md_

68 ms·

661.
by md_ 9y ago
What are the overheads of maintaining userland? Not trying to be stupid, but I'm not really clear on what the advantage is of this system. Do I understand correctly that the dom0 OS is still providing drivers and hardware abstraction?
662.
by md_ 9y ago
> You've never lived in a state where your car insurance premium depends on your credit score, have you. Hmm, I don't know, to be honest. That hadn't occurred to me. > I think you understand perfectly well the problems
663.
by md_ 9y ago
How did he lose $3k? I've been curious about the real-world impacts of identity theft for quite some time. In the article linked, the author's only obvious losses were a) on the home mortgage (couldn't cosign; worse rate) and
664.
by md_ 9y ago
I recently had the brilliant idea that someone should create a site where we all enter our social security numbers and personal information (DOB, name, etc), with the promise that once the site collects, say, 100M verified records, al
665.
by md_ 9y ago
It assumes a number of things not in evidence, some of which are fairly improbable: 1. That the NSA has access to a sizable chunk of all Internet communications, sufficient to have the "known" communications to match to the "
666.
by md_ 9y ago
Um, unsourced speculation from someone with no credibility in the field making an allegation which on its face doesn't add up? Why is this even here?
667.
by md_ 9y ago
Thanks. I'm always surprised at the thoroughness of some replies here. BTW: Ello? I didn't realize that was still around. :)
668.
by md_ 9y ago
It's an interesting argument, but is it based on empirical evidence, or merely supposition? (More recently, you can observe a seeming correlation between the decline in hours worked and the increase in labor productivity in the US in t
669.
by md_ 9y ago
Interesting. How do they protect against clickfraud, though? Paying the user seems to me (somewhat naively, because I'm not super familiar with clickfraud) to increase the incentive for abuse, since you don't have to run a malicio
670.
by md_ 9y ago
> if you were simply to collect that data yourself, sell it on the open market, and spend a portion of the proceeds on the tax prep service, you would end up with profit Hmm. Could you sell it on the open market? If so--if the margins f
671.
by md_ 9y ago
When I was a college student in the US, a classmate of mine wanted my help automating an online poker site. Slightly more "victimless," but not necessarily any more ethical. Then again, Bernie Madoff was an American. As you say, s
672.
by md_ 9y ago
2. Phishing and XSRF are effectively the same in this case, no? We're talking about the phisher relaying the challenge to the victim and tricking them into posting the response--which doesn't really require phishing per se, hence
673.
by md_ 9y ago
Right. My point was only that most people may want a lost-password fallback; this scheme doesn't prevent implementers from providing that, so it's not really a big deal.
674.
by md_ 9y ago
2: What I was trying to understand was whether a malicious site can relay the "securelogin://" challenge generated by a good site to the victim. Basically, an XSRF attack. Does the client validate the context of the chal
675.
by md_ 9y ago
One point not mentioned by others here: In the case where recovery entails a required password change and the site imposes some password history--the common case, though I don't know if this is true of Fastmail--the real account holder
676.
by md_ 9y ago
I like the little details. And unlike Steve Gibson's SQRL--which I was trashing recently for being overhyped--you don't come off as a dick. ;) Some questions/comments: 1. The github would be clearer (to me, anyway) if the pro
677.
by md_ 9y ago
SQRL has always annoyed me because of Gibson's propensity for presenting this as novel work. QR-based logins have been around for a long time--as with http://www.zdnet.com/article/open-sesame-googles-no-password...
678.
by md_ 9y ago
Flipboard also uses QRs. But to be accurate, this is a convenience feature, not a security feature. It's still phishable.
679.
by md_ 10y ago
Yeah, this is what I used to say when I was in college, too. ;) "Just another server to backup" is, indeed, not a big deal. It's strictly more work than not having another server to backup, however, and when it fails, it fa
680.
by md_ 10y ago
> I think it's plausible that these managers exist, but they're impossible to identify ex ante. Furthermore, a smart manager will charge fees that are equal to the alpha they generate. Why would they? Unless they're so rar
681.
by md_ 10y ago
"Doing this is cheaper than paying GitHub, and it will give you the satisfaction of being a True Hacker." Or I could work on problems that really matter and leave the sysadmin job to someone who gets paid to do it. ;) More serious
682.
by md_ 10y ago
> Maybe you read it right, and got transported to an alternate universe afterwards? I swear this happens to me all the time. https://www.vice.com/en_us/article/the-berensteain-bears-con...
683.
by md_ 10y ago
Which comparison is more meaningful? According to "Dark Sun", in 1945 the Manhattan Project was "approaching the US automobile industry in number of employees and capital investment." That comparison is utterly astoundin
684.
by md_ 10y ago
That's neat, but it would be even cooler if they sent you the photos online. The fact that they are printing them out and sending them to you in the mail shows just how behind the USPS is when it comes to technology.
685.
by md_ 10y ago
The author makes a strong case that Jetsmarter is a stupid idea, but not that it's a Ponzi scheme per se. That's hyperbolic and unfair. It appears Jetsmarter is a terrible idea and investors will lose out--but not because it'
686.
by md_ 10y ago
In a way, the whole thing is much weirder. As Shteyngart notes, mechanical watches are in almost all ways inferior to quartz in terms of utility. But because of that inferiority (and sensitivity to manufacture), the difference between poor
687.
by md_ 10y ago
Yes, certainly! I was highly tempted by the Seagull "1963", which is a replica of a model made for the Chinese air force in 1963 (powered by a Seagull ST19 movement, supposedly a clone of a Swiss Venus column-wheel chrono movement
688.
by md_ 10y ago
0_o Gary Shteyngart is a quite famous novelist. So, yes. ;)
689.
by md_ 10y ago
> Can you get a similar, and perhaps even better constructed (machines are, after all, more precise than humans) watch from China? Sure. Is it the same watch? No. As far as I can tell, the manual labor is roughly the same in both cases.
690.
by md_ 10y ago
I don't have a huge amount of exposure to current malware trends, to be honest--it's not the area I work in at the moment. So tl;dr I can only guess. You're right that unsophisticated malware may be thwarted by per-app disk e

More ›