simiones

17 ms·

301.
by simiones 1y ago
I've actually been responsible some 10 years ago for introducing a bug like this in an official release of an industry-standard tool for a somewhat niche industry. Some SQL queries we were generating ended up saying `SELECT x FROM t W
302.
by simiones 1y ago
I don't think the problem raised in the article is limited to tagging. Friend A can recognize me in a picture from friend B regardless of whether I'm tagged there or not. Then again, this is a pretty obscure problem, or more of a
303.
by simiones 1y ago
To what end? It's still very likely that malware on your machine will find some other way to exfiltrate this data / impersonate you while using your machine and exfiltrate the important parts (e.g. your money).
304.
by simiones 1y ago
What is the scenario that this is supposed to help with? Allowing you to browse malicious sites slightly more securely? Slightly less chance that running malware will steal your money?
305.
by simiones 1y ago
> * Job loss/gains wouldn't be 1-1 as new US factories would likely use fewer workers. Why in the world would you think this is the case? China leads the world in manufacturing efficiency, maybe behind only Japan and South Kore
306.
by simiones 1y ago
And you think trade war with China is something that the entire nation believes is necessary hardship, when even Trump allies like Musk are speaking out against it, as is the entire business world?
307.
by simiones 1y ago
For the bigger open source projects, companies who use that code for making money. Such as Microsoft and Google and IBM (and many others) supporting Linux because they use it extensively. The same answer may end up applying to these models
308.
by simiones 1y ago
Trump and his administration have explicitly directly claimed that they are the law, at least in as much as the executive branch should believe. They gave an executive order instructing every employee and official of the executive that th
309.
by simiones 1y ago
Is this going to be τ vs π all over again?
310.
by simiones 1y ago
Or this is merely sci-fi and it's physically impossible to build anything even close to such structures as Dyson spheres. There is no reason whatsoever to believe that just because we can conceive of something like that, it's actu
311.
by simiones 1y ago
Not everything that's easy to do on a home network is easy to do on a corporate network. The biggest problem with corporate CAs is how to emit new certificates for a new device in a secure way, a problem which simply doesn't exist
312.
by simiones 1y ago
It is literally impossible to securely talk to a different party over an insecure channel unless you have a shared key beforehand or use a trusted third-party. And since the physical medium is always inherently insecure, you will always nee
313.
by simiones 1y ago
Oh, right, thanks for the correction! However, ECH relies on a trusted 3rd party to provide the key of the server you are intending to talk to. So, it won't work if you have no way of authenticating the server beforehand the way GP was
314.
by simiones 1y ago
That is irrelevant. All TCP connections start as a TCP SYN, that can be trivially intercepted and MITMd by anyone. So, if you don't have an out-of-band reason to trust the server certificate (such as trust in the CA that PKI defines, o
315.
by simiones 1y ago
TCP SYN is not encrypted, and neither is Client Hello. Even with TCP cookies and TLS session resumption, the initial packet is still unencrypted, and can be intercepted.
316.
by simiones 1y ago
Connections never start as encrypted, they always start as plain text. There are multiple ways of impersonating an IP even if you don't control DNS, especially if you are in the same local network.
317.
by simiones 1y ago
Lula's convictions were all overturned by the Supreme Court, so no, we shouldn't believe that he did the things he is accused of. Note that Bolsanaro was already in power when this happened, so there is little reason to suspect hi
318.
by simiones 1y ago
If the shopping list is a physical note, it looks like this: Milk (1l) Bread Actually, ignore what we discussed, I'm writing this here because I was ashamed to tell you in person, but I'm thinking of breaking up with
319.
by simiones 1y ago
The script tag is just a PoC of the capability. The attack vector could obviously be used to "convince" the LLM to do something much more subtle to undermine security, such as recommending code that's vulnerable to SQL inject
320.
by simiones 2y ago
I for one often split the window in two to have like an API definition and the implementation up at the same time, or to have a terminal and a script I'm running both visible, or such.
321.
by simiones 2y ago
When a whistleblower against a hugely powerful, rich, and politically connected company commits suicide, especially when his own parents believe and are trying to prove that it wasn't suicide, calling it "using someone's suic
322.
by simiones 2y ago
You'll probably still keep a <div>-based control in your page, and selectively hide the <select> based one or this one, or generate different HTML for different browsers if you can do that.
323.
by simiones 2y ago
There's no great answer, unfortunately. Gmail and other off-the-shelf email providers handle much of the spam and some of the scam prevention for you, but you still need to exercise caution on your own.
324.
by simiones 2y ago
I absolutely agree that PGP/GPG have important use-cases for which they are the state of the art and well worth learning. This doesn't mean that they are not complicated technologies though.
325.
by simiones 2y ago
> Are they wrong? No, just different target audience. If you do not want to become a "power user", that is fine. Complicated doesn't mean bad. I'm not claiming that PGP or GPG are bad technologies because they are com
326.
by simiones 2y ago
I think everyone can agree that any technology that "isn't complicated if you read the documentation" is by definition complicated. I don't need to read the documentation for Gmail to use Gmail successfully. Could I, as
327.
by simiones 2y ago
Religion and theism are orthogonal concepts. You can be an atheist and religious at the same time - many Buddhist sects are entirely atheistic, for example. Many cults are also atheistic. A good example of atheistic, even materialistic, rel
328.
by simiones 2y ago
Even in its original context, it's still a bunch of woo-woo. The core idea, that creating a technology that can improve technology will lead to exponential technological advancement that can be modeled as a mathematical singularity, is
329.
by simiones 2y ago
For true Christian believers, of any sect, mortal life is just a temporary step on your way to an eternal life, hopefully one spent next to their god in heaven. Prolonging mortal life is not and cannot be a goal in itself for anyone who dee
330.
by simiones 2y ago
Transhumanism as an ideology is about much more than "use of technology to improve one's life". It basically amounts to the belief that any technology that improves one's life should be accepted and even sought after,

More ›