rst

76 ms·

781.
by rst 13y ago
Interesting how the public school "reform" movement in the US cuts hard against this sort of experimentation --- in particular, by mandating curricula, and evaluating students and schools by performance on cookie-cutter tests that
782.
by rst 13y ago
The "law enforcement" part is common in privacy policies; if whoever's running a web site gets a subpoena for personal information (or something more exotic, like an NSL), they don't really have the option of keeping it
783.
by rst 13y ago
And Medicare dominates Social Security, so what we're really talking about here is the unchecked growth in medical expenditures. Which is, in turn, subject to change by public policy.
784.
by rst 13y ago
The broadcast versions of the negotiations are edited, sometimes heavily, so you can't necessarily assume that things happened as quickly in real life as they did on the screen. (Every once in a while, I'll catch them referring t
785.
by rst 13y ago
No; Lavabit had the means to provide metadata on individual users, had done so in the past, and ultimately offered the same wrt the target of the current orders (unnamed in the documents, but we all know who it is).
786.
by rst 13y ago
And you're omitting "In fact the FBI agents even admitted their intention to collect passwords in transit so they could access emails protected by Lavabit’s encrypted storage feature." Regardless of the legal rationale, the F
787.
by rst 13y ago
Not during descent --- it got to the point of doing the second burn, but that sputtered out early because the stage was spinning too fast, and the spin was centrifuging fuel to the edges of the tanks. They haven't actually said that i
788.
by rst 13y ago
Per SpaceX post-launch press conference: all payloads delivered safely into orbit. First stage did not land intact. The first burn went OK. The second (single-engine burn braking to the surface) cut off early: the stage spun, and the ro
789.
by rst 13y ago
Launch window opens at 9:00 AM PDT (noon Eastern). They'll be trying to hit the beginning of the window, but delays are possible. A few significant events after launch: T+01:18 -- max Q (highest aerodynamic pressure) T+02:43 --
790.
by rst 13y ago
Unfortunately, Lisp Machine software was not particularly secure. Everything ran in the same address space, with no protection; ordinary user code could, for instance, just call a low-level disk driver. And the code running in this enviro
791.
by rst 13y ago
Also of note there: claims that NSA does routine MITM attacks on SSL/TLS. The relevant programs are "Hush Puppy" and "Flying Pig", mentioned around the middle of the article; the description is a little garbled (I
792.
by rst 13y ago
Why couldn't who prosecute? That's a function of the government; a prosecutor is not obliged to engage in a case (formally, get an indictment out of a grand jury) whenever they believe a crime to have been committed. Undercover a
793.
by rst 13y ago
Nobody uses them because they came out of the NSA with little precedent in the open literature, and independent analysis quickly uncovered this vulnerability.
794.
by rst 13y ago
Proximity Alerts are part of the released AOSP core source. The replacement is not. They can interact with the WIFI location provider, but don't have to, and are still functional even if it's disabled (which is easy to do from t
795.
by rst 13y ago
To be fair, Google also owns a phone manufacturer (Motorola), also bought on the cheap after a few years of flagging sales. They've managed to keep relationships with other phone manufacturers going despite this, so far, but it is a s
796.
by rst 13y ago
They're also migrating some functionality from core Android into Play Services. For example, the replacement for the (effectively broken) proximity alerts is the new geofencing API. But that's not in core Android, it's in P
797.
by rst 13y ago
The Independent also said that Snowden had downloaded pretty much all of an internal GCHQ wiki. There has to be lots of source-and-methods info in there, and Snowden himself has so far chosen to leak none of it. Given that, the weasel-wo
798.
by rst 13y ago
The biggest problem with one time pads is that their distribution and management is a huge logistical hassle. Reuse is a consequence of that.
799.
by rst 13y ago
Use full end-to-end encryption. The "known compromised" machine doesn't do the encryption or decryption in the first place; that's done at the physically secure (you hope!) endpoints.
800.
ZRAM (Compressed Swap) Might Finally Be Moved Out Of Linux Staging(phoronix.com)
2 points by rst 13y ago|0 comments
801.
by rst 13y ago
... or make sure that your cloud-based resources, whatever they are, only see ciphertext, and access them only through heavily secured machines that you hold locally. Which requires the attacker to compromise your laptop, or phone, or what
802.
by rst 13y ago
This is pretty much the reason that Silent Circle shut down their email product. Their other offerings use custom protocols with full end-to-end encryption (and are still up and running), but for email, they were trying to interoperate wit
803.
by rst 13y ago
The funny thing is that FISA was originally intended to curb the intelligence abuses that had come to light earlier in the '70s, in which phones were tapped, and international telegrams seized en masse, with no legal authority whatever
804.
by rst 13y ago
Automation, done right, does replace low-skilled labor --- but doing it right involves completely re-engineering the tasks to support it. In system administration, for instance, the scripts to configure (and monitor, and alert about malfun
805.
by rst 13y ago
"Fruit of the poisoned tree" is a peculiarly American doctrine which is recent as these things go; Wikipedia traces it to a court case from 1920. And it's a somewhat problematic way of dealing with misconduct by the authoriti
806.
by rst 13y ago
People in this thread seem to be arguing past each other. Patrick is specifically disputing the claim (a few posts up) that you can always tell if the hardware is adding incorrectly. His argument is that if it's deliberately manufact
807.
by rst 13y ago
BREACH is a variation on the theme (compression at a different protocol layer, but again pre-encryption). We're going to see more of these.
808.
by rst 13y ago
Which countries would these be, and how could you be sure? Remember that exceptions to normal judicial procedures might take some form other than a secret court, and can be a whole lot less overt. (And that the governments may be motivate
809.
by rst 13y ago
Depends which Americans, and where they are. I've been at quite a few research seminars at MIT where speakers got pummeled with questions so hard that the material on the slides more or less fell by the wayside.
810.
by rst 13y ago
FYI, this might have gotten more eyes as a comment on one of the (fairly numerous) Tesla-related submissions here. A submission needs several upvotes within a half hour or so of submission to make the front page, or it sinks without a trac

More ›