sugarpimpdorsey

13 ms·

181.
by sugarpimpdorsey 1y ago
> as if the Linux ecosystem had any leverage at all on PC manufacturers… Linux has 63% of the server marketshare, which is where Secure Boot and the whole chain-of-trust has utmost importance. Of course they have leverage. Do you think o
182.
by sugarpimpdorsey 1y ago
This makes no sense. Microsoft uses separate CAs (read: separate root certificates) to sign Windows vs Linux bootloaders. Both CAs have to be trusted. They could also, in theory, be revoked separately. There is no reason the "third par
183.
by sugarpimpdorsey 1y ago
This isn't really true. MS uses three separate CA's to sign Windows boot loaders, third party bootloaders (including Linux bootloaders) and UEFI Option ROMs. In theory, no manufacturer has to install all three as trusted. But it m
184.
by sugarpimpdorsey 1y ago
It makes more sense if you view it for what it is: Honest Satya's Certificate Authority. Microsoft showed they can semi-competently run a PKI. The end. Now had the Linux folks stepped up to the plate early on, instead of childishly act
185.
by sugarpimpdorsey 1y ago
My installation of Firefox defaults to plain HTTP when I type a URL into the address bar. No amount of about:config fiddling seems to turn it off. It is rubbish software, the developers routinely ignore fixing actual bugs in favor of new f
186.
by sugarpimpdorsey 1y ago
Amazon's customer service HQ is in West Virginia IIRC.
187.
by sugarpimpdorsey 1y ago
On HN it's a pretty safe assumption.
188.
by sugarpimpdorsey 1y ago
Is this just an ad for a VoIP service? Your residential internet provider will probably already sell you VoIP that you can plug a real phone into. Put that old hamburger phone to good use.
189.
by sugarpimpdorsey 1y ago
A socially awkward speakeasy with deranged moderation? Where do I sign up? A forum that is exclusionary-by-design has already failed.
190.
How the Great Firewall of China Detects and Blocks Encrypted Traffic [pdf](people.cs.umass.edu)
6 points by sugarpimpdorsey 1y ago|0 comments
191.
by sugarpimpdorsey 1y ago
Too many are willing to accept the Bart Simpson excuse of "I didn't do it" at face value.
192.
by sugarpimpdorsey 1y ago
Those switches are the size of a thumb. No one is moving those - separately, mind you - and not realize what is going on.
193.
by sugarpimpdorsey 1y ago
Excellent analysis here, those switches are stout, no one is moving them by accident: https://www.youtube.com/watch?v=wA_UZeHZwSw
194.
by sugarpimpdorsey 1y ago
> One of them moved the levers. It could've been an unplanned reaction, a terrible mistake, or it could've been intentional. Fuel levers are designed to only be moved deliberately; they cannot be mistaken for something else by
195.
by sugarpimpdorsey 1y ago
> My preliminary idea is a "fuel bladder" for take-off that inflates Will the bladder be marketed by Kramerica Industries?
196.
by sugarpimpdorsey 1y ago
Totally different airplane with a totally different flight deck, designed generations apart. The fact that the manufacturer is the same is irrelevant. You are trying to draw parallels between the ignition switch in a 1974 Ford Pinto and a 2
197.
by sugarpimpdorsey 1y ago
Unfortunately, you can only cry wolf so many times before no one will believe you anymore.
198.
by sugarpimpdorsey 1y ago
It's not a legitimate function because the car will beep at you if you walk away. Some aftermarket remote starts have this feature. However, in many states it's illegal to leave a car running unattended. Though one could argue in
199.
by sugarpimpdorsey 1y ago
Moving the goalposts. No chipped key car has ever been stolen by beaming some kit off AliExpress at it and simply driving away.
200.
by sugarpimpdorsey 1y ago
Keys have been chipped for > 30 years. The technology is proven, secure, and reliable. Kia and Hyundai learned this the hard way when they tried to shave pennies a few years ago. Fobs just created another attack vector catering to people
201.
by sugarpimpdorsey 1y ago
I'm routinely ridiculed for driving a car with a traditional ignition key, and insisting upon it, as if it's exclusive to Luddities. Everyone else can enjoy their reflection/replay attacks or whatever. Honorable mention to To
202.
by sugarpimpdorsey 1y ago
> The attacker may also be able The infosec community loves their weasel words don't they? The only other career path other than "meteorologist" where they get it wrong half the time with the burden of proof on the recipie
203.
by sugarpimpdorsey 1y ago
If we're being honest, YAML is one of the dumbest ideas of the last 20 years to have proliferated. How we got from XML to here I cannot comprehend. This is not the first RCE involving YAML and it won't be the last.
204.
PRT 2000 Personal Rapid Transit [video] (1997)(youtube.com)
2 points by sugarpimpdorsey 1y ago|0 comments
205.
by sugarpimpdorsey 1y ago
> I can tell you it's because he's actually a very skilled engineer. > Easily top 1% or top 0.1% of candidates -- other startups will tell you this as well. People who regularly don't show up for work are by definition
206.
by sugarpimpdorsey 1y ago
The last time something like that happened was probably the Patriot Act.
207.
by sugarpimpdorsey 1y ago
This description of the oval office as some super-secret meeting space seems like a gross mischaracterization in an attempt to fabricate a controversy or gain clicks. I mean, it has windows. If this was true, the situation room wouldn'
208.
by sugarpimpdorsey 1y ago
Surprised with the choice of Apache. There are better choices for serving CGI nowadays. The only reason for still running Apache is you have legacy cruft that requires Apache (like .htaccess).