libertymcateer

13 ms·

91.
by libertymcateer 10y ago
I appreciate your username.
92.
by libertymcateer 10y ago
Your point is well taken. Consider me suitably chastened. Back to the question at hand - there seems to be extremely strong evidence that android - and iOS, apparently - are compromised pretty thoroughly. https://betanews.com&#x2
93.
by libertymcateer 10y ago
Nm, I understand your point, and yes, no contest. The extension is being broken up and will communicate with the environment on the tab with sent messages, rather than just injecting the whole content script. I hear your point loud and clea
94.
by libertymcateer 10y ago
This argument is almost exactly what I was on about. I'd love to see some summary of it and why they came down where they did.
95.
by libertymcateer 10y ago
Thanks for the link. So then is the assertion that the relevant hacks are all for older versions of Android? How does that comport with the current batch of hacks?
96.
by libertymcateer 10y ago
> this is all bunk tho since the big vulnerability here is that you're delivering the encryption routines via javascript in a global browser space So what about mailvelope?
97.
by libertymcateer 10y ago
> But as Chrome is cross-platform, and there's not standardized and similar APIs on Linux and Windows, I don't think it's the right move to have an OSX exclusive implementation that uses that api. That is a very fair poin
98.
by libertymcateer 10y ago
I'm also interested to know. Believe it or not, I would love to get Nik as a consultant. I fear my 'hubris' (I won't deny it, this idea is extraordinarily ambitious and I have to be arrogant to even conceive of it) will
99.
by libertymcateer 10y ago
It's currently marked as beta all over the site, for exactly these reasons.
100.
by libertymcateer 10y ago
Believe it or not, I very much appreciate your feedback.
101.
by libertymcateer 10y ago
These ones? https://www.washingtonpost.com/world/national-security/wikil...
102.
by libertymcateer 10y ago
https://www.washingtonpost.com/world/national-security/wikil...
103.
by libertymcateer 10y ago
For serious, thank you for taking the time to engage. I do take this seriously.
104.
by libertymcateer 10y ago
> I'm going to guess that he doesn't actually know very much about AOSP, the Linux kernel, or indeed GNU/Linux security in general. I know a fair amount for a 'layperson', which you can (probably rightly) argue
105.
by libertymcateer 10y ago
Noted, and thanks. Your feedback is much appreciated.
106.
by libertymcateer 10y ago
> I try to heavily caveat any statement I make about the law. That is appreciated, and you are in the minority. I'm taking this advice, btw, and being more circumspect when I post in the future.
107.
by libertymcateer 10y ago
Yes - worms or browsers that scan local data files without accessing the runtime of the parent application.
108.
by libertymcateer 10y ago
I agree. Wholeheartedly. The point, however, is that it belies Google's larger approach, including that they turned a browser into an operating system. Encrypting local storage would not have saved you. Absolutely. Maybe I am reading
109.
by libertymcateer 10y ago
> Why? Because that's a false sense of security. Chrome would have to also store the encryption key, and store it in the same place and under the same access controls as the encrypted data. I hear you, but this is not the case with
110.
by libertymcateer 10y ago
I am not talking about ChromeOS - I am talking about the Chrome browser. Localstorage, last I checked, which was recently, is plaintext. > ChromeOS and Android both implement FDE Which is irrelevant if the runtime is compromised, which a
111.
by libertymcateer 10y ago
The kernel is owned (or some part of the phone below the application level). The encryption only gets applied at the application level before the messages are sent down the wire. The interception happens prior to the encryption being appli
112.
by libertymcateer 10y ago
Edit: deleted, for very valid criticism. Next time I won't post in a rush during work hours.
113.
by libertymcateer 10y ago
> Harsh punishments work exceedingly well as a deterrent. That is an enormous claim and there are reams of research on this topic - your assertion is not supported. It doesn't even stand up to the most cursory scrutiny - if it w
114.
by libertymcateer 10y ago
Honest question - have you never used Imgur before? This is literally all that site is. Check out, for instance, https://reddit.com/r/diy . It is all just imgur albums. https://imgur.com/a/u2jlk h
115.
by libertymcateer 10y ago
> GitHub asks for a right to distribute unattributed snippets of the code for the search in the ToS. Source?
116.
by libertymcateer 10y ago
I read the terms of service. The language is as follows: >Any Content you post publicly, including issues, comments, and contributions to other Users' repositories, may be viewed by others. By setting your repositories to be viewed
117.
by libertymcateer 10y ago
Why would you? They are deeply embarassing and lawyers try to make them go away as quickly and quietly as possible. However, the big ones do make the headlines - BUT, while I read Hackernews every day, and you likely do to - do you ALSO rea
118.
by libertymcateer 10y ago
The point is that all advice from a lawyer is advice from a lawyer - the same way that an NBA player is still an NBA player whether he is in a playground or on a pro-sports stadium. The point is not what you call the game, it is that the se
119.
by libertymcateer 10y ago
> "I am a lawyer but I'm not your lawyer" I say that all the time . I am sure it is in my comment history. E.g: https://www.reddit.com/r/Entrepreneur/comments/464j0r/im_fre... https:&
120.
by libertymcateer 10y ago
Yup. That's about it. I am going to start using that. Consider your IP stolen.

More ›