patrakov

29 ms·

391.
by patrakov 3y ago
Please do your own research and answer two simple questions below. How much time (money no object) would it take for you personally to get any citizenship other than your current one? How much time (assuming your current level of income) wo
392.
by patrakov 3y ago
I think that's an over-reaction. I am in a similar situation (I don't want certain people to know where I work), but I am OK with keeping the old CV, which doesn't mention the place where I work now, still online. I have al
393.
by patrakov 3y ago
Is this post somehow related to the recent Ceph CVE-2023-43040 ("Improperly verified POST keys"), where Digital Ocean was also credited? https://www.openwall.com/lists/oss-security/2023/09/26&#x
394.
by patrakov 3y ago
> Humans routinely fail to generalise in this way The linked paper has a whole paragraph on this very topic.
395.
by patrakov 3y ago
Note that Ubuntu patches the message and recommends `ssh-keygen -R github.com`, thus making it much closer to "just press ok". https://salsa.debian.org/ssh-team/openssh/-/blob/master/debi..
396.
by patrakov 3y ago
I have personally rejected a candidate that claims to know professional security tools but maintains that it is not his job to filter out false positives ("because they don't exist") before presenting the results to the devel
397.
by patrakov 3y ago
So, somebody succeeded running OpenBSD/ARM64 in someone else's stock pre-configured VM. Great! But what about some bigger targets - e.g. running OpenBSD ARM64 on a stock bare-metal server provided by some dedicated hosting company
398.
by patrakov 3y ago
Well... using PureVPN as an example. They claim that they have been audited twice. First audit, from 2019: https://my.purevpn.com/pdf/Privacy_No_Log_Audit_Report.pdf I tried to contact the auditor, Altius IT, in order
399.
by patrakov 3y ago
I think one of the possible use cases is for corporations to provide "cloud workstations" that cannot be physically stolen, from which the untrusted employee cannot steal files, that are in the correct country even if the employee
400.
by patrakov 3y ago
This is not a VM. They connected Nitro, which is an NVMe implementation, to real Mac hardware via Thunderbolt. So this is just a Mac booting from external Thunderbolt-connected storage.
401.
by patrakov 3y ago
Dear sir, the "NIST" organization that you mentioned is not a recognized authority in Japan. In Japan, one has to follow NISC guidelines, not NIST.
402.
by patrakov 3y ago
I am really worried that this experimental thing was included (although not by default) in "stable" OpenWrt version for more than a year. How many routers were pwned?
403.
by patrakov 3y ago
How would you write such a check?
404.
by patrakov 3y ago
It is not about forgetting to wipe a disk. A realistic scenario is that an SSD fails in a way that it ceases to be recognized by the system. At this point, you have no way to wipe it. Still, you may be required to return it to the vendor (b
405.
by patrakov 3y ago
On my laptop I have custom Secure Boot keys. I know I did not sign any other OS (well, I did - but with a different key), so this attack won't work, unless the attacker can somehow trick the unmodified previous version of the kernel +
406.
by patrakov 3y ago
> Maybe the SSH agent on the client can re-authenticate to the server when requested? There is a PAM module that does this: https://github.com/jbeverly/pam_ssh_agent_auth Note that this is a bad idea from the securi
407.
by patrakov 3y ago
> If room temperature and pressure superconducting or nuclear fusion became viable, your kids might also be unlikely to play around with them on their own. I disagree. Kids will turn anything not too abstract into toys. An improvised rad
408.
by patrakov 3y ago
> If you go to a conference for a hobby that's tourism, right? That's exactly what I was told (as a statement, not as a question) by an official a few years ago when applying for a visa for a trip to Germany.
409.
by patrakov 3y ago
What you are talking about is implementation-defined behavior. It exists in the C standard separately from the undefined behavior.
410.
by patrakov 3y ago
CPU-only, 8-bit quant, Intel Core i7 4770S, 16 GB DDR3 RAM, 10 year old fanless PC: 32 seconds per sampling step, correct output.
411.
by patrakov 3y ago
I am a consumer, and I look not only at cost per megabyte. I also need to sleep at night while my laptop gets backed up and while my torrents get downloaded and seeded. Therefore, due to their noise, HDDs in the same room are not an option,
412.
by patrakov 3y ago
This non-deterministic sampling is not only for users to explore the space of responses. Without this, the LLM itself is prone to generate too-repetitive text.
413.
by patrakov 3y ago
The question here is not telemetry itself, but the infinite over-reach in what data is collected. Categorized websites have nothing to do with driver crashes or performance issues.
414.
by patrakov 3y ago
Websockets still don't work in a corporate setting where everything is being filtered through an HTTPS-breaking proxy that tries to detect malware and whose authors believe that, because they can't reliably detect malware in webso
415.
by patrakov 3y ago
What? Google keeps passwords for websites and for Android apps in the same place, and you can view them both at https://passwords.google.com/
416.
by patrakov 3y ago
It is not about the gear, it's about security people that force you to disable IPv6. "You do not have a valid technical or business reason to use it. And, as electricians say, a VISIBLE circuit break provides the best assurance th
417.
by patrakov 3y ago
It's not AI. It's a sophisticated fuzzer called syzkaller. Google runs it as a bot, called syzbot, and for every crash or corruption it finds, it tries to bisect and send automated email to the correct maintainer and to the person
418.
by patrakov 3y ago
In the TPM threat model, the attacker is you, and the defender is your employer who wants to make sure that you don't exfiltrate keys from your work laptop to any other (i.e. unauthorized) device.
419.
by patrakov 3y ago
Running anything on NAT64 without 464XLAT is a broken setup.
420.
by patrakov 3y ago
/64 is not enough if you need to run two networks (e.g., a guest WiFi in addition to the main one). And yet, here in the Philippines, an IPv6 subnet larger than /64 is an enterprise-only feature that is denied to home users.

More ›