labawi

71 ms·

691.
by labawi 7y ago
Your ISP is has a MITM position whether they own your cable box or not¹. What you usually don't want is them having access to your LAN. ¹ As far as is relevant in this context.
692.
by labawi 7y ago
I would really love some data (or good reasoning) on how server attacks are overwhelmingly more likely, so much so that the false security impression increases risk. MITM executable patching attacks are not theoretical. AFAIU, the first hit
693.
by labawi 7y ago
> Alignment is not necessary anymore > ..tools automatically align filesystems and partitions to the optimal 4096 byte page size Isn't 4k still very small? A quick search mentions 8k and 16 page sizes. AFAIK SSD has structures wi
694.
by labawi 7y ago
So.. you haven't heard of automated MITM executable-patching (infecting) solutions? I believe I read about them a couple of years ago. Once implemented, it's much easier than hacking servers and more convenient to do targeted, sem
695.
by labawi 7y ago
If you have a 95% match on something nontrivial (and it likely won't diverge significantly), I'd go for merging even with 2 cases. At least merge most of the common parts. Reading a couple of ifs, and some not-quite duplicate proc
696.
by labawi 7y ago
> BLAKE3, like BLAKE2s .. has .. a 128-bit security level. Skimming and interpreting the Too Much Crypto paper[1], the security target is strictly less than 128-bit security. If it maintained 128-bit security, it would be considered too
697.
by labawi 7y ago
From paper: > Our goal is to propose numbers of rounds for which we have strong confidence that the algorithm will never be wounded They take algorithms, past 10 years of public crypto research and shave off rounds, until it just about
698.
by labawi 7y ago
Theoretically, if you have a good RAID5, without serious wire-hole and similar issues, then it is strictly better than no RAID and worse than RAID5 and RAID1. * All localized error are correctable, unless they overlap on different disks, or
699.
by labawi 7y ago
If you have nice, solid walls, the signal will mostly bounce off them and pass through doors. It will usually pass a single wall, so you will hear some first-degree neighbors, in some places, but it's significantly better than interfer
700.
by labawi 7y ago
When system is IO busy, processes block (more) waiting for IO completion. IO blocked processes wouldn't know what to do with a CPU, so they won't have it assigned. Are you saying something different? Decreasing dirty memory decrea
701.
by labawi 7y ago
A market analysis measures the market, i.e. $$$, not the user base. Which part of the report is on the userbase?
702.
by labawi 7y ago
I'd guess the apps were waiting for I/O, not CPU. Don't know the reason, but lots of unwritten I/O on a (slow) drive can block processes waiting for I/O on an unrelated drive. By default, dirty buffers are a predete
703.
by labawi 7y ago
So iOS is the biggest market, while android apps have more play time (also are messier, more of a pain..)? Plausibly more time is spent gaming in browsers, or not. My guess would be android apps, possibly browser games. AFAICT the link only
704.
by labawi 7y ago
You'd still have to get a static libc (not usually preinstalled), possibly compile it for a different os/architecture..
705.
by labawi 7y ago
Serious question: If you're not signing (age does not*), then what is the point of the AEAD STREAM scheme? By definition, nothing is authenticated, right?
706.
by labawi 7y ago
(5) Munich might not be a valid example. Parent talked about a consortium, for which a single city administration might be a bit small, and AFAIK the failure was not necessarily technical.
707.
by labawi 7y ago
So.. this is using chunked AEAD, without source authentication/signing? What's the actual use case, and why is it any better than plain stream encryption? If you wish to stream authenticated decrypted contents, it would mean 2 lay
708.
by labawi 7y ago
> No one should "decrypt < file | sh" (or anything | sh without verifying) I was thinking of self-prepared scripts, tooling or owner controller distribution. Decrypt+good signature is precisely what I want. Anyway, as nmadde
709.
by labawi 7y ago
IMHO it's not that bad. It's actually quite usable, and reasonably easy to handle safely. Use bash: set -eu -o pipefail # unfortunately pipefail is not POSIX and some care when writing scripts. Possibly decrypt to a file
710.
by labawi 7y ago
Why does the article recommend requiring https, if the packages have sha512 integrity checks?
711.
by labawi 7y ago
If some sites or features are broken with tracking blocked, maybe it's a good thing? Why should malicious sites/services get a free pass siphoning off and/or infecting devices? This way they are directed towards more respecti
712.
by labawi 7y ago
I agree that (1) is plausible and probably true. (2) might be true in your training regiment, and also may be nearly true in most circumstances, i.e. a good approximation. Your theory of absolute anabolic vs. catabolic body state is absolut
713.
by labawi 7y ago
To receive, just set your interface to monitor mode, set the right channel, dump and filter. tcpdump works fine, though you probably want to read and process the data with a custom application.
714.
by labawi 7y ago
If you are talking about things like PM10 or PM2.5, then it would be infeasible to re-add an identical or even plausibly equivalent pollutant, unless it's the one removed. By definition, it is a concentration of things small and solid.
715.
by labawi 7y ago
>> There is currently only one free cert provider, if there are ever issues with it, your users will see a scary error message > Isn't this the point? The point is to secure the communication between client and server, and wa
716.
by labawi 7y ago
If you compare the definitions in say a dictionary[1][2][3], they have high overlap, but are not the same. Phrases illegal law and illegitimate law have different meanings. While the first seems an oxymoron and the second may be, both seem
717.
by labawi 7y ago
Not sure if even most. Just checked our constitution. While in most articles it doesn't order or forbid people to do specific things, there are dozens of rules and rights, which apply to .. I guess anyone in scope, many of which seem q
718.
by labawi 7y ago
> the liability is to their brand. If .. a John Deere tractor blew up ... they avoid the brand. Even if it was caused by an improper repair. Perhaps the tractor is hard to repair safely, the manuals aren't good, qualified repairs ar
719.
by labawi 7y ago
... so the machines would cost more up-front instead of being offset by subsequent repairs?
720.
by labawi 7y ago
Solar risks are often dismissed, more probable, but still much less nasty. Typical solar cells are made of glass/ceramics so they don't actually burn and the cleanup should actually be manageable.

More ›