lxgr

5 ms·

31.
by lxgr 12d ago
Much worse, this will greatly improve their position with regards to wiretapping their own citizens. Depending on who you are, Western CAs can come with some availability problems, but thanks to certificate transparency, you don't even
32.
by lxgr 12d ago
Sure they can, but very importantly, so far the US has not forced them to for extremely good reasons. As just one example, you can take a guess as to whether such a CA will support certificate transparency...
33.
by lxgr 12d ago
There are so many valid criticisms of crypto, but transaction confirmation time has been solved a long time ago.
34.
by lxgr 12d ago
> [...] you can’t keep tiptoeing around your enemy forever. If it doesn't cost the US anything and is strategically in their favor (via weakening an opponent), I really don't see why they couldn't have. On top of that, it&
35.
by lxgr 12d ago
How exactly do I use cash for online payments?
36.
by lxgr 12d ago
Forcing their customers to install government-affiliated alternative CAs, in turn allowing the government to spy on its citizens more easily via mis-issued certs? Great, that'll show them.
37.
by lxgr 12d ago
Isn't the same true for video decoders, though?
38.
by lxgr 12d ago
> And if you're displaying a cached image, the bandwidth use is zero [...] But then less stuff fits in my cache, so I'm transferring even more data. Also, not everybody has unlimited/unthrottled data plans. I really wish w
39.
by lxgr 13d ago
I do believe that vendor-interoperable SIP exists today, but I also know that I can't call >99.9..9% of the people in the world via SIP, and 100% of the ones I practically do call. This is a very different story from e.g. email – ev
40.
by lxgr 13d ago
Sure, in a way SIP is bigger than ever with NGNs, and there’s SIP use beyond that too, but actual interoperable SIP (as in, I can dial sip:name@example.com) is effectively not a thing anymore.
41.
by lxgr 13d ago
> that there was almost no reaction from the tech community that Apple had software running on every Mac that allowed them to remove any binary they wished. (Which sure sounds like a backdoor) Because that’s a documented feature (malware
42.
by lxgr 13d ago
Last time I looked at their web client, it was indeed doing absurd things (I think it used TCP and web sockets to carry video instead of WebRTC and shipped a WASM video codec that obviously can’t be GPU/hardware accelerated). Not sure
43.
by lxgr 13d ago
It’s a real shame that essentially all modern communication other than email runs over proprietary protocols.
44.
by lxgr 13d ago
Increasingly less so. 2G to 3G was a very clear cut on the radio side (TDMA to CDMA); 4G changed both the radio side (OFDMA) and the core (no more circuit switching, more Internet-standards-like). 5G is already much less clear: 5G non-SA li
45.
by lxgr 13d ago
That’s most likely because of the massive amounts of midband spectrum that became available for 5G use in the US and less so due to any inherent advantage of 5G.
46.
by lxgr 13d ago
More likely, data usage has increased greatly in your area since 3G was still available and your carriers spectrum or backhaul hasn’t caught up. 4G/5G make things more efficient but ultimately can’t fight physics.
47.
by lxgr 13d ago
The difference between 4G and (non-SA) 5G is fairly small compared to earlier generations. They use the same core network, and it’s actually quite possible to be connected to 4G and still see the 5G logo. These tricks are less common in Ger
48.
by lxgr 15d ago
> I’m pretty sure an average senior engineer would have finished that task much quicker [...] Maybe the lesson here is to not send a staff engineer in these cases ;)
49.
by lxgr 15d ago
DDoS-exploitable bugs generally do.
50.
by lxgr 15d ago
Your definition of security doesn't include availability, then?
51.
by lxgr 15d ago
Can't websites install web workers for persistent full offline access these days?
52.
by lxgr 15d ago
> It's a self correcting problem. You go to a site, it freezes your machine, you never visit the site again. What do regular users do about a malicious ad that runs on thousands of different sites? > Turning off WebGL = no more F
53.
by lxgr 16d ago
Did they do so by looking at inference prompts against their explicit promises, or maybe just because somebody tipped them off about his unpublished work? If it's not the former, while certainly concerning, I don't see how that&#x
54.
by lxgr 16d ago
"I took a real photo of this image printed on paper" seems possible to falsify, yeah, but that doesn't seem too surprising to me, given that anyone with a printer can print literally any possible image.
55.
by lxgr 16d ago
A faster engine is still very useful in practice, for example for position evaluations in game review. Not that an engine evaluation will always be helpful (the line in question making a position strong or weak might be effectively unplayab
56.
by lxgr 16d ago
> With regulation Z, the bank has to work to get their money back. Yes, but you potentially have to work to get your credit back. > And it's $0 liability under many circumstances mandated through the regulation, not just a revoca
57.
by lxgr 16d ago
> while the max liability on a debit card is $50 only if caught within the first two days Within two days of learning of the fraudulent use or the loss of an "access device" (i.e. a card). Otherwise you have 60 days from the
58.
by lxgr 16d ago
Which guys? :) I haven't seen checks being used to pay for groceries in either the US or EU in the past few years, in any case.
59.
by lxgr 16d ago
That's just a timestamping service then, not a content provenance/authentication scheme. Timestamping has been a solved problem for years; certificate authorities offer this, or you could just throw a hash onto any sufficiently tr
60.
by lxgr 16d ago
Yes, presumably there will be a cat and mouse game until the entire system including all peripherals has been brought into the trusted computing base, either physically or logically (usually with secured/authenticated communication). T

More ›