twiss

15 ms·

181.
by twiss 4y ago
No, of course not, we should start by focusing on improving the biking infrastructure. Waiting for more people to get hurt shouldn't be necessary to justify that; a lot of people are already getting hurt.
182.
by twiss 4y ago
> People would still fall off bikes and hit their heads, and the people that did that would be safer if they wore helmets, wouldn't they? A bit, but I'm claiming it will help way less than improving the infrastructure, and ther
183.
by twiss 4y ago
The article links to https://usa.streetsblog.org/2016/06/02/why-helmets-arent-the... , which positively correlates helmet wearing with fatality rate. Of course, correlation is not causation, and you could logi
184.
by twiss 4y ago
Infrastructure changes happen anyway. Roads get widened, reorganized, and maintained all the time. It's just a question of what the available space should get allocated to. The Netherlands didn't change their infrastructure overni
185.
by twiss 4y ago
They're pitted against each other because when biking accidents happen, the biker is often blamed, especially if they weren't wearing a helmet. This is partially done to avoid having to improve the biking infrastructure. But, as t
186.
by twiss 4y ago
> Or are you actually asserting that making people wear helmets actually reduces safety? Yes, if it's done instead of improving biking infrastructure, as it often is.
187.
by twiss 4y ago
Although I don't want to trivialize any of these deaths, I think it's important to note that the elderly (especially people over 70) are overrepresented in these statistics: https://opendata.cbs.nl/#/CBS/
188.
by twiss 4y ago
The conclusion is not in contradiction with the rest of the article. What makes sense for society to do (improve infrastructure) is not necessarily the same as what might make sense for an individual to do (wear a helmet, especially if the
189.
by twiss 4y ago
Why not use it for building better biking infrastructure instead? The entire article is about how that'd have a better ROI.
190.
by twiss 4y ago
All else is not equal, though. The focus on individual responsibility for biking safety in fact reduces biking safety. It's important to recognize that at a societal level, it's more useful to focus on improving infrastructure tha
191.
by twiss 4y ago
The post provides one data point that it did: Little Snitch started reporting traffic from mediaanalysisd. It's not very extensive evidence, but not quite none, either.
192.
by twiss 4y ago
I can't, because I don't have a Mac. I'm interested what Apple is doing because of the wider discussion, though. So if someone else can, I'd be grateful :)
193.
by twiss 4y ago
Does the basic research also reveal what information mediaanalysisd is sending to Apple, since when, and why? If so, could you link to it? I can't find much about it. (Also, just because it's existed for a long time doesn't m
194.
by twiss 4y ago
For a somewhat more "normal" example, see https://serenityos.org/ . Started by one person, though there are many other contributors now.
195.
by twiss 4y ago
https://www.reuters.com/article/us-otc-speech/when-the-gover... says: > On Friday, the 9th U.S. Circuit Court of Appeals joined a slowly emerging consensus among the federal circuits, holding that governments h
196.
by twiss 4y ago
Sure. My assumption was that the "routine" warrants wouldn't have gag orders, but I might be wrong on that. But yeah, if it doesn't, the transparency report might be a better place to put it, and then it might make sense
197.
by twiss 4y ago
Since the main purpose of the warrant canary is to be able to inform the public of being served one if they are gagged, I indeed think non-gagging warrants aren't super relevant for them, but it also doesn't matter much that they
198.
by twiss 4y ago
Great story. It reminded me of Ken Thompson's Reflections on Trusting Trust, I assume it was inspired by that: https://cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Reflect...
199.
by twiss 4y ago
It essentially did detect a contradiction, and "resolved" it by trying to square its initial (wrong) response with the reasoning afterwards (which contained the correct response). Perhaps if it would've been able to delete th
200.
by twiss 4y ago
In the example, it "gained" additional information by reasoning through the steps. At that point, it should be more likely to give the correct answer. In general, I think also when humans are able to reason about their opinion and
201.
by twiss 4y ago
> There will be changes in direction sometimes, but that’s because they also appear sometimes in the training text. Yeah. My point is essentially that I think they don't appear in the training text often enough, since it's trai
202.
by twiss 4y ago
I think the second response may partially be because it gave the answer first and the reasoning second. If it would've removed the first paragraph (with the initial answer) and last 3 paragraphs (with the tortuous attempt to square the
203.
by twiss 4y ago
I hate blaming the process rather than the "root cause" (that brings people to steal), however, in this particular case it does feel like leaving packages out in the open on porches is setting yourself up for failure. In the Nethe
204.
by twiss 4y ago
I don't think there's an urge to move to SHA-3, certainly I didn't mean to imply that, rather the opposite. I don't think there's much discussion about SHA-4 either, outside this particular comment thread :)
205.
by twiss 4y ago
Applications that care about length extension attacks: https://en.wikipedia.org/wiki/Length_extension_attack (though most applications shouldn't care about it, and not all functions in the SHA-2 family are vulnera
206.
by twiss 4y ago
> The thing is, there doesn't seem to be any security weaknesses with the existing AE method. I have looked hard. Even if nobody found any concrete security issues, there might be compliance reasons not to use SHA-1, as indicated by
207.
by twiss 4y ago
NIST seems perfectly comfortable with having only one cryptographic primitive for a given category as long as there's high confidence in it. The reason we have two hash algorithms is that back when the SHA-3 competition was created, th
208.
by twiss 4y ago
> The OpenPGP preferences are not applicable to symmetric encryption. In that case the implementation has to guess what method will be supported by the decrypting implementation. In most cases it would make sense to use the most widely i
209.
by twiss 4y ago
Only one of them, OCB, is mandatory to implement. The other two are optional, but there may be performance or compliance reasons to use one of them. E.g., people who care about FIPS compliance may want to use GCM. In any case, since there a
210.
by twiss 4y ago
FWIW, the "crypto refresh" of the OpenPGP standard specifies the use of AEAD for authenticated encryption, replacing the SHA-1 "modification detection code". Even if the latter isn't broken, the former is more moder

More ›