libdjml

5 ms·

1.
by libdjml 4y ago
This entire piece and author lost me within the first paragraph. “and soon Google” links to a complete unsupported fluff piece from November, drawing a loose connection to an activist investors letter.
2.
by libdjml 4y ago
That would be a terrible business strategy. If someone comes forward with legitimate good security vulnerabilities and you don’t pay out, you’re massively encouraging them to go to shady brokers next time.
3.
by libdjml 8y ago
The twice-linked brief article states that basebands have full OS memory access, which is not true in 2018. And the article is completely uncited.
4.
by libdjml 8y ago
Fortunately, Australia doesn’t make any phones or popular e2e software.
5.
by libdjml 8y ago
Agreed. If anyone thinks it’s a legitimately bad book, feel free to discuss why.
6.
by libdjml 8y ago
There are a load of criticisms you could call out about google, but suggesting that their “one primary platform and single focus (social media)” is about to collapse is not valid; they’re far too broadly invested (from mobile phones to sear
7.
by libdjml 8y ago
> Just go sit somewhere and turn your attention inwards Perhaps you were born with a natural instinct for what meditation is, what to do when thoughts arise and you go off track, how to sit comfortably, what you’re aiming for and what yo
8.
by libdjml 8y ago
Given the posted article is about the poor security posture of most home routers, has anyone inspected ubiquiti? I gather they have a bug bounty which is a good start, but so do Netgear and their routers are still full of bad vulns.
9.
by libdjml 8y ago
Yeah it seems like RCE in the context of Chromium, but not SQLite? I know it’s pedantic but if this is RCE in SQLite because it’s exposed to the network via other software, every vulnerability is “remote” because you may expose it via other
10.
by libdjml 8y ago
Remote implies it can be accessed remotely, is that true, or did they mean “remote if an attacker can remotely send data to SQLite”?
11.
by libdjml 8y ago
Good question, to which I don’t know the full answer. But if you look at their motto “move fast and break things”, insistence on pushing new features as fast as possible, and the recent clash and resignation of their CSO, I’d say google are
12.
by libdjml 8y ago
Agreed. If you’re trying that hard to build a relatable hook, maybe what you’re writing about just simply isn’t that important/useful?
13.
by libdjml 8y ago
I highly doubt this is a off the shelf Wordpress install. In fact, a standard WP is not > 1gb of data, which the post describes. There will be a massive amount of customization, so revealing source code probably is a security risk. I’m w
14.
by libdjml 8y ago
There’s IBB; the internet Bug Bounty. But it’s for widespread open source software. Typically FOSS that isn’t well funded yet is critical to massive parts of the internet. Popular libraries, email & DNS infrastructure etc. Ebay being a
15.
by libdjml 8y ago
> I still don't understand what this has to do with blockchain. Funding from VCs?
16.
by libdjml 8y ago
Sure, that’s a great idea. But your transport security is going to show vulnerability sooner or later (see: regular issues in TLS), and it’s worth having a slightly less compromised network fabric. I agree with your general sentiment though
17.
by libdjml 8y ago
Excuse my very basic question, but how do you manage spam when using mutt? Do you interface to a cloud-based service in mutt, or have some kind of other spam filter? I’ve always liked the idea of moving my email to mutt and using personal d
18.
by libdjml 8y ago
We recently had a 2nd hand copy shipped to NYC to bring a little bit of home back to the kitchen. It’s almost like the Michelin: intended to sell more of a product (tires/flour), but ended up iconic in its own right.
19.
by libdjml 8y ago
Did you do the DLND? If so, they may have updated the videos, as the current explanation of conv2d_transpose seemed fairly clear to me. Or maybe it was some of the extra materials they provided that helped. I think I found a good video on Y
20.
by libdjml 8y ago
I don’t believe your statement that AI is just a subset of software. It’s almost entirely math. Furthermore, “somebody like yourself or anybody else can’t pick it up” is wildly untrue. You realize that the people in the articles are researc
21.
by libdjml 8y ago
At what point did it go from understandable to not for you? Do you understand GAN architectures? Basic ideas of the DCGAN paper?
22.
by libdjml 8y ago
I applaud the positive spin, but the responses are due to the headline which suggests these salaries are normal. If an article said “supermarket checkout clerks are earning over $1m” and the article explained that a couple of retired proper
23.
by libdjml 8y ago
True, although what are they going to do with the data? If it’s primarily for selling to ad companies, a tiny slice of privacy minded people aren’t worth much.
24.
by libdjml 8y ago
This is a huge unsolved problem in journalism: reporting whether a company was wildly negligible and deserved to be punished, or did the right things and fell victim to “no org can be bulletproof” Some standards like PCI attempt to do this,
25.
by libdjml 8y ago
I’ll take a wild guess: * a lot of legacy kit that’s expensive and hard to upgrade * lots of things rely on backward compatibility * attacks are still too difficult/expensive to the point that only hushed adversaries are performing att
26.
by libdjml 8y ago
Thanks, really appreciate the writeup. I might give the course a crack, given the positive reviews it’s getting in this thread.
27.
by libdjml 8y ago
Has anyone read her book and can comment on the differences? I own the book and have half-read it twice, it’s very underwhelming. At no point am I thinking “that’s going to change my way of doing X”
28.
by libdjml 8y ago
It widely varies depending on skill level, and unfortunately I can’t compare easily as I don’t know developer salaries. If you’re in a major tech hub in the US, 75k for a junior, 150 for a senior, and upwards from there for someone with dec
29.
by libdjml 8y ago
Yes, very poorly.
30.
by libdjml 8y ago
The scale you’d need to achieve to have even the most minor effect on facebooks vast infrastructure would be enormous. I feel the effort you and countless opt-in people would expend could be redirected to much more fruitful efforts. Convinc

More ›