md_

38 ms·

421.
by md_ 5y ago
I can't help but think of this hilarious NY Times weddings announcement about a couple of "influencers" who met on Clubhouse: https://www.nytimes.com/2021/07/23/style/natasha-grano-micha...
422.
by md_ 5y ago
Well, if you think OLPC was a deliberate grift—I don't—then it's like the moral difference between scamming buyers looking for an Internet-connected juicer and scamming donors looking to help the world. As a non-deliberate grift—I
423.
by md_ 5y ago
Yeah, I think I agree with you there. The area for improvement for token binding or something like it is quite promising; not so for using IP signals. I think token binding itself had some design flaws that made it hard to realize these i
424.
by md_ 5y ago
> It can be made much less accessible because it's not meant to be shared with the remote side. Can be, indeed, but was not in existing implementations, to my knowledge. My point (perhaps I was more clear in my followup comment) was
425.
by md_ 5y ago
Agreed. And TB arguably could have supported hardware-backed key storage—but no implementations I am aware of did this. My point was only that lamenting the demise of TB as implemented is a bit overdramatic. Lamenting the demise of TB as
426.
by md_ 5y ago
Hmm, I'm not convinced it's better—but it depends a lot on your threat model. For preventing malware from using stolen cookies on a botnet, it's reasonable to argue that it's easier for the malware to steal the TLS clien
427.
by md_ 5y ago
That's fair. I think I agree with that characterization. I think if this excluded users who turned off iCloud sync, I'd have no qualms about it, however; the tradeoffs seem ideal for giving users a secure recovery mechanism. But u
428.
by md_ 5y ago
The rate limit per IP cam be lower than per user to make this more difficult; you can also offer other options (captchas, less brute-forceable auth factors). Not sure your point on “resetting” passwords, though. This applies to any validati
429.
by md_ 5y ago
Hmm. I think for such users this may be surprising. At the same time, you don’t really have any reason to trust the cloud HSM more or less than the Secure Enclave, right? Certainly it does increase attack surface, but if Apple said “now I-d
430.
by md_ 5y ago
Not really. If you don't rotate the six-digit code, the probability an attacker who tries sequential codes gets the correct code in 1M attempts is 1. But if you do rotate the code, the Bayesian probability that an attacker who tries r
431.
by md_ 5y ago
I agree with your first point and disagree with the second. :) I think it's highly likely that Apple was being honest and that the HSM service was not vulnerable to this attack. That's consistent (as you say) with this being a sep
432.
by md_ 5y ago
A slightly more detailed answer than the other two you got: It's likely a well-designed password (or similar) validation endpoint will both limit attempts per IP and per user, to avoid exactly the attack you describe. This limit pr
433.
by md_ 5y ago
Interesting, thanks! I certainly agree with what you wrote. But I think the point still stands that this is hardly black and white—the shilling did supposedly stay in circulation, right? The argument about taxes and legal tender certainly s
434.
by md_ 5y ago
I agree with your last part, but not the reasoning, exactly. :) If you started your own currency it would be worthless because of the lack of demand for it . Right now Bitcoin has a market cap of about 800bn USD, which (coincidentally) is
435.
by md_ 5y ago
I think the parent is talking about chartalism ( https://en.wikipedia.org/wiki/Chartalism ), which is essentially the idea that fiat currencies derive their value from the fact that taxes must be paid in them. A sort of
436.
by md_ 5y ago
Moreover, if Bezos had earned that as income instead of capital gains, it would have been “doubly taxed” upon inheritance; in effect, this rule (as with many others) merely excludes capital gains from taxes that apply to earned income. The
437.
by md_ 5y ago
Isn’t the DRM comparison exactly right, though? Improving ad targeting enables an ad-supported online ecosystem. Admittedly, there’s a tragedy of the commons issue: I have no individual incentive to enable FLOC. But, similarly to your DRM e
438.
by md_ 5y ago
Worth noting that the IRS taxes earned income even if granted as stocks or options, forcing liquidation. Your arguments against forcing liquidation apply equally to RSUs, yet the real-world treatment is different.
439.
by md_ 5y ago
Presumably you could “realize” gains upon transfers due to death, as you do with other transfers. Does it make estate handling a little more complex? Maybe a bit. But it mirrors other transfers, avoids punishing inherited earned income disp
440.
by md_ 5y ago
Indeed. An unrealized capital gains tax by itself (which does not tax the basis) probably requires you adjust the taxable basis to ensure there's no double taxation at sale. A wealth tax irrespective of basis is administratively easier
441.
by md_ 5y ago
True. I find the denominator chosen to be weird.
442.
by md_ 5y ago
Backing up a bit, you wrote, "It's true that a few (and very much declining) number of countries have some form of wealth tax that includes some amount of unrealized gains. The Netherlands, for example, marks-to-market on Jan 1st
443.
by md_ 5y ago
You wrote before, "TLDR is I'm a copywriter turned comms consultant. I work mostly with tech companies." "lol at" = not actually denying it, so not technically lying, right? ;)
444.
by md_ 5y ago
Everything you say is equally true for income taxation as wealth taxation. In fact, it's true for all forms of taxation--at a high level, taxation is a way of redirecting the use of resources.
445.
by md_ 5y ago
Indeed, this is such a pervasive question for journalists that they have entire courses on "journalistic ethics." ProPublica even wrote a long statement on why they believe publishing this is ethical, legal, and in the public inte
446.
by md_ 5y ago
Few points: - Yes, I don't know exhaustively, but a number of countries with wealth taxes do not have gains taxes. - Your comparison is a little bit mistaken, I think; you're looking at the tax only on the gain, whereas (obviously
447.
by md_ 5y ago
> TLDR is I'm a copywriter turned comms consultant. I work mostly with tech companies. Heh. Cui bono, am I right?
448.
by md_ 5y ago
IMO, Arnold's article is just not very good. I come here for the good articles.
449.
by md_ 5y ago
As ProPublica notes, taxation of wealth is rare, but far from unheard of. The historical basis for property taxes (in the 18th century) was that they were the primary source of wealth, so it's somewhat ahistorical for anyone to argue t
450.
by md_ 5y ago
> A and B are not the same, even if one encompasses the other in some meta sense. What does "meta" mean in your usage? I may be missing some point you are trying to make. Personal wealth taxes encompass unrealized gains taxes,

More ›