ryan-c

85 ms·

871.
by ryan-c 12y ago
> screen potential tenants via social media How is that not inviting a discrimination lawsuit?
872.
by ryan-c 12y ago
I did say something to the effect of "I know plenty of people who made a lot of money", but I also have lots of friends and acquaintances who haven't. Many failed (or failing) companies, a few "small" exits.
873.
by ryan-c 12y ago
Ask if they allow early exercise, and do it if you can afford to. It will probably be money down the drain, but it will save you a lot in taxes if there's an exit. If you do not do it and the company takes off, exercise can become unaf
874.
by ryan-c 12y ago
I worked at Palantir from 2009 to 2014 (started as SysEng, pivoted to Infosec). I have only "taken home" enough to recoup the cost of exercising my options and paying taxes (ugh, AMT), but my stock is worth something in that range
875.
by ryan-c 12y ago
This may be a bug in wpa_supplicant, I'm not sure. I looked at the code, and it seems to be trying to avoid using the SSID in a probe unless this value is set to 1, but the code is structured such that the check needs to be done in man
876.
by ryan-c 12y ago
From the wpa_supplicant.conf man page: scan_ssid SSID scan technique; 0 (default) or 1. Technique 0 scans for the SSID using a broadcast Probe Request frame while 1 uses a directed Probe Request frame. Access poi
877.
by ryan-c 12y ago
I looked at my wpa_supplicant.conf. None of the networks have scan_ssid set. I'm unsure how often this happens. I have a probe logger running 24/7 at my apartment with four radios, but it only logs the first probe it sees for a gi
878.
by ryan-c 12y ago
It does this for networks picked from the scan results - I might have been mistaken about one or two networks, but I see the probes for multiple networks I'm sure I picked from the list.
879.
by ryan-c 12y ago
try sudo tcpdump -l -e -I -i en0 'type mgt subtype probe-req' Way more efficient to use bpf instead of grep.
880.
by ryan-c 12y ago
I've observed (just looked at the log to make sure) devices running Android KitKat sending probe requests for non-hidden networks.
881.
by ryan-c 12y ago
I've been running some custom software for sniffing probe requests from my apartment (my log shows over 30k unique devices). The most interesting one I've seen is Teslas... They'll probe for "Tesla Service", and som
882.
by ryan-c 12y ago
"$1M/yr" should have been "$150k/yr" there.
883.
by ryan-c 12y ago
Normally mortgage payments aren't allowed to be more than 38% of gross income for someone with no debt which works out to $4750 for $1M/yr, and you generally have to have a 20% down payment, and even then, it's still going to
884.
by ryan-c 12y ago
For wifi at least, it doesn't have to be connected, the radio just needs to be on.
885.
by ryan-c 12y ago
Have you done this? I'd be interested in details.
886.
by ryan-c 12y ago
Having maybe 16 to 64 GB of flash storage (for writeback cache) would probably make a significant difference here. I think over the next five to ten years tiered storage will probably go mainstream.
887.
by ryan-c 12y ago
That is based off of the BER (bit error rate) of the drive, as stated by the manufacturer. It's usually spec'd at 1e-14 or 1e-15 - that is to say one in every hundred trillion or one in every quadrillion bits. This works out to 12
888.
by ryan-c 12y ago
Whoops. Fixed.
889.
by ryan-c 12y ago
I have seen that proposal, I do not consider it plausible, and the reasons it would cause fork issues are addressed in the thread there. * Pool A mines block trying to import example.com, and validates ownership via TXT record. * Pool B mus
890.
by ryan-c 12y ago
> Well, that is just how names work. Google was the first to register google.com, and now you "trust" that google.com belongs to them. You trust that google.com belongs to Google because you trust the DNS root zone to tell you
891.
by ryan-c 12y ago
> .com's cannot be MITM-proofed in a practical manner, unless they imported into a blockchain. Trying to "import" domains from traditional TLDs into a blockchain really isn't a good idea. This would require miners to
892.
by ryan-c 12y ago
Namecoin's .bit registration process involves a blinded commitment step to prevent front running at time of registration. Also worth noting that the names expire after ~8 months if not renewed. Whomever has the private key for the most
893.
by ryan-c 12y ago
Clients supporting ECDSA certificates advertise it via a TLS extension - some server software can actually serve up a RSA or ECDSA certificate depending on what the client claims to support.
894.
by ryan-c 12y ago
I have a close friend who worked at a place that had that policy for China and France, along with no VPN access from those countries.
895.
by ryan-c 12y ago
"registered sex offender" is pretty meaningless without context - in some states getting caught peeing in a bush after a night of drinking in college can result in that label.
896.
by ryan-c 12y ago
Crashplan also has client side encryption, though the security of it is a little questionable (I cannot elaborate for legal reasons).
897.
by ryan-c 12y ago
prgmr did reboots yesterday
898.
by ryan-c 12y ago
M - N must be "large enough" and must be unpredictable, though. It might need to be pretty big.
899.
by ryan-c 12y ago
Are you aware of fora.tv?
900.
by ryan-c 12y ago
Knowing the approximate file sizes and number of files in a directory, especially with further context of overall directory structure can allow someone to guess what the content is with high probability if the files are "well known&quo

More ›