rfoo

27 ms·

541.
by rfoo 3y ago
Good point, it's not about specific vendor attestation. My Yubikey 5 supports user verification via PIN, but it can only store 25 resident keys :( That's my hardwares' fault.
542.
by rfoo 3y ago
> If an iPhone is secretly pinging some backend server for telemetry / looking for automatic updates / etc, then all those pings will now happen from the Tor exit node, effectively completely deanonymizing the user. Tor picks d
543.
by rfoo 3y ago
> If you want to use a USB security key, you still can--Passkeys do not take away from that. I can't. Most of services I use do not support using Passkeys + a USB security key as second factor. I'm very happy to use Passkeys (s
544.
by rfoo 3y ago
Nope. Passkeys replace passwords, just as SSH keys replace your root password during login. Passkeys alone are a slight upgrade in terms of security compared to password only. They are a major downgrade in terms of security compared to pass
545.
by rfoo 3y ago
Prefix scan is not embarrassingly parallel. Yet OP's statement still works when you change it to scanl (+) 0 [0 1 2 3]
546.
by rfoo 3y ago
The post argues that there is no portable low-level languages, including C. i.e. truly low-level languages can't be portable and is bound to the architecture.
547.
by rfoo 3y ago
Rewrite the world in Rust /s The real answer is: none. There are two problems, the first is you have to rewrite the world with the new language and hardware. The second is, unfortunately, language enthusiasts who are willing to rewrite
548.
by rfoo 3y ago
The industry does not accept regression. It's okay back then cause what you described is not a regression when they happened - "a few years later" doesn't count, most people don't buy laptop for upgradability. For t
549.
by rfoo 3y ago
https://news.ycombinator.com/item?id=36148696
550.
by rfoo 3y ago
Soldering the RAM to the board has performance advantages which must be addressed before we reverse the trend. LPCAMM promised similar (only slightly worse than soldered) performance/energy characteristics as soldered LPDDR5X and is sa
551.
by rfoo 3y ago
> unless you think the local government has substantial influence on Hu Xijin or the censor They do.
552.
by rfoo 3y ago
> But I guess this guy didn’t have the option to report the income and pay his taxes? He has the option. I'm not sure if he did it though. The problem here is it was confiscated arbitrarily, it's not tax authority doing all tha
553.
by rfoo 3y ago
China has > the money is in an escrow and released as the construction progresses. too. The problem is it doesn't work: the fund release schedule can't be perfectly aligned with each stage of the constitution on a cost basis. T
554.
by rfoo 3y ago
In theory, passkey replaces password. Single factor passkey is more secure than single password, and it doesn't matter where it's stored. A passkey in whatever password manager we use (KeePass etc) makes sense. Such a passkey shou
555.
by rfoo 3y ago
The industry is pretty bad at blocking RCEs (0-day is just inevitable, but preventing 1-day or just stolen credentials is IMO equally hard). The industry is better at detecting compromise by spotting post-exploitation behaviors such as reve
556.
by rfoo 3y ago
> Except... if you install Python from the Microsoft Store it does have `python3.exe`. It's worse. If you don't install Python from the Microsoft Store there will still be a `python3.exe`. But running it just opens Microsoft
557.
by rfoo 3y ago
It sounds like AWS dodged such an accusation by making their services extremely and unfairly expensive. Otherwise I'd bet it would become: "whenever we have an attack at work, 99 out of 100 times its coming from AWS". Abusers
558.
by rfoo 3y ago
Your point on sandboxes reduce attack surface is good. > so there is no need to be passing complex and dangerous legacy datastructures across the boundary either. lol, by same logic there is no need to be passing complex and dangerous le
559.
by rfoo 3y ago
... and then people chain it with a sandbox escape. This bug is the initial vector of last week's NSO Group zero-click exploit for iPhones: https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer...
560.
by rfoo 3y ago
Thanks for clarifying. Hukou itself is indeed very bad. There's a few subtle details which made it not feel like a (traditional) class system to me. tl;dr it's no longer a urban/rural class system, it's more of a born-in
561.
by rfoo 3y ago
Rumor says it uses 1980Di.
562.
by rfoo 3y ago
Which is why I believe I'm biased: I support releasing source codes, even if it sounds like it's going to reduce my pay.
563.
by rfoo 3y ago
> doesn't it make IoT devices incredibly insecure for normal users How secure or insecure a device is is unrelated to whether its source code is public. Disclosure: I might be biased on this, as I'm a reverse engineer.
564.
by rfoo 3y ago
How do you get ~5% effective tax rates? With EU-level salary you should be hitting 30% in their progressive income tax system. China has hidden sales tax (in the form of VAT), too. IIRC As long as you work in tech (OK, there's some mor
565.
by rfoo 3y ago
Which system is China's caste system in your mind?
566.
by rfoo 3y ago
If this is how we get unauthorized bread I don't dislike it.
567.
by rfoo 3y ago
I just read the original press release and it mentions heating up the battery before charging. Apparently CATL added a system to warm up the battery ("evenly" - idk what does this mean) very quickly.
568.
by rfoo 3y ago
Alphabet-based writing is inferior. Convince me otherwise.
569.
by rfoo 3y ago
Yes, as you have seen this time.
570.
by rfoo 3y ago
It's the mistranslation of room-temperature superconductivity. "super islands" is likely translated from 超岛 which sounds the same as 超导 (superconductivity). I have no idea how 室温 (room-temperature) became extraterrestrial, mu

More ›