lima

44 ms·

541.
by lima 6y ago
Exactly. Or going for a walk in the forest - many of these conversations are now happening online. On the flip side, even ordinary phone calls and messages are often encrypted by default now, which used to be much more readily available to
542.
by lima 6y ago
They do. The reality is that there's plenty of non-secret, boring warrants which go nowhere because the police can't decrypt the traffic or read the phone memory (and here in Germany, they have less access to fancy tech). At the s
543.
by lima 6y ago
> Monitoring shouldn't be the default but only happen when there is a warranted reason to monitor, preferable with a literal warrant. In many cases, well-done E2EE like Signal stops dragnets and targeted efforts. Even with a lit
544.
by lima 6y ago
At some point, every game development project becomes engine development :-)
545.
by lima 6y ago
I would hope so, it would certainly be a "probably legit" signal. I'm annoyed I have to consider the possibility at all.
546.
by lima 6y ago
In Europe, GDPR has provisions about algorithmic decision-making, including a "Right to explanation": https://turkishlawblog.com/read/article/221/algorithms-meet-... I look forward to this getting u
547.
by lima 6y ago
Human support for Google Cloud has been very good, even on a small account. Now if only they could figure it out for consumer accounts... Those are customers as well and deserve to be treated as such.
548.
by lima 6y ago
Exactly. I pay for internet, water and power - I happily pay for my Google account if that means I'm treated as a customer. In fact, you can pay for your Google account with Google One, and I do, but it may or may not stop The Machin
549.
by lima 6y ago
> That or they’re convinced that they’re this close to fixing the automated system, which they obviously are not. Knowing Google's engineering culture, you're probably spot-on. Ignoring long-tail events like this one is a com
550.
Heap-Based Buffer Overflow in Sudo(blog.qualys.com)
94 points by lima 6y ago|2 comments
551.
by lima 6y ago
If that's the case, why would they elevate privileges on the main SO site and draw attention to their successful intrusion?
552.
by lima 6y ago
> A significant period of time is spent investigating TeamCity—the attacker is clearly not overly familiar with the product so they spend time looking up Q&A on Stack Overflow on how to use and configure it. This act of looking up th
553.
by lima 6y ago
> It is somewhat ironic to me that, it is the software layer made available by gcc and clang that actually makes these billion dollar cpu vendors viable. CPU vendor usually contribute to both GCC and Clang these days.
554.
by lima 6y ago
> Python 2.x isn’t going anywhere, so I think Pip will ultimately have to keep and “freeze” support for Python 2.x, rather than not supporting it. More likely, enterprise vendors like Red Hat will maintain Python 2 + pip for a long tim
555.
by lima 6y ago
Thanks for taking the time to write this!
556.
by lima 6y ago
It's not that simple - frequency and modulation can make a difference in terms of biological interactions. Not that I believe there to be any harmful effects.
557.
by lima 6y ago
Nope.
558.
by lima 6y ago
In terms of IDEs, IntelliJ also comes with built-in profiling. And every modern web browser has robust built-in profiling tools.
559.
by lima 6y ago
> Buried in depths of their documentation? You mean right in the instructions on how to acquire them? > It’s also worked for years too. It was tolerated for years, but it was always on very shaky ground. Now Google pulled the ru
560.
by lima 6y ago
The Chromium build instructions are very clear on this: https://www.chromium.org/developers/how-tos/api-keys > Note that the keys you have now acquired are not for distribution purposes and must not be shared
561.
by lima 6y ago
They didn't say it was an external audit.
562.
by lima 6y ago
You can right-click on a phone number to call it from an Android phone connected to the same account.
563.
by lima 6y ago
> KVM and Xen have a smaller attack surface and are known to have a better isolation model, but I'm sure there are still plenty of exploits given enough resources. KVM - the low-level kernel-level hypervisor - has a tiny attack su
564.
Escaping VirtualBox 6.1: Part 1(secret.club)
324 points by lima 6y ago|46 comments
565.
by lima 6y ago
I don't even have a password, I think.
566.
by lima 6y ago
Wow, this is awful. I just tried to log into my account and I can't unless I give them access to my contacts. This is completely unacceptable - feels like a ransom.
567.
by lima 6y ago
Yep - simply deleting ROAs would make it "unknown". A RIR could, however, purposefully sign a new ROA with a different origin.
568.
by lima 6y ago
> Does the netblock "owner" suddenly see all of its traffic dropped? Assuming everyone implements RPKI validation AND the RIR signs a new valid ROA with a different origin: Yes, eventually. Depends on sync intervals. It'
569.
by lima 6y ago
Yes, and implementing that is exactly the point of Tailscale, with the added advantage of not relying on a centralized proxy.
570.
by lima 6y ago
It's more zerotrust-y than Cloudflare et al since it's entirely P2P, with only the control plane running in the cloud. Compared to ZeroTier, the Tailscale client has a permissive license, the mesh is fully routed (vs. a L2 netwo

More ›