rocqua

7 ms·

61.
by rocqua 9mo ago
If your value proposition is: do X, and then you have to take action against an open source competitor for doing X better, that shows that you were beaten at the thing you tried very hard at, by people with way fewer resources. I can see wh
62.
by rocqua 9mo ago
Sorry to hijavk, but why are drones still on electric power? I'd expect some kind of air breathing engine to be manufacturable at low cost if it only has to function for a single flight. Especially for interceptor drones the speed is v
63.
by rocqua 9mo ago
Are you perhaps reading a personal advice in a paper, disliking the advice, and then finding that due to the experimental design, it doesn't work on you. And then, rather than concluding the paper didn't intend to inform your pers
64.
by rocqua 10mo ago
That's why someone suggested a non samesite cookie for reads and a samesite cookie for requests with side effects. CSRF is mostly about causing side effects, not about access to information. And presumably just displaying your landing
65.
by rocqua 10mo ago
No, the program should take care to enable TCP_NODELAY when creating the socket. If the program gets passed a FD from outside it's on the outside program to ensure this. If somehow the program very often gets outside FDs from an oblivi
66.
by rocqua 10mo ago
I had a look, and it seems cool. But it doesn't seem to do the thing I love about Kani: work with only very partial annotations, only proving the annotations and being a very light lift on code not relevant for the annotations.
67.
by rocqua 10mo ago
I've been trying to convince others of this, and gotten very little traction. One interesting response I got from someone very familiar with the Tamarin prover was that there just wasn't enough example code out there. Another tak
68.
by rocqua 10mo ago
I don't think the parent post is complaining that academics are writing proposals (e.g as opposed to people with common sense). Instead, it seems to me that he is complaining that academics are writing proposals and papers to impress f
69.
by rocqua 10mo ago
Not quite. Because that requires pushing an update and only hits those who have windows automatic updates enabled. A lot of companies run those updates on a slight delay, which means they have a decent enough window to block such an update.
70.
by rocqua 10mo ago
Linux is not a smart target. But OpenOffice, nextcloud, postfix, those are much easier targets for developer coercion to compromise widely installed software that is important for "linux on the desktop". Ah and ofcourse also the d
71.
by rocqua 10mo ago
I doubt that Microsoft has a kill switch. Though through automatic updates they still have pretty strong sabotage capabilities. But the OS is not where Microsofts power lies. Its in exchange (almost everywhere cloud managed, including for m
72.
by rocqua 10mo ago
I believe the reasons we "regressed" into agriculture from hunting and gathering are much more complicated than "we moved into more marginal land". It does appear that the median hunter gatherer life was better than the
73.
by rocqua 10mo ago
There's also a lot of specialized instructions like AES ones. But the main thing that makes x86 CISC to me is not the actual instruction set, but the byte encoding, and the complexity there.
74.
by rocqua 10mo ago
That depends on sizeof(*arr) no?
75.
by rocqua 11mo ago
It's a well worn playbook by now. But Meta seems to be the only one where we now have proof of internal research being scuttled for showing the inconvenient truth.
76.
by rocqua 11mo ago
This is line coding, often used on wired connections. But reading a hard drive trace isn't quite a wired connection, so the trade-offs are different. Most notably with line coding when using positive and negative voltages it is quite i
77.
by rocqua 11mo ago
Certifications prove that you studied, and are smart and or diligent enough to pass an exam. If those certifications try to teach you bad approaches. Then they don't help competence. In fact, they can get people stuck in bad approaches
78.
by rocqua 11mo ago
Thanks for the correction
79.
by rocqua 11mo ago
Those numbers are too good to expect. If 90% right 10% wrong is the baseline would you take as an improvement: - 80% right 18% I don't know 2% wrong - 50%/48%/2% - 10%/90%/0% - 80%/15%/5% The general point
80.
by rocqua 11mo ago
The point was about security updates. Without forced upgrades the whole ransomware thing would have been so much worse as just a singular example.
81.
by rocqua 11mo ago
The automatic reboot has made the world a better place, because too many people were incredibly bad at making this risk tradeoff. It might still be bad thing for taking away agency. But it was also a massive improvement to society.
82.
by rocqua 11mo ago
From the perspective of Google maybe, but from the perspective of open source projects, how much does this drain them? Making open source code more secure and at the same time less prevalent seems like a net loss for society. And if those r
83.
by rocqua 11mo ago
This was not a case of stumbling across a bug. This was dedicated security research taking days if not weeks of high paid employees to find. And after all that, they just drop an issue, instead of spending a little extra time on producing a
84.
by rocqua 11mo ago
Do you happen to know whether the worry is about the inertness of microplastics, and hence the physical damage of the particles. Or is it in the plastics being chemically interactive with tissue?
85.
by rocqua 11mo ago
How well does the link need to be proven before we act? The fact that we haven't found the causal link yet is not proof that there isn't one. And a whole lot of correlation suggests that there is. Why should we not take this as ye
86.
by rocqua 1y ago
There's legally usually quite a big gap between what pictures you can take of people, and how you can publish them. In places where you don't have a reasonable expectation of privacy, you can generally be photographed. But there a
87.
by rocqua 1y ago
Is the sun loud in radio frequencies too?
88.
by rocqua 1y ago
Given speed of light concerns. A week long delay is undetectably irrelevant.
89.
by rocqua 1y ago
To be a bit morbid, one could also explain OPs observation that "people are more fragile" by the lower child mortality by the hypothesis that these more fragile people wouldn't have made it through infancy before. I don'
90.
by rocqua 1y ago
I slightly disagree. Specifically, in the case of academic lectures, on: > The best power point slides have zero overlapping words with what the presenter is saying except perhaps some slide or section titles. Especially when not taking

More ›