pdkl95

41 ms·

331.
by pdkl95 7y ago
Even if we ignore the strong ethical, humanitarian, and strategic objections, using torture as a tool to extract information always seemed like the wrong tool for the job. Causing someone distress/pain obviously decreases the chance th
332.
by pdkl95 7y ago
They turn to populist leaders for help. Usually this means some variation of either socialism or fascism.
333.
by pdkl95 7y ago
> anonymizes data as it collected it No, they don't anonymize the collected data (for any reasonable definition of "anonymous". The IP address alone gives GA a very close approximation of a unique key, and their own docume
334.
by pdkl95 7y ago
> Their strategy here is to push this narrative that content platforms should act like active content editors/curators and be held to the same standard. Except this isn't just a "narrative" being pushed by Time; YouTu
335.
by pdkl95 7y ago
> there’s this style of response This type of reprehensible response will keep happening until society finally learns how the internet fundamentally changed the nature of fame . The best explanation of the problem is the video "Thi
336.
by pdkl95 7y ago
> The abstractions ... [are] very surprising From this[1] insightful video essay by Kyle Kallgren: >> Metaphor Shear -- That feeling all users experience when you realize the metaphor you are working in is bogus. When the computer
337.
by pdkl95 7y ago
> For some of them, the www-data's home directory is the DocumentRoot “Well, there’s your problem.” Don't expose any ${HOME} to the world! SSH keys are not the only exploitable file in a typical homedir (or even auto-generated
338.
by pdkl95 7y ago
"There are two hard things in computer science: cache invalidation , naming things, and off-by-one errors." (Phil Karlton, et al ) Views (both regular and materialized) are really useful, but remember that storing data in two pl
339.
Unionization, Steady Careers, and Generations of Games Culture(youtube.com)
2 points by pdkl95 7y ago|0 comments
340.
by pdkl95 7y ago
I counter with an interview with many actual game developers: https://www.youtube.com/watch?v=2TSB5YQqDiY "Unionization, Steady Careers, and Generations of Games Culture" by Super Bunnyhop 03:15 Game Workers
341.
by pdkl95 7y ago
> I’ve never put pesticides on the lawns. Herbicides, sure, sometimes lots of herbicides Herbicides are a type of pesticide.
342.
by pdkl95 7y ago
> Browsers are far more battle-tested than just about any other web-facing application on your computer. They also have a monstrous attack surface because they are "web-facing". A specialized client that only implements one p
343.
Univision Claimed Our Video – We're Planning to Sue(youtube.com)
3 points by pdkl95 7y ago|0 comments
344.
by pdkl95 7y ago
While topics like privacy and DRM are important, framing the discussion in those terms de facto obscures/distracts from the issue of property rights . Using someone's property (to e.g. to spy on them) after they purchased it is
345.
by pdkl95 7y ago
I think the article's original title should stand. While some people might consider it "baity", I would describe "Smartphones Are Spies" as an accurate description of reality and the content of the article. The arti
346.
by pdkl95 7y ago
> Timers are generally better than cron. (which cron? Many cron daemons are available. While the traditional Vixie cron was popular with distros for historical reasons, it wasn't difficult to switch to another cron variant or any ot
347.
by pdkl95 7y ago
> Doorbell cameras aren't compelling targets for hackers They will be when people discover creative new ways to abuse them, but it doesn't even needs to be a "compelling target". Some people simply think browsing came
348.
by pdkl95 7y ago
https://www.youtube.com/watch?v=HKQDSgBHPfY DEF CON 25 - John Sotos "Genetic Diseases to Guide Digital Hacks of the Human Genome"
349.
by pdkl95 7y ago
yes: http://millcomputing.com/wiki/Protection Regarding ROP, that entire class of attack isn't possible if return addresses are stored in hardware that isn't accessible to the program. > "[Stacks on t
350.
by pdkl95 7y ago
What features would a "slimmed down version of systemd" provide that isn't available in various independent tools we used to use (and still use today). * Running/waking a program from network activity? inetd (xinetd) h
351.
by pdkl95 7y ago
> If the software is accurate at picking choices that match the set goals > auditing of the results vs the desired outcomes The core problem is this assumption that the goal is to prioritize accuracy . When making "life-changing
352.
Andrew “Bunnie” Huang – Supply Chain Security: “If I Were a Nation State ”(youtube.com)
7 points by pdkl95 7y ago|0 comments
353.
by pdkl95 7y ago
Or, as Zoz explained in his DEFCON 22 talk "Don't Fuck It Up!"[1], OPSEC is really REALLY hard . Even people that have the necessary technical background are human and make mistakes. To stay secure in the "dark web&quot
354.
by pdkl95 7y ago
> Necessary for whom? Necessary for anyone interested in preserving democracy [1]. Unless we actively fight to preserve privacy, surveillance capitalism will continue to "disrupt" traditional forms of power. > If follow SA
355.
by pdkl95 7y ago
> This referrer is very useful to figure out where traffic is coming from. This is exactly why sending the referrer header is insane [1]. The header betrays the user's privacy by design . Remove it ASAP. If your app breaks, that&#
356.
Why Electronic Voting Is Still a Bad Idea(youtube.com)
3 points by pdkl95 7y ago|0 comments
357.
by pdkl95 7y ago
Yes, you hae to ask the tld's server for the NS record - the delegated domain's authoritative server. That's one request that usually has a much longer TTL. I've seen TTLs of multiple days or even weeks for NS records,
358.
by pdkl95 7y ago
> Your browser is going to act as a VM to run a browser that will display the content. Gary Bernhardt's talk "The Birth & Death of JavaScript"[1] was an ominous portent of a terrifying future. Unfortunately, some peopl
359.
by pdkl95 7y ago
> unblockable ads delivered through first party and using obfuscated techniques like canvas or webassembly When I said basically the same thing 4 years ago[1], most people seemed to think it wasn't a serious concern or could be easi
360.
by pdkl95 7y ago
This is about 3rd party trackers masquerading as the 1st party by asking the hosting page to provide a CNAME under their own domain. With the tracker hosted under the 1st party's domain, they work around people that deny 3rd party cook

More ›