varenc

26 ms·

601.
by varenc 3y ago
Your phone isn't passively broadcasting hashes if it's just an AirDrop receiver no matter what mode it's in. This vuln only poses a privacy risk for those sending AirDrops.
602.
by varenc 3y ago
Anyone know more about these 'offline passbacks'? > for certain tracking technology like hashed offline passbacks
603.
by varenc 3y ago
Another example: Ubiquiti gateway consoles like the UDM-Pro. You can install an SSH key but these are erased on reboot. So after every reboot I have a script that uses the SSH user password to re-install an SSH key but this can’t be relied
604.
by varenc 3y ago
That doesn’t help if you don’t know you have a location tracking device on you or in your car. This specification is about detecting unknown trackers. I’ve only read parts of it, but it seems like it’s trying to formalize the behavior tha
605.
by varenc 3y ago
Agreed with the sibling comment. To quote Apple, this feature can "detect sophisticated threats against iMessage servers". Essentially it's to protect against state-sponsored attacks MITMing you. Doing that also probably requ
606.
by varenc 3y ago
The iOS Contact APIs shouldn't allow modifying this. You can also try exporting the contact to a vCard .vcf file using the Share Contact button. I believe the iMessage key verification info won't be included. (But as you noted the
607.
by varenc 3y ago
iMessage Key Verification does not require that you use 'iCloud for iMessage' (aka iCloud message syncing), it just requires that you're signed into iCloud and have iCloud Keychain enabled. Your critique is still valid but I
608.
by varenc 3y ago
Seems like Apple is tacitly acknowledging that sophisticated actors have successfully been man-in-the-middling iMessage users. I wonder if they have clear evidence of that since I haven’t seen any coverage on this.
609.
by varenc 3y ago
They are releasing Bard with Gemini in many countries with a much lower income per capita than the average European country: https://support.google.com/bard/answer/14294096 My guess is the delay is due to GDPR or
610.
by varenc 3y ago
Agreed with this point! At this scale more aggressive garbage collection doesn't save you much actual money. In the early days at one such provider I know that garbage collecting deleted user files was considered a relatively low prior
611.
by varenc 3y ago
Many data centers use spinning disk hard drives in a write-once configuration. This is fine for some use patterns and lets them take advantage of SMR and higher density. Dropbox has blogged about this: https://dropbox.tech/i
612.
by varenc 3y ago
The interview was “found a billion dollar tech company” and they all already passed.
613.
by varenc 3y ago
Really? I use the `pycookiecheat` python package to read out the cookies from Chrome while it's running no problem. Great for automating certain private APIs that need the correct cookie to keep functioning.
614.
by varenc 3y ago
> I thought I might see something like highly branched cyclic dextrin I just learned about HBCD but its advantage seems to be that its high molecular weight slows down digestion and absorption in the gut. This allows for a more sustained
615.
by varenc 3y ago
Tokyo and Seoul both have massive subways system but unlike NYC they seem to have figured out how to give you service even in the tunnels. (Mercifully though all NYC stations at least have service)
616.
by varenc 3y ago
For a landscaping service I imagine battery run time would be a challenge? The electric mowers I’ve seen can run 2-3 hours on a charge. That’s more than enough for personal use but won’t last the whole day if you’re a landscaper. And charg
617.
by varenc 3y ago
Same for me, super odd. Seems related to my browser state. It works fine in an incognito window.
618.
by varenc 3y ago
Each valid login+password got the scrapers many many profiles. 23andMe has a feature that lets you see people you're related to and view their profiles. My guess is this feature had few rate limits and allowed you to view the profiles
619.
by varenc 3y ago
Another response for this image a friend sent: " The humor in this picture comes from the juxtaposition of a formal setting with an informal, unexpected action. It shows a group of well-dressed individuals, possibly political figures o
620.
by varenc 3y ago
Assigning blame to the CxOs can be tricky. In this case the actual violations were from 2020, well before the EU even began its investigation, and some of the C-suite staff has changed. Should it be the current C-suite that’s fired or the
621.
by varenc 3y ago
How do you handle redirects? Like if a popular QR code generator and redirector hosting service supported this and signed my QR code, couldn’t I just change the redirect but the original target URL is still valid? You could try to detect re
622.
by varenc 3y ago
Agreed with this. You can create conversations like this quite easily using their API endpoints with the temperature parameter set even just a little bit above the default.
623.
by varenc 3y ago
But if Facebook is blocking news links in Canada, it doesn’t seem like the law is having the desired effect.
624.
by varenc 3y ago
> 20 years Facebook isn’t even that old. This article is from 12 years ago.
625.
by varenc 3y ago
This is my take too. The strictness of the tenant rent requirements seem like a "bug" in the lease agreement. In a situation like this where there's a massive downturn in office rental value and not much expectation it'
626.
by varenc 3y ago
How would the Romans, or anyone else, have implemented practical tracking for every day transactions? Is there a single historical example of this being done in the pre-digital world? The Census is a survey of people/household/a
627.
by varenc 3y ago
My point is that hashing a 9 digit number is almost certainly not even technically compliant. I believe storing hashed SSNs would incur all the legal liability of storing raw SSNs. The laws are robust enough to at least handle such a trivia
628.
by varenc 3y ago
I do the same thing but with Star Trek words! I have a somewhat logical naming scheme too. Computers are named after Star Trek ships (Yorktown), phones are named after handheld devices (Phaser), and drives are storage related things (Isoli
629.
by varenc 3y ago
SSNs can’t really be anonymized by hashing since they’re essentially sequential numbers. I think the law is at least broad enough to consider a hashed SSN that can be easily reversed to be to equivalent to a real SSN. I agree with others th
630.
by varenc 3y ago
robots.txt is already outmoded. It only can indicate that content can’t be crawled but a URL marked this way can still be indexed . As Google says “ it is not a mechanism for keeping a web page out of Google ” [0] You need to use other t

More ›