seanieb

17 ms·

121.
by seanieb 5y ago
And they couldn’t estimate accurately how fast the Taliban was recapturing Afghanistan, a country they occupied for over a decade! Too many cooks in that kitchen!
122.
by seanieb 5y ago
Oh this is interesting. Often bug bounty’s claim a published private key wasn’t in use or sensitive. This gives researchers the ability to call BS on that.
123.
by seanieb 5y ago
A talk by Moxie at CCC deals with this exact question. > “ Considerations for distributed and decentralized technologies from the perspective of a product that many would like to see decentralize. > Amongst an environment of enthusias
124.
by seanieb 5y ago
Same influencers that flog the grind culture, selling vitamins one minute and NFT’s the next.
125.
by seanieb 5y ago
“Secure”… not a chance. Flash was a tyre fire and even Adobe would say so. They did their best with massive resources, and still couldn’t claim it was secure. Please please please don’t claim this project is secure. It isn’t.
126.
by seanieb 5y ago
This is on par with Google launching Gmail with 1GB + “infinity” space. The other email providers didn’t know what hit them. It took them years to catchup.
127.
by seanieb 5y ago
As soon as Linux desktop software becomes anyway profitable to develop and maintain, I’m sure companies like Dropbox will build for it. That’s not Dropbox’s problem. It doesn’t help that Linux isn’t really a single OS but a bunch of differe
128.
by seanieb 5y ago
In theory… Can you name a popular large project or product where memory safety issues have been overcome this way?
129.
by seanieb 5y ago
Ideally you could edit ALL of your incorrect comments. And put the correction on top.
130.
by seanieb 5y ago
They can’t decrypt your messages. You would first need to send them your unencrypted messages before they can read them… please correct your comment. There’s enough misinformation in the world.
131.
by seanieb 5y ago
Great journalism eh?!
132.
by seanieb 5y ago
No they can’t arbitrarily decrypt messages. This process happens AFTER a user has complained and forwarded the unencrypted messages to WhatsApps abuse team. You’re first instinct is correct this is a BS nothing burger by journalist that sho
133.
by seanieb 5y ago
This story is FUD, pointing out that WhatsApp users can forward messages they received to WhatsApp’s abuse team, when reporting abuse… I’m not a fan of FB, but the series of stories on this reporting tool which has been in the product for y
134.
by seanieb 5y ago
When will people stop writing C? The memory safety issues make go, rust etc. much better solutions.
135.
by seanieb 5y ago
This just isn’t true in practice. Can you point to a popular c project that’s accomplished this? I bet there are a few tiny ones that make such claims but haven’t received scrutiny.
136.
by seanieb 5y ago
Real estate investors buying existing properties, without substantial capital investment into upgrades/renovations, are exactly the same as concert ticket scalpers. Their business is of little benefit to society.
137.
by seanieb 5y ago
Where’s Ireland’s IDA now?
138.
by seanieb 5y ago
So you’re technically correct, operationally incorrect. When CSAM is detected there is also the possibility of new, unhashed, CSAM being found amongst the suspects other files.
139.
by seanieb 5y ago
It's a government commission. That's it's entire purpose. "The FTC is a bipartisan federal agency with a unique dual mission to protect consumers and promote competition."
140.
by seanieb 5y ago
The word "researchers" is doing a lot of work in your comment. What's being researched is important and the FTC makes the distinction in their statement, "good-faith research in the public interest".
141.
by seanieb 5y ago
Without any context or common sense applied, sure.
142.
by seanieb 5y ago
All that text for a feature that no one, including the author uses correctly. Messaging your mates to reassure them everything is correct via Signal after you update your device and your safety number changes is pointless. The main function
143.
by seanieb 5y ago
Still a lot of these in Google cache... Passwords etc. can be changed, but the protocols and the information about readiness.. oh boy... absolutely classified. Somewhere in Europe there's a number of junior officers having a very bad
144.
by seanieb 5y ago
7ish years as a security engineer and all my gut instincts tell me that you’re site has auth bugs just from hearing the spec. It might be perfectly secure, but if I was put on your project tomorrow I’d be budgeting weeks to review and work
145.
by seanieb 5y ago
If the users browser doesn’t have samesite, you’ve got much bigger problems that JWTs wont solve.
146.
by seanieb 5y ago
> I don't think you've thought about the problem space enough. God grant me the self confidence of this fella. I’ve been working as infosec engineer and been arguing with frontend engineers ( note its usually an individual) wan
147.
by seanieb 5y ago
Hopefully the reviewers that failed to do proper reviews of those patches get relived of their privileges too. And the process gets throughly reviewed to prevent reviews being a glorified rubber stamp process.
148.
by seanieb 5y ago
After the code was accepted and in mainline… the horse was well out of the barn.
149.
by seanieb 5y ago
Regardless of their methods, I think they just proved the kernel security review process is non-existent. Either in the form of static analysis or human review. Whats being done to address those issues?
150.
by seanieb 6y ago
I’ll take that risk over no default e2ee on Telegram any day.

More ›