tao_oat

14 ms·

151.
by tao_oat 6y ago
> just that the "strong-set-user/package=safe" guarantee doesn't have an underlying basis as of yet. Author here —- I agree. There can be no guarantees about the safety of a package based only on its maintainer(s); th
152.
by tao_oat 6y ago
Unfortunately, targeted attacks have been seen in the wild. The `event-stream` attack linked in the post was one example. Alternatively, look at the attack on the Agama cryptocurrency wallet —- the attackers even managed to exfiltrate priva
153.
A web of trust for NPM(btao.org)
143 points by tao_oat 6y ago|119 comments
154.
by tao_oat 6y ago
You're right; thanks for the fair call-out. I apologize, especially to the developers of VOTEism!
155.
by tao_oat 6y ago
So, a closed-source, non-audited polling app with grand security claims? What could go wrong?
156.
Sometimes-on security: on mixing plaintext and encrypted messages(btao.org)
1 points by tao_oat 6y ago|0 comments
157.
by tao_oat 6y ago
This is exactly the kind of whataboutism that people have rightly come to expect from the tech world, but it never ceases to disappoint
158.
A resource hub about ending violence(transformharm.org)
1 points by tao_oat 6y ago|0 comments
159.
by tao_oat 6y ago
Yes -- a dataset of malware samples is valuable to researchers, but often requires some minimal level of authorization to prevent it being misused.
160.
by tao_oat 6y ago
This reads a bit like saying "it's strange that this academic paper doesn't advertise our private company." Especially since TUF and in-toto don't seem to handle the core issue of having to use open-source libraries
161.
Feel-Good Security in ProtonMail(btao.org)
4 points by tao_oat 6y ago|0 comments
162.
by tao_oat 8y ago
Sure, the concept exists but you'll be hard-pressed to point to instances of it existing currently... Overcoming historical biases doesn't happen just by deciding to be a meritocracy.
163.
by tao_oat 8y ago
> They worked hard so that their children and grandchildren and fellow citizens could have better lives within those lines That's sort of the whole point; often improving the lives of "fellow citizens" came at the expense
164.
by tao_oat 8y ago
Cattle are kept in the rainforest, yes, but the forest cut down for grazing is far outweighed for the forest cut down to groy soy to feed the cattle.
165.
by tao_oat 8y ago
Given Churchill's racism, for instance, the quote ("His biography demonstrates its subject’s greatness but manages to make him lovable, too") seems a bit off, no? A biography that presents Churchill as "lovable" cle
166.
by tao_oat 8y ago
While we can praise Churchill for many things, we should never gloss over the fact that he favored eugenics and was deeply racist [1]. For instance, he's quoted as saying "I do not admit... that a great wrong has been done to the
167.
by tao_oat 8y ago
If an improved CoC means that more people feel able and encouraged to contribute, does that then count in favor of the 'technical contribution' axis for the people who wrote it? If not, your plot isn't all that useful.
168.
by tao_oat 8y ago
It’s not really possible to separate the egg and dairy industries from the meat industry. What do you think happens to chickens or cows when their production levels start falling?
169.
by tao_oat 8y ago
Yes. There’s a huge difference between a sentient being and a plant. I don’t think anyone seriously believes that these are morally equivalent.
170.
by tao_oat 9y ago
> The fact that it is owned by Facebook is enough to make me stay away. That’s fair, but I think it’s important to be very explicit if that’s the criticism. It’s true that Facebook can see your contacts list if you share it with WhatsApp
171.
by tao_oat 9y ago
The Guardian, that initially published this “insecurity”, has been heavily criticized by security experts for their article: https://mashable.com/2017/01/20/experts-demand-guardian-retr... If there are other
172.
by tao_oat 9y ago
I believe the program was called Accidental Anarchist: https://m.imdb.com/title/tt6130010/
173.
by tao_oat 10y ago
I don't understand the argument that opting out of using animal products is avoiding responsibility. Isn't that equivalent to saying that by boycotting sweatshop products we aren't taking responsibility? Are you arguing that
174.
The Copiale Cipher(en.wikipedia.org)
2 points by tao_oat 10y ago|0 comments
175.
by tao_oat 10y ago
I think The Economist is pretty open about their liberal slant (Adam Smith liberal, not US politics liberal).
176.
by tao_oat 10y ago
> Drive for Lyft but haven’t received that high of a wage in recent weeks? Drive for Uber. Uber not paying that high either? Drive for Fasten. Fasten’s wages low? Deliver for Postmates. And on and on. What happens when the market brings
177.
by tao_oat 10y ago
Signal is solid, though a few privacy advocates criticize the dependence on Google Play Services on Android phones. I also get the impression that development has slowed, with the developers (Open Whisper Systems) focusing on implementing t
178.
by tao_oat 10y ago
They become your next lyft pick up (with drastically decreased wages).
179.
by tao_oat 10y ago
It doesn't sound like you've ever been poor. Quality of life is about far more than the goods you can consume. It's also about job security, your chances of getting promoted, autonomy, fulfillment, and so on. If you know that