varenc

23 ms·

361.
by varenc 1y ago
You could have another script that immediately triggers the Lock Screen after boot...but agreed this comes with many compromises. But if your Mac is physically secure, and has no keyboard or monitor on it anyway, I don't quite understa
362.
by varenc 1y ago
> That said I've caught and blacklisted quite a few bad actors this way same! A long time ago I registered an adobe account with the email "<username>+fsck_adobe@gmail.com" Adobe then got hacked and their account dat
363.
by varenc 1y ago
Same... I had my Luma.com account closed and disabled because of my "suspicious" email... had to ask a friend to get it back.
364.
by varenc 1y ago
I registered the "very-secure-no-viruses.email" domain to use for burner emails. I was trying to make one that sounded maximally sketchy. It has lead to some confusing interactions with support though...
365.
by varenc 1y ago
You can also do this: sudo fdesetup authrestart -delayminutes -1 which will make the computer auto login to the chosen account on next reboot, without having to type in a password. Only lasts once. Has obvious security downsides th
366.
by varenc 1y ago
That's reasonable and personally I hate it when all the helpful details I need are buried in Slack history. But also it's a lot more effort. When someone has an immediate question they need help on, real time chat is an appropriat
367.
by varenc 1y ago
I did not know about IRCv3! These are the HN insights I love. I wonder if IRCv3 is still semi-usable from a raw telnet session like old IRC is? I remember using that in the early 2000s when I wanted to get on IRC but didn't have a rea
368.
by varenc 1y ago
Doesn't an IRC server have no concept of chat history? Not really comparable. Setting up the server is the easy part, it's migrating their integrations, updating docs, copying over history, educating users, etc, that is the hard p
369.
by varenc 1y ago
It's true. It's last generation's M3 based CPU instead of the M4. But the M3 Ultra has 32 cores vs the M4 iPad's 9 or 10 cores. Apple doesn't make an Ultra version of the M4. The speculation is they'll do this
370.
by varenc 1y ago
It's interesting Apple is doing this specifically to protect old devices from seemingly nation state sponsored attacks: > Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack again
371.
by varenc 1y ago
Couldn't someone just build that Signal APK without spyware and then get it signed/verified by Google? The Google change means that every APK has to be signed and linked to a developer with a verified identity. Unless Google might
372.
by varenc 1y ago
Agreed on this. I'm still waiting for local MCP server support.
373.
by varenc 1y ago
I don't think ' critical safety incidents ' or ' summaries of any assessments of the potential for catastrophic risk from the use of internally-deployed models ' are user logs? Unless I'm misunderstanding.
374.
by varenc 1y ago
Eh, well painstaking reverse engineering is like having the source code, just 10000x more work. With that I feel like it should be possible to ensure this, or at least with some high level of confidence.
375.
by varenc 1y ago
RIP Paper
376.
by varenc 1y ago
Not trivially. But with painstaking reverse engineering you could prove this. And people have, so you're not exclusively just taking Meta's word. The fact that Pegasus malware relied on remote code execution vuln to run malware on
377.
by varenc 1y ago
Agreed. As I recall the way notifications work on Signal/WhatsApp is the app receives some silent notification that wakes it up, then the app does its crypto thing, and then it locally triggers the notification with the decrypted conte
378.
by varenc 1y ago
Would love a link to this story if you find it.
379.
by varenc 1y ago
People aren't rational/perfect and Signal wants to keep them feeling safe? ¯\_(ツ)_/¯ (and IMHO there are edge case scenario where the additional friction in exporting messages provides some protection. Particularly when your
380.
by varenc 1y ago
Agree with the sentiment, but I can understand why they don't offer this. Rational or not, people will feel less safe if all their messages can just be easily exported to plaintext. A few scenarios where this might matter like the &#x2
381.
by varenc 1y ago
Yea totally agree. Mainly just wanted to shoehorn in my own story about stern emails at FB! Also I think running nmap on your own development machine is totally legitimate. Lots of reasons you might want to do it.
382.
by varenc 1y ago
I ran 'neoprint.php' on myself at Facebook in 2007 and immediately got a stern email about it... It was some script that collected info for responding to law enforcement requests. But after chastising me, the email said "I w
383.
by varenc 1y ago
I got to meet him once too! Unexpectedly met him at a Media Lab demo day. I was trying to play it cool though and didn't gush to him around how he's one of my favorite authors. I regret not doing so now.
384.
by varenc 1y ago
Books aren't hosted publicly online free for anyone to access. The court seems to think buying a book and scanning it is fair use. Just using pirated books is forbidden. Blogs weren't accessed via pirating.
385.
by varenc 1y ago
> Rainbows End was prescient in many ways. Agreed. Great book for those looking for a read: https://www.goodreads.com/book/show/102439.Rainbows_End The author, Vernor Vinge, is also responsible for popularizing
386.
by varenc 1y ago
> Implement something the banks just aren't willing to do themselves? I think that's it. We're very unlikely to see international transactions between banks happen as easily and as quickly as they can with a stablecoin, ev
387.
by varenc 1y ago
Hah but the majority of the time Odo spys on Quark by morphing into a common place object like a table or glass. My new headcannon will have to be that Quark keeps removing Odo's spy sensors. Odo definitely would use them if he could
388.
by varenc 1y ago
This was actually on a Defiant-class ship being captained by Starfleet recruits/kids! The captain was just an older cadet that the original dying captain placed in command. Which fits with my headcannon that real Starfleet captains wou
389.
by varenc 1y ago
There's a single DS9 episode[0] where they reveal that the Captain can actually spy on everyone on the ship at once. Like tap into a video feed and listen to conversations. But then we never see this happen again. My headcannon for thi
390.
by varenc 1y ago
> why not wifi? I'm not the author but can speculate. WiFi is higher latency and a bit probabilistic. Like the slowest 1% of requests to the server may take an additional 1000ms or so. And if I was running a blog from a phone I&#x27

More ›