woodman

60 ms·

481.
by woodman 11y ago
Not only the source, they want the signing keys as well: "For the reasons discussed above, the FBI cannot itself modify the software on Farook's iPhone without access to the source code and Apple’s private electronic signature .
482.
by woodman 11y ago
You are right, I made an overstatement about a deviously complex situation. An administrative subpoena, which doesn't come from a judge - just the investigating federal agency, is required for old mail. They send out tens of thousand
483.
by woodman 11y ago
Or people who knows that email stored on a third party's server for longer that 180 days is legally considered abandoned. Abandoned property enjoys no legal protection.
484.
by woodman 11y ago
Void pointers mean no type safety, preventing a lot of potential compiler optimizations and static analysis checks. 99% of the time the right thing to do is just create a new type: typedef struct Strref_t { char* str; size_t re
485.
by woodman 11y ago
You hid the point pretty well then, because those who engage in "domestic violence" and "fights that escalate into _blank_" are certainly not "non-criminals". So that leaves only accidents: Widespread $PHYSICA
486.
by woodman 11y ago
Ah, given the context my mind went right to ammunition microstamping. Encryption software and 3d printed guns are simply implementations of ideas, both physically interact with the world and both can be observed. ABS plastic stock is to bl
487.
by woodman 11y ago
You know that the majority of stuff you see on CSI is total crap... There are three identifying marks on spent shell casings: Fingerprints: easily avoided. Production facility/year: not really useful for criminal investigations. Toolm
488.
by woodman 11y ago
Again... there is very little material difference between a garden hose nozzle and a 1911 handgun, just as there is very little mathematical difference between the functions powering TLS and PGP. But one is completely centralized and offer
489.
by woodman 11y ago
I don't mind taking the conversation in a different direction, but I just want to make it clear that nothing you said has anything to do with what I said. > ...for all practical purposes impossible to actually ban strong encryption.
490.
by woodman 11y ago
One of the first income tax evasion prosecutions, follow the passing of the 16th amendment (making income tax permanent), relied almost entirely on bank deposit records. Centralized reporting requirements are pretty important to the IRS.
491.
by woodman 11y ago
> ...there's no corresponding harm to innocents like there is with widespread gun ownership... That is also an oversimplification. Have you considered the possibility that encryption can be used in commission of a non-victemless cr
492.
by woodman 11y ago
> ...obviously she doesn't understand or care... That isn't logically consistent, if she doesn't understand then appeals to reason are a potential avenue. By offering that unreasonable bit of charity you undermine your ar
493.
by woodman 11y ago
> Earlier we were talking about "grandma"... Don't forget the grandson part of the metaphor, he is the one who will be making that judgement call. Do you remember how everybody would blow into the Nintendo cartridges, eve
494.
by woodman 11y ago
The more important question is why do you assume that anything will change her mind. It is fine to be charitable and assume that somebody can eventually see reason, but continuing to do so after several years is just foolish. Some people
495.
by woodman 11y ago
I don't have any experience with this particular product, but done work with a bunch of semantic web software (which is graph based). The most difficult part of migration is related to ontology, the edges. Feature creep is very easy
496.
by woodman 11y ago
> Probably because it isn't very useful to the attacker. Ring 0 is really important for building a botnet, which provides a very real incentive for the folks that actually write the droppers. Ideally (for the botnet owner) they est
497.
by woodman 11y ago
I was looking for an old post I read about a piece chain text editor, turns out it was about vis: "[dev] [RFC] Design of a vim like text editor" [0] [0] http://lists.suckless.org/dev/1409/23497.html
498.
by woodman 11y ago
> You seem to think that is unlikely. Why? Because of the single user pc context. I've never seen a dropper that didn't have ring 0 later pull down a payload that escalated privilege. I'm not saying that it isn't po
499.
by woodman 11y ago
> but why bother when you can compile the app from sources? Well, imagine that you are the attacker here. Would you rather keep your malware source in sync with the upstream code and build every target every update, or just use an off t
500.
by woodman 11y ago
Because unless an unknown method of privilege elevation was used, it doesn't make sense. Do you throw a pinch of table salt over your shoulder as well? It also has a very strong Microsoft smell to it, where instead of doing root caus
501.
by woodman 11y ago
That would have been the easy way to do it, if tcsh allowed dynamically generated prompts (outside of a few stock flags). On Freebsd it makes sense to run your own packaging build server once you start running custom compiles on more than
502.
by woodman 11y ago
I guess it depends. In the grandma scenario it adds a lot more effort. A corporate laptop in a standard AD environment, no problem. In a situation where you've customized the system (custom packages, sshd.conf tuning, flags in rc&#x
503.
by woodman 11y ago
That is only true if you have no interest in recovery post compromise. A user level account shouldn't be able to put the system in such a state that online recovery is impossible, whereas a system level account easily can - think load
504.
by woodman 11y ago
C++, not C :(
505.
by woodman 11y ago
> Open source software is especially vulnerable ... the hacker can just compile the program from sources and add his own code You must be too young to remember how computer viruses originally spread by way of modified executable files:
506.
by woodman 11y ago
> One can not do this in Unix, and that's the point. One certainly can, very easily actually: edit you shell rc file in /etc to modify your PATH based on PWD, boom - hierarchical PATH the Unix way. Don't want it system wi
507.
by woodman 11y ago
> 1. Unnecessary and confusing directory structure. "Unnecessary" for you maybe, but have you considered the possibility that there is a reason why the directory structure is the way it is - and that the problems originally add
508.
by woodman 11y ago
>You may be right, but a good sign for whom, exactly? The economy, so everybody. You're asking the wrong question, it isn't "Why is it a good sign that IBM has begun layoffs?" The question is "Why is it a good
509.
by woodman 11y ago
ZFS allows for that level of control: assign a cache device to the pool, then set your secondarycache flag to metadata. Yes the metadata will hit the primary cache first (memory), but it will spill onto the secondary as it is pressured out
510.
by woodman 11y ago
I'm actually a big fan of the competing interests concept, it is a very eloquent solution. Where it goes off the rails though is the combination of that concept and the involuntary surrender of individual sovereignty to the very same

More ›