company now just has to have a rather small set (Floc) + old school finger printing to 100% uniquely identify a user. I wonder how this feature even passed an internal Google priv
289.
by kerng 6y ago
Client side there is also the DNT header which everyone, including Google is happily ignoring. So I'd imagine things will get ignored similarly here.
290.
Australian Minister’s Phone Hacked as Report Reveals Hong Kong Link(bloomberg.com)
5 points by kerng 6y ago|0 comments
291.
by kerng 6y ago
If any of this is true they should go to NYT or WSJ and get proper coverage for this. It's a little light on details, and uses the word "I" quite often. Curious to see if more comes out of this.
292.
by kerng 6y ago
Yeah, seems like the definition of hacking what happened there. I mean Facebook could have at least rate limit or block this, but they had no mitigation. They even admit of having fixed it afterwards.
293.
by kerng 6y ago
The high number of security vulnerabilities is also something both IE and Chrome share.
294.
by kerng 6y ago
I wonder if it would help forming an internal red team that could help stay a step ahead with such and related attacks and abuse scenarios by running such attacks against yourself?
295.
by kerng 6y ago
CryptoKitties are a quite bad reference example to argue against NFTs - because they have been and still are highly successful and valuable, trading for thousands (some tens of tbousands) of dollars. Similar to the CryptoPunks.
296.
by kerng 6y ago
Yes, but the point is that he should speak up, because he is in a position of power to help change things.
297.
by kerng 6y ago
Maybe Bezos personally tweeted this time.
298.
by kerng 6y ago
It's a settlement layer. CRO (which seems to be the partner via crypto.com) based transactions are cheap.
299.
by kerng 6y ago
For settlements it's fine, like with Bitcoin lightning network. Since this uses crypto.com only now I'd imagine transactions are in CRO for now, then settled via Ethereum over time.
300.
by kerng 6y ago
And CRO!

More ›