tptacek

19 ms·

481.
by tptacek 3mo ago
Seems implausible, for the reason I gave one comment back.
482.
by tptacek 3mo ago
Is it really a long running instruction ? I mean, obviously yes, but what makes it slow is that it's doing an MMIO copy from a slow source. It's like a read(2) system call being "slow" because the fd is associated with
483.
by tptacek 3mo ago
Yes, capitalism is pretty great? The one complaint I have never really seen anyone seriously aim at capitalism before today is "capitalism is an inferior system for the delivery of hyperpalatable junk food".
484.
by tptacek 3mo ago
No. They're metabolically equivalent. "High fructose" corn syrup is "high" relative to normal corn syrup, not relative to sugar, some of the HFCS formulae in packaged food has less fructose than table sugar, and,
485.
by tptacek 3mo ago
It's true that I'm speaking entirely in an American context.
486.
by tptacek 3mo ago
You can report a self-XSS sev:hi (and bounty hunters do) and get many orgs to take them seriously, because they don't have serious security practices. But DoS is generally sev:lo.
487.
by tptacek 3mo ago
You'd I think be the first person to argue that Banksy's art is too subtle for some people to get.
488.
by tptacek 3mo ago
And also the idea that H1 "training" models based on bug bounty reports is kind of a silly concern; frontier models have commoditized most of what was reported on H1, even at higher quality levels. H1 itself is a nonfactor.
489.
by tptacek 3mo ago
Almost no day-to-day policing is done with warrants! The whole premise of the LEADS hotlist is warrantless interdiction of stolen cars.
490.
by tptacek 3mo ago
(The commenter responded to me inline in their original post, I think; I now understand why they posted the link.)
491.
by tptacek 3mo ago
Yeah, I figured that's what you meant, and most bounty programs won't pay out for stuff like that. Every application has those bugs; on a software pentest, we'd sev:lo them.
492.
by tptacek 3mo ago
I don't know where this stat comes from. It doesn't square with our experience of Flock cameras. There is a truly high error rate in the underlying hotlist data the state maintains and the cameras rely on. But, like, cameras rando
493.
by tptacek 3mo ago
Which is another way to say "viability".
494.
by tptacek 3mo ago
Most bounty programs won't pay for DoS at all.
495.
by tptacek 3mo ago
Not only was there significant personal liability, but there had been multiple instances of hackers being criminally charged and sentenced to jail time for finding and reporting security vulnerabilities prior to this. I don't think t
496.
by tptacek 3mo ago
To the actual question people ask, about getting stolen cars off the street, I don't have a good answer. It's a valid point! The stolen cars pose more of a threat to my neighbors than the police do; in reality, the median adult in
497.
by tptacek 3mo ago
They're not remotely the same Constitutional question. The people asking this aren't saying "I'm fine with being profiled because I've got nothing to hide unlike the people driving stolen cars". They're ju
498.
by tptacek 3mo ago
I mean, I agree with you about zoning; we're fourth and inches from eliminating SFZ in my muni, and an LVT isn't going to happen anywhere, so the rest of the debate is kind of academic.
499.
by tptacek 3mo ago
What are you trying to say by posting this link?
500.
by tptacek 3mo ago
The average CPS salary is somewhere around $75k, with 10+ weeks of vacation, but that undercounts it dramatically because CPS teachers get defined-benefit pension plans and often earn tens of thousands in additional cash comp for extracur
501.
by tptacek 3mo ago
An LVT addresses the incentives underling zoning. The LVT imagined by Georgists would very probably result in radically altered zoning rules. Zoning, after all, exists primarily to prop up the finances of homeowners.
502.
by tptacek 3mo ago
Whatever protections your area police have from these kinds of firings are a matter of public record. Have you FOIA'd your local department to see what they are? You might be surprised. The real teeth behind these disciplinary events,
503.
by tptacek 3mo ago
I never hear that question from Flock supporters. The question I hear[†] is "why shouldn't we be pulling over stolen cars?". It's a much harder one to answer than the straw man questions we set up for these things. (To
504.
by tptacek 3mo ago
Teachers in major metro school systems already have quite a good deal. Rural schoolteachers really do have the deal everyone heard about in 1990s politics, but urban schoolteachers are generally economically privileged. (That doesn't m
505.
by tptacek 3mo ago
I know the Georgism joke here, but we don't need an LVT to fix this; we just need states to override home rule on minimum density requirements for residential and mixed-use zoning. The core problem here is in fact very simple!
506.
by tptacek 3mo ago
It's not simplistic. It is literally the core problem with housing. Zoning had a first objective of preventing Black families from moving into white neighborhoods, and then, in the 1980s, assumed a new role of driving scarcity (and thu
507.
by tptacek 3mo ago
Flock cameras appear to be one of the few things that can get police officers fired.
508.
by tptacek 3mo ago
I'm definitely familiar with DPDK, but when I think about it I mostly just think "polling mode driver" and not "offloading".
509.
by tptacek 3mo ago
Many of the most prolific and successful offensive hackers, the people that actually made their way into switches and onto hardened SunOS servers, were the least capable technologists. The archetype is Kevin Mitnick, who wasn't a coder
510.
by tptacek 3mo ago
The original "manifesto" was a deeply cringe zine article written about a group of people who would go on to run IT security practices at the major I-banks. This update applies a fresh layer of vaseline to the camera lens: "c

More ›