vayup

18 ms·

31.
by vayup 1y ago
No, I am not flexing. I am just stating a fact. FWIW, I am also pissed that there are only two mainstream options.
32.
by vayup 1y ago
Dare I say it, I think we're being too harsh on Google here. When you own a massively successful consumer product like Android, which is foundational to users' lives, you have an obligation to your users to keep them safe*. Someti
33.
by vayup 1y ago
With VoiceBuddy: - You can just focus on the content and speak naturally. It is extremely smart in applying punctuation and formatting. - You don't need expensive Microphones to get good accuracy. The crappy microphone that comes with
34.
by vayup 1y ago
No attack suspected here. Nonetheless, it exposes an often under appreciated attack vector. It is scary how easy it will be for a motivated actor to cause chaos by just bricking stuff en masse.
35.
by vayup 1y ago
I am the developer of VoiceBuddy. If you use windows, give it a try. I have been using Dragon for 15 years, and made VoiceBuddy because I thought it can be a lot better. www.voicebuddy.co
36.
by vayup 1y ago
There is a whole lot of commerical products built out of what we consider hobby projects (Adruino, Raspberry Pi). Eg: digital displays, industrial equipment controllers etc. All of this is clubbed under the nebulous IoT moniker. My take: Qu
37.
by vayup 1y ago
A lot of folks are arguing that the real problem is that they refused to use US cloud providers. No, that's not the issue. It's a perfectly reasonable choice to build your own storage infrastructure if it is needed. But the proble
38.
by vayup 1y ago
CNSA 2.0 FAQ: https://media.defense.gov/2022/Sep/07/2003071836/-1/-1/0/CSI...
39.
by vayup 1y ago
That's not how we approach security. We don't think in terms of 'Trust' in algorithm. We think in terms of risk management. It's not uncommon for new algorithms and approaches to have algorithmic or implementation f
40.
by vayup 1y ago
This is a good time to remind everyone the technically sound choice of hybrid crypto is discouraged by NSA. I wish they didn't. PQ is a major overhaul to crypto systems. Setting aside the risk of yet-to-be-discovered algorithmic vulner
41.
by vayup 1y ago
Counter argument: When the sole reason for existence for Signal is private/secure messaging, it makes sense to resist opening up to third party development. That's a big can of worms that invariably will impact their ability to de
42.
by vayup 1y ago
When it tells me that I need to switch to act mode for it to read files and create a detailed the plan, I just chide gently and ask it to read the damn files in plan mode. Works every time. I wish I dont have to do that.
43.
by vayup 1y ago
In theory, it is a 1/15 chance of successful attack. Which is a terribly low success rate of attack prevention. In practice, it is 15/16 chance of detection of the exploit attempt. Which is an extraordinarily high rate of detectio
44.
by vayup 1y ago
> ...attackers must not be able to predict tag values that the system will choose. We address this issue by frequently re-seeding the underlying pseudo-random generator used to select new tags. This point could use more explanation. The
45.
by vayup 1y ago
it = country that is evaluating its response to an attack on another member
46.
by vayup 1y ago
Good time to remind everyone that Article 5 does not really commit the member states automatically into a war. It will be insane for any country to sign such a treaty. The language in Article 5 permits each NATO member to decide for themsel
47.
by vayup 1y ago
> Can anyone now simply claim they're a competitor and get access to Google's tons of data? The ruling lays out the definition for "Qualified competitors". Any company that meets that definition can make a showing of
48.
by vayup 1y ago
As I grew older (and hopefully wiser), I have internalized investment returns is a lot more than sanitized numbers. I did the numbers and as a result did not buy much real estate when I was yonger. It was pretty clear, if I put the same cas
49.
by vayup 1y ago
Same with me
50.
by vayup 1y ago
Basic defense against Stingray type devices is to disable 2G in your settings. In theory, you may not have coverage when only 2G is available. In practice, it is 2025.
51.
by vayup 1y ago
Gemini charges by tokens rather than minutes. I used VAD to trim silence hoping token count will go down. I noticed the token count wasn't much different (Eg: 30 seconds of background noise had the same count as 2s of background noise)
52.
by vayup 1y ago
Quantum random source is a solution looking for a problem. Today the industry widely uses hardware random number generators whose entropy source comes from physical phenomena. Yes, it has its own problems. But having an entropy source with
53.
by vayup 2y ago
Has a "...what I do have are a very particular set of skills, skills I have acquired over a very long career. Skills that make me a nightmare for people like you." energy to it.
54.
by vayup 2y ago
The premise that this is a new drawback introduced by passkeys is false. If a relying party wants to lock you into big tech ecosystem for authentication, they can do that today by only supporting SSO from them. They don't need to wait
55.
by vayup 4y ago
Reviving Chromebooks is a lot easier than that. Just install ChromeOS flex.