zrm

29 ms·

301.
by zrm 6y ago
That is not the only mechanism for keys to leak. Timing side channels may reveal the key and not any of the old messages. The key could be guessed if it was inadvertently generated with a weak random number generator. The attacker could hav
302.
by zrm 6y ago
The next few paragraphs were not originally in the post. And you obviously get less information from knowing the user has updated some encrypted data than having the specific page of the specific book. It is also not inherently necessary fo
303.
by zrm 6y ago
> syncing what page you've read up to in a book (a feature many people find crucial!), cannot really be divorced from having the raw data to create server-side metrics about people's reading habits. Sure it can. You encrypt the
304.
by zrm 6y ago
> has anyone formalized the idea that the second law can be interpreted as a general inability of computer programs to predict one another? This sounds like the halting problem.
305.
by zrm 6y ago
> You seem to be ignoring the benchmarks where the M1 beats the Ryzen 9 5950X on several--but not all--benchmarks. These are all single-threaded benchmarks. They don't even list the 5950X for the multi-threaded benchmarks because it
306.
by zrm 6y ago
> The point everyone conveniently seems to miss is a new SoC for mobile devices running at 10-20 watts shouldn't be in the same universe when it comes to performance with any Ryzen desktop processor—but here we are. 10-20 watts is h
307.
by zrm 6y ago
It looks like you lose about 30% performance to Rosetta. That's quite a lot, and makes it slower than current x86-64 processors, e.g. Ryzen 5000 series, or even the Ryzen 3000 series. But compared to x86-64 Macs it's not that much
308.
by zrm 6y ago
> DoH in Firefox (and in Chrome) have clearly spelled out ways to disable it at the network level for those folks who are network operators and want to restrict it due to interference in filtering or split-horizon DNS. I still don't
309.
by zrm 6y ago
There isn't a bifurcation in the namespace for local resources. Any given name could resolve to a local address or a public one. There isn't even anything requiring a local-only server to have a private address -- it's common
310.
by zrm 6y ago
The problem is "guaranteed source of truth" doesn't exist. When the network operator is you, or your family/company, you may trust the local DNS to respect your privacy more than you do Cloudflare. Not all names are inte
311.
by zrm 6y ago
The user can do whatever they want. It's their machine. But you know perfectly well that almost everybody is going to take the default because they don't even know what the setting does, and end up disabling content blocking when
312.
by zrm 6y ago
The issue is with Firefox overriding the system DNS with its own by default, when the system DNS may have content blocking applied and the Firefox default may not.
313.
by zrm 6y ago
It's not a malicious DoH server. It's just any DoH server which is bypassing your Pi-hole and therefore resolves the malicious name instead of blocking it.
314.
by zrm 6y ago
> A slightly less trivial solution where you grab the IP out of a file over HTTP instead could be easily implemented by any junior developer. Over HTTP from what? You would need name resolution or a hard-coded IP address to make an HTTP
315.
by zrm 6y ago
> At its most basic, they could hardcode lists of IPs into their malicious code. Which makes the malware more fragile, because the hosts are often compromised machines themselves, or are the targets of takedowns. If they include only one
316.
by zrm 6y ago
> It also detects Firefox's Private Browsing and tells me that reading in Private Browsing is a privilege for paying subscribers. Wait, so if I don't want to be tracked, their solution is to sign in to an account which is tied
317.
by zrm 6y ago
That is not the only thing for which they interact, see e.g. systemd.network(5). The systemd-resolved.service itself reads the systemd.network config files. This is what people mean by tightly coupled. But more importantly, you're tell
318.
by zrm 6y ago
Suppose I want to write my own competitor to systemd-resolvd. I want it to work with systemd-networkd, in the same way as systemd-resolvd does. Or just patch dnsmasq or unbound to be able to do that. Is there a stable interface for that? An
319.
by zrm 6y ago
It's a prolific issue, but Windows gets dishonorable mention for making things take twelve clicks that used to take three.
320.
by zrm 6y ago
The UX improvement I most want to see in modern software is to optimize for reducing the amount of time I spend in your app. There are business models where companies are optimizing for the opposite ("engagement"), and that&#x27
321.
by zrm 6y ago
> no amount of thrust Are you sure that's right? Thrust implies acceleration, not just velocity. Suppose you're just inside the event horizon, from the perspective of an external observer. You're traveling outward at a vel
322.
by zrm 6y ago
I wouldn't expect to see anything like this on SP3 anyway, since it would take some time to do the work and by then the current generation would likely be whatever they replace SP3 with in order to support DDR5.
323.
by zrm 6y ago
For your convenience: https://eff.org/donate
324.
by zrm 6y ago
> I have unlimited 10Mbps (~3TB/month if my math is correct) connection that's costing me nothing to fully utilize. Where do I sign up to help debian? https://www.debian.org/mirror/ftpmirror > What I&#x
325.
by zrm 6y ago
That's assuming the factory's heat is generated via electricity rather than combustion or some other chemical reaction.
326.
by zrm 6y ago
> It’s fairly common knowledge that people actually don’t like choice. This is a misunderstanding of what people like. What people like is good defaults, because choosing is work. When 90% of everything is crap, nobody even wants to see
327.
by zrm 6y ago
The main reason is FTP is often used with untrusted external third parties and configured by enterprise IT staff who only half know what they're doing, and SFTP is really SSH. That makes it really easy to misconfigure it in such a way
328.
by zrm 6y ago
The thing to watch is then going to be the "5700X", i.e. the Zen3 version of the 3700X, which, if the analogy matches, should have 8 cores and a 65W TDP. It isn't in the initial slate but they left room for it in the numberin
329.
by zrm 6y ago
Using pricing to mitigate abuse is only necessary if you're not doing anything else to mitigate it. Imagine a collection of independent storage pools managed by various entities that control access, e.g. the IT guy of your family, your
330.
by zrm 6y ago
Fairness is overrated. 8TB drives are currently around $150, which prices 10GB of storage under 19 cents. Bandwidth costs would dominate if one peer had to upload the same material thousands of times, but in a P2P system the average peer up

More ›