vinay_ys

16 ms·

151.
by vinay_ys 3y ago
There are two different possible attack vectors. 1. First, once you "local root" within the sandboxed process what can you compromise? a. Can the session cookies be stolen? (Think gmail inline attachment rendering a malicious webp
152.
by vinay_ys 3y ago
Well, this was exploited in the wild. Here's the actual commit for the bug fix in webp. https://chromium.googlesource.com/webm/libwebp/+/902bc91
153.
by vinay_ys 3y ago
If you want to your mind blown, see the charges for these complex procedures related to heart at one the world's best government run hospitals. https://jayadevacardiology.com/procedure_charges.html
154.
by vinay_ys 3y ago
We had advanced image processing techniques to detect tumors almost 20 years ago. With more advancements in computing power and AI techniques, it should be so much quicker and easier to do the same. The AI need not be conclusive but it coul
155.
by vinay_ys 3y ago
why do they have to run continuously? I would expect the opposite to be true. It would have some cool-off periods etc.
156.
by vinay_ys 3y ago
Out of curiosity, why didn't you go for it?
157.
by vinay_ys 3y ago
Those colored pods made little sense to me. Do those different liquids get released at different times? Saw someone test it out on YouTube that showed not be the case. Or do they have some sort of unstable reaction when they get mixed? If n
158.
by vinay_ys 3y ago
It is a great start and shows very good potential. Still need to build support for io_uring, and all the sundry features in mainline nginx, apache, haproxy etc.
159.
by vinay_ys 3y ago
Current US price is $1.09/litre. $0.52/litre ($2/gallon) more is 48% more.
160.
by vinay_ys 3y ago
What blows my mind is the dilution capacity of the air in our atmosphere. How much more of this can air hold and still keep it acceptable from breathable and visibility aspects?
161.
by vinay_ys 3y ago
One thing that is not clear is if this data collection and phone-home works even if there is no cellular plan active on the car?
162.
by vinay_ys 3y ago
Back in the days of slaves, someone would have argued how slavery isn't that bad because there were more worse things in their past and how slavery was an improvement in the lives of those slaves compared to what they would have had in
163.
by vinay_ys 3y ago
Surely you can think of something more nuanced than that extreme option? You can fix the visa program such that you can attract the most talented immigrants and treat them with respect for the contributions they make to your society?
164.
by vinay_ys 3y ago
> H1B is exploiting the rules for cheap labour. It does benefit the H1B holder - since they would otherwise not have signed up. H1B, L1 etc visa schemes make you indentured to the system. The longer you stay and invest in your home and s
165.
by vinay_ys 3y ago
Any company that does this kind of screwup should suffer the consequences. Any reasonably good talent that has multiple opportunities open to them will not choose them after this fiasco. And people have long memories for these kinds of thin
166.
by vinay_ys 3y ago
Why don't the job postings follow the karma system?
167.
by vinay_ys 3y ago
In capitalist economy, if something is extremely profitable at scale, it means a lot of people paid for it willingly. Usually, such things are not harmful by societal standards of the day. Working on such things is acceptable. If you want t
168.
by vinay_ys 3y ago
I would expect them to get to iCloud via this attach chain even with advanced data protection on. Which means if you are targeted, they not only get data from your iPhone but also all the data you backed up to iCloud from your other apple d
169.
by vinay_ys 3y ago
https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer... 'nuf said!
170.
by vinay_ys 3y ago
You cannot hide from governments. If they want you badly enough they can track you anywhere. So, don't do anything illegal and expect any VPN to protect you because paid in cash! Remember, all governments have secret national security
171.
by vinay_ys 3y ago
Pushing config to production is also deployment. Pushing config update to a dynamic config serving service from which all other services pull the config is also deployment. You need safety guardrails for any deployment of code or config – a
172.
by vinay_ys 3y ago
IoT devices need regulatory standardization w.r.t a few things: 1. software stack – big fat "firmware" should not exist. Entire stack should be upgradable safely, securely and frequently during its official supported lifetime and
173.
by vinay_ys 3y ago
As a kid growing up in pre-computer/internet era, we did a bunch of things to engage our curiosity and learn and have fun. But in today's world with access such rich content at your fingertips, it's all very different. These
174.
by vinay_ys 3y ago
Let me clarify: if you have you device with you (didn't lose the device) and you didn't make contact with another online device for more than cool-off period, your device tokens won't be refreshed and they will expire and bec
175.
by vinay_ys 3y ago
:-) that assumes cash is trivial. It is not for so many reasons. Cash is bulky and discrete. Cash is visible and easily snatched/coerced from you. Apart from classical robbery held at knifepoint or gunpoint and taken to an atm and bein
176.
by vinay_ys 3y ago
> because a user has to be allowed to log into a new device (if they lose their old one) You can solve for that by having short validity of the offline tokens on device and having that equal the cool-off period for reclaiming those funds
177.
by vinay_ys 3y ago
I can still download or compile and install any binary I want. It only reminds me that this was done so and asks me to confirm. Isn't it?
178.
by vinay_ys 3y ago
One of the most shocking thing I experienced working at Google compared to my previous job (e-commerce with very thin operating margins) is that hardly anyone cared about potential revenue vs cost tradeoffs or monetization more broadly. Vas
179.
by vinay_ys 3y ago
In more recent times, we had to think about this problem in Indian market context. I saw this problem as online vs offline payments problem. If both parties are offline, can you still make a secure transfer of stored value? Yes, with a trus
180.
by vinay_ys 3y ago
If you are big TV brand player, the way it works is you go to a contract manufacturer and say you want to do a TV. They will tell you what options you have – what sizes, features, quality levels etc (configuration) and at what price they wi

More ›