wepple

71 ms·

901.
by wepple 10y ago
> Even when faced with this clear evidence, people consider TrueCrypt as being safe. I don't understand. If your definition of 'safe' requires that no vulnerabilities can ever be discovered in a product, you're going
902.
by wepple 10y ago
I agree with everything you've said. Automation and tooling where it excels, humans where necessary and for oversight. My comment was largely around the fact that parent comment seemed to say "software bugs have been solved by too
903.
by wepple 10y ago
> First could be detected using fuzzer, static analysis and proof reader. I respectfully disagree; I don't think we're truly at the point where we can rely upon these techniques over human code review.
904.
by wepple 10y ago
awesome, I'm going to take a look at that, thanks.
905.
by wepple 10y ago
Under certain conditions (high load, warm day), you'll start hearing a 'pinging' sound on high-compression engines; that's the air/fuel mixture pre-igniting before it is supposed to (before the spark fires) essentia
906.
by wepple 10y ago
I really wanted this to be a shining review. I've been looking for a daily use linux laptop and the XPS15 was at the top of my list. Sad.
907.
by wepple 10y ago
economics. the benefits of security have to outweigh the costs. theft of VW's via this type of method hasn't been significant yet, and cost of implementing stronger security would've been real.
908.
by wepple 10y ago
a modern iPhone can stand up pretty well to physical access for extended periods of time. In fact, the attack used in this whitepaper would've likely been thwarted had VW used a secure hardware device analogous to the iPhone's sec
909.
by wepple 10y ago
My gut feel is that governments have a much more significant ability to do things such as: "hey, we're going to do this thing and you're not entitled to ask about it" than private sector.
910.
by wepple 10y ago
This is realistic; there are examples you can see. Have a google around for Stuxnet; a fairly advanced piece of malware which went after Iranian nuclear enrichment centrifuges. It used five previously unreported Microsoft vulnerabilities an
911.
by wepple 10y ago
They all look like kernel code/driver bugs to me, meaning there will likely be memory layout and config variations much more significant that you'd see in baseband code which might be a lot more duplicated across devices.
912.
by wepple 10y ago
interesting that they highlighted how ecosystem fragmentation makes patching more difficult; they didn't highlight how fragmentation makes exploitation of their headline-grabbing "900m devices" also very tricky. This is one o
913.
by wepple 10y ago
For me the trickiest thing to wrap my head around is that Mandarin is heavily tonal, and I've never had to deal with that in my life, making it a difficult thing to introduce my brain to. Some words mean 5 different things depending on
914.
by wepple 10y ago
> Is there xenophobia? Are Americans looked down upon or treated differently? xenophobia, no. treated differently, definitely. often they won't know where you fit into the social hierarchy, because, you don't. You don't ha
915.
by wepple 10y ago
I was really impressed by WeChat while living in China. Quite a few times I thought "hmm, I wish we had that back home" To counter the argument that it's not true innovation, just a re-combining of existing ideas... what othe
916.
by wepple 10y ago
I feel that if a users assumption of privacy was based on skype being peer-to-peer and are now concerned their calls are being routed via the cloud, are in a bit of a misunderstanding about how intercept/collection can work.
917.
by wepple 10y ago
I don't have permissions to downvote at all, I think you need a certain karma for that? I genuinely did ask because I wanted to know. Even though my experience has been great, if there are say security problems I wasn't aware of o
918.
by wepple 10y ago
Yeah that seems the most dubious claim, that a power cord will protect the device, really? stating that the fact the thief will be on video is IMO a stronger deterrent if there's one at all.
919.
by wepple 10y ago
curious to know why, I have one and really like it, but maybe I'm missing something?
920.
by wepple 10y ago
yeah, USB/lightning in general have never really been designed for being tumbling around in my pocket/backpack while connected, like my headphone jack has learnt to expect.
921.
by wepple 10y ago
that's what I thought. > 50% of the questions I was presented with were misprint errors which likely would've been caught by unused variable warnings.
922.
by wepple 10y ago
instead of aiming for "the same number or slightly less" accidents than a human, why not have humans give oversight to prevent autopilot errors, and autopilot assist where humans might make a mistake? actually try to let both comp
923.
by wepple 10y ago
I have no idea why I wrote that, bad wording.
924.
by wepple 10y ago
in general, have a poke around https://fuzzing.info/papers/ First, I think the next big step in fuzzing will actually be a complement to fuzzing - solving. AFL and friends can bitbang their way to massive code covera
925.
by wepple 10y ago
browsers generally don't pin certs. there are methods to do it but everyone is scared to do it as it's a pretty quick way to DoS your entire user-base if you get it wrong. The intended design of PKI suggests that pinning should no
926.
by wepple 10y ago
are you serious? you're suggesting that the metadata of "alice messaged bob at 1:20am" is worth more than "hey bob, I'm looking to have $100,000 laundered, same methods as last time. I'll drop to the usual loca
927.
by wepple 10y ago
At a minimum, they've made a number of choices which go against (fairly widely considered) good cryptographic principles. This in itself wouldn't even be that bad if they weren't then trying pretty hard to convince the genera
928.
by wepple 10y ago
I'd argue that WhatsApp and FBM adopting signal have been some of the highest-impact movements toward resistance of mass surveillance, largely due to sheer numbers and accessibility. Sure, there is room for improvement, but having 0.00
929.
by wepple 10y ago
2.048MHz clock 16-bit wordlength 2048 words of RAM (4k 'bytes'/octets) using magnets?! 36,864 words of ROM Ok this is a actually a really interesting read: https://en.wikipedia.org/wiki/Apollo_Guidance_Co
930.
by wepple 10y ago
I've followed the blackphone for a while with quite a bit of interest, and TBH I didn't get a strong indication that they knew who their target market was. BP1 was aimed at individuals I think, and when they realised they weren&

More ›