ziddoap

28 ms·

361.
by ziddoap 2y ago
Might be worth reaching out to them, assuming you meet their criteria of "researcher". > The Erowids state on their website that researchers cannot “mine” data from their site but that they’re open to discussing projects with r
362.
by ziddoap 2y ago
> users can put in whatever tags they want. (Autocomplete is there to help, but they don't have to use it.) Then behind the scenes, human volunteers look up any new tags that no one else has used before and match them with any appli
363.
by ziddoap 2y ago
If I'm asked to be more professional or to prove my credibility to someone leaking the data of their customers , I just laugh. I owe nothing to the company being negligent. A notification email with all the pertinent details is what y
364.
by ziddoap 2y ago
> establish their credibility > I'd like to know that I'm dealing with a professional, who takes their work seriously As a sender of these emails, my credibility is established when you go to the location I say there'
365.
by ziddoap 2y ago
> They should have linked to their website where they publish reports, and been more plain about their intentions from the outset. I don't get this. Their intentions should be clear by the fact that they reveal the entirety of the
366.
by ziddoap 2y ago
If my first email contains everything required for you to locate and fix your security issue, my motivations are pretty clear.
367.
by ziddoap 2y ago
> A hallmark of a nefarious email (particularly scams but some sales attempts) is that they aim to deceive you. The very first email has literally everything the company needs to locate and fix the issue without having to sign anythin
368.
by ziddoap 2y ago
Does the CEO know what?
369.
by ziddoap 2y ago
> If you don't want money and it's not a scam, why are you emailing them? It may be shocking to you, but some security researchers notify companies when they are exposing data of their customers. That's it! Simple. When I
370.
by ziddoap 2y ago
At one point in time, the entirety of web communication was completely unencrypted. Why were people not mad then? Do you think people would be angrier now, if HTTPS were suddenly outlawed? Among other valid answers, removing rights and priv
371.
by ziddoap 2y ago
I definitely agree when it comes to personal storage. Making the system (whatever it is) "yours" is the key. But when dealing with shared storage, if everyone makes the system "theirs" to some degree, you end up with a d
372.
by ziddoap 2y ago
> How is that not worse or at least equivalent to a back door? It's bad for the citizens of the UK and better for everyone else on the planet with an iPhone. UK citizens should be angry with their government, not Apple.
373.
by ziddoap 2y ago
I agree with your take. I think someone who can/will get organized will do so regardless of which system they use. Someone who can't/won't get organized isn't going to no matter what system is proposed. The benefits
374.
by ziddoap 2y ago
It's less attractive, riskier, and more costly of a decision for Apple. Apple is a corporation, not an altruist. This play by Apple applies pressure to the UK government indirectly via its citizens, for free, rather than taking the ris
375.
by ziddoap 2y ago
See my other reply. They could also sell the entire business to Google. Why bother with listing options even worse for everyone involved?
376.
by ziddoap 2y ago
What would that change, effectively, other than have Apple lose money? The UK would still lose ADP (and then also just Apple products in general). A precedent would still be set. Your posing a strictly worse third option. Sure, it's an
377.
by ziddoap 2y ago
The choice was either eliminate it now (globally, via introduction of a backdoor) or eliminate it in the UK (but keep it globally). So, perhaps this is a bit of a dangerous precedent, but it was the least-bad option.
378.
by ziddoap 2y ago
> Providing access when ordered by a court is not as secure so we're removing all encryption? Providing a back door for one government reduces the security and privacy of the service worldwide. This decision keeps the security and
379.
by ziddoap 2y ago
> So I think it's reasonable to change a strategy that has failed so miserably I'm not sure how a strategy of "ignore it and don't mention it" is going to perform better than "call it out"...
380.
by ziddoap 2y ago
Data from https://www.backblaze.com/cloud-storage/resources/hard-drive... if you want to make one.
381.
by ziddoap 2y ago
I have to assume it's a chrome-specific comment, because I have not noticed anything different with it (or my browsing experience) on firefox (nor heard anyone else complain about differences).
382.
by ziddoap 2y ago
This over-simplification misses different threat models and situtations where a VPN is a good fit and Tor is not.
383.
by ziddoap 2y ago
If the abuse is serious enough, pursue legal avenues. Otherwise, these types of companies shouldn't be unmasking users based on a random persons assertion that someone is bad. That would be an abuse vector itself.
384.
by ziddoap 2y ago
> This comment isn't witty, and it doesn't contain any useful information or promote discussion either. Complaining about the comment isn't witty, contain useful information, or promote discussion either. I would recommen
385.
by ziddoap 2y ago
They are saying that the USA is potentially a Russia-aligned threat actor.
386.
by ziddoap 2y ago
Is there a list of phrases and words to avoid, to not be accused of using AI? It's getting kind of ridiculous what people identify an "AI smell". I understand if the word "delve" shows up five times in as many parag
387.
by ziddoap 2y ago
It's not like it's an official competition, and it's (probably) not for money, so I imagine you can just wing it and it will be fine. If there's a disagreement you just talk it out, which is also a good way to pass time
388.
by ziddoap 2y ago
I wasn't joking, no. That's a crazy obscure reference from like 10 years ago, especially for non-Americans.
389.
by ziddoap 2y ago
It is a great product, for sure, but why are you specifically calling out email servers? I can't think of any reason it would work better on an email server over anything else.
390.
by ziddoap 2y ago
Related: PBS Space Time just did a neat episode on plasma, focusing on what the requirements are for confinement, called " The Final Barrier to (Nearly) Infinite Energy " https://www.youtube.com/watch?v=nAJN1CrJsVE

More ›