wepple

46 ms·

661.
by wepple 8y ago
Another one from a slightly different angle I use is: Imagine we’re all having dinner, talking about a particular politician. We’re sharing our thoughts and opinions, likes and dislikes. In a parallel universe, we’re doing exactly the same,
662.
by wepple 8y ago
I should add: 2FA is indeed one of the best forward movements security has had in the last decade, it just SMS who’s time is limited: FIDO seems to be our next best bet.
663.
by wepple 8y ago
There are a few glaring flaws in this: The section on 2FA goes on about SMS, which has a very increasing history of being easily bypassed and is utterly terrible advice. You’re designating a helpdesk operator on minimum wage at T-mobile as
664.
by wepple 8y ago
For all the silly unicorn IPOs of companies which don’t necessarily have a clear product or revenue, GH seems like the type of company that could successfully go public and actually succeed. It would fend off potential suitors for a while t
665.
by wepple 8y ago
I don’t want to read a book or watch a few YouTube clips or browse twitter whilst sitting at my desk in my office, nor do I want to poke at a tiny screen. Tablets are thriving, just not android tablets.
666.
by wepple 8y ago
Film has a particular look and feel to it that I’ve absolutely never seen replicated in digital. I’m confident that one day it probably will be; maybe ML will be up to the task where filters and transforms just can’t do the right job? Besid
667.
by wepple 8y ago
I don’t think it matters, at all. Java has serialization, and everyone uses it, and it’s a security nightmare. As uncomfortable as it may feel to me, I kinda agree with Oracles approach here: kill serialization, make things more secure. If
668.
by wepple 8y ago
Complex or notoriously difficult-to-get-right code, accessible from the other side of a security boundary.
669.
by wepple 8y ago
> Leave anything on an unprotected port taking unsanitised input and it’s vulnerable no matter what it is written in I don’t think you’re comparing apples with apples. Even in a default configuration, the majority of services that show u
670.
by wepple 8y ago
My understanding was that an IP address is considered personal information under GDPR, which would put it in your class #2
671.
by wepple 8y ago
Possible, technically, of course. But if someone is going to exfil voice, why did they send it to a random contact who would then alert the owners?
672.
by wepple 8y ago
> Anyway, you do think it's fine to put a device that -on a bit-flip- is able to record and analyze anything you say Like a phone, tablet, laptop, Nest, etc etc? I’m not saying it’s OK, but Home was hardly the first mover here. >
673.
by wepple 8y ago
Voice interfaces are likely to be a big part of our future, and in order to have the best voice ML tech, you need a ton of real-world data. I wouldn’t be overly surprised to see them pay people to have/use these things.
674.
by wepple 8y ago
My first reaction is that they’re trying to give birth to a unicorn that’ll save them
675.
by wepple 8y ago
> State actors demand access to the source code of proprietary software So, when China or Russia are building windows exploits, they just demand Microsoft hand over source? Also, the idea that “locked down” Linux would do any better than
676.
by wepple 8y ago
The stuxnet dev team managed to get their hands on the exact same centrifuges as used in Natanz, so getting replica Linux control systems would’ve been a walk in the park. Also, “less interest” is irrelevant when we are talking about nation
677.
by wepple 8y ago
Yeah, most worms like this have detective capability to work out whether they’re on the systems that they’re wanting to be on. If not, they’ll either try to clean up and vanish or just serve for further propagation. Stuxnet was discovered b
678.
by wepple 8y ago
I can’t tell if you’re being sarcastic or not, but if not: the idea that Linux is any more secure against a nation state than windows is ridiculous. There are no shortage of regular vulns discovered in each part of the Linux OS as used by s
679.
by wepple 8y ago
I was always uncomfortable about signal on non-iOS devices. I feel the same about password managers too, it’s a giant PITA but I specifically do not want all my passwords in one place if that places is a wild desktop.
680.
by wepple 8y ago
“You may be surprised to learn that chess does get played in prison” Growing up, I would have. But after moving to NYC my eyes were open d to how it isn’t “just a nerds game” and popular with a massively diverse group of people.. it’s reall
681.
by wepple 8y ago
But shouldn’t that be solved by identifying which services need improvement, followed by a rigorous process to seek an optimal solution, then implementation? If block chain is the answer, awesome! If anything is the answer, awesome! Do we n
682.
by wepple 8y ago
That’s a really interesting datapoint, mind sharing what city that is? In NYC I’d say it’s 80-90% macbook
683.
by wepple 8y ago
I read this as a metaphor and it seemed quite apt.
684.
by wepple 8y ago
I realized this the other day in the shower: media outlets basically argue with themselves to create their own hype cycles. First it’s a fringe crazy idea, then it’s the new hotness, then it should be a part of your daily life, then someone
685.
by wepple 8y ago
most successful organizations ive seen don’t think about their API/app, but rather their stuff of value: usually data. If someone lifts your entire database, can you spot that on the way out the door? How quickly would you notice 100%
686.
List of the top smart contract vulnerabilities(dasp.co)
93 points by wepple 9y ago|38 comments
687.
by wepple 9y ago
My personal gut feel is that in the fairly long history (for a tech co), we’ve seen surprisingly little malicious use of data come from google. In a company of their size I’d expect a lot more screw ups and scandles, so perhaps they deserve
688.
by wepple 9y ago
I’m all-in with google services and acknowledge they have an insane amount of data on me, but very happy to be an iPhone user. At least it gives some basic form of separation between my phone and the services I use - under the assumption th
689.
by wepple 9y ago
Because parent said there would be a competition for whose password is cracked last. My 16 char fully randomized passwords will not be cracked, so I win, along with everyone else using a password manager?
690.
by wepple 9y ago
Everyone who uses a password manager would win

More ›