zzzcpan

22 ms·

181.
by zzzcpan 7y ago
It's more like Medium, than Lobsters, HN or even Reddit. And while they initially succeeded at attracting users with invite-only scarcity, they utterly failed with negative reinforcement.
182.
by zzzcpan 7y ago
Automated service for issuing DDoS attacks.
183.
by zzzcpan 7y ago
There is no need for trolling. He's talking about encryption, but calls it security, that's something I have a problem with.
184.
by zzzcpan 7y ago
You can't securely disable http on websites, even if you are not offering it, because it still can be faked by a MITM attacker via proxying it to https. So removing http is pointless for security and only hurts legitimate uses. I guess
185.
by zzzcpan 7y ago
You are looking at it as if DDoS protection provides some additional value to customers they don't comprehend, but not as a basic necessity for hosting providers to ensure competitive quality of service they can offer customers, which
186.
by zzzcpan 7y ago
> And genuinely, if you can look at child porn, murder, and other awful, genuinely terrible things all day, every day, and not be impacted Well, that's not what moderation is. Most of it is not actually disturbing content. And whe
187.
by zzzcpan 7y ago
Here's what I think is happening: megacorps want to overwork people into the ground, but pretend that it's disturbing content that's causing it, not them forcing people to keep focused and assessing content all day long. I mo
188.
by zzzcpan 7y ago
I don't think it can, that's not how emotions work.
189.
by zzzcpan 7y ago
> Yeah, it's awful, dirty work, and we should give them as much support as possible Have you ever moderated anything? I don't see how a one sided content moderation can invoke much emotions, like even talking on HN to others
190.
by zzzcpan 7y ago
There isn't any fundamental problem, it's just about tooling. Interpreted languages typically do this by packing all the necessary modules into an executable binary together with an interpreter and preloading or faking import func
191.
by zzzcpan 7y ago
You can't catch "terrorists" with surveillance and even generally bad actors, except for some naive desperate people doing stupid things. What you can do with surveillance is catch dissidents, create some chilling effect on d
192.
by zzzcpan 7y ago
See DNS CAA https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...
193.
by zzzcpan 7y ago
I found some research on fingerprints [1]. At 512 dpi fingerprint sensors have 0.01 bits per pixel of information mutual between samples but still individual, meaning that 160x160 sensors can give 256 bits of information usable for keys. An
194.
by zzzcpan 7y ago
> They can grant access to a key, but they cannot themselves be the key. My assumption is that device recovery is such a special case, that it can use very different algorithms than those used in phones today, they could be very comput
195.
by zzzcpan 7y ago
> There exists no magical way to provide a means of lost password/device recovery which doesn’t grant Apple access to decrypt your data. In modern times your face and your fingerprints could be that magic.
196.
by zzzcpan 7y ago
No, conventional definition is actually both: from endpoint device 1 to endpoint device 2 and from endpoint device 2 to endpoint device 1. If device 2 has backups in question enabled, there is no E2E anymore.
197.
by zzzcpan 7y ago
> Yes, but the key is stored in your iCloud backup if you use it. As soon as you disable iCloud backups it will roll the key for iMessage and they will be effectively E2E encrypted. Assuming this is true, you still don't know what
198.
by zzzcpan 7y ago
It's the opposite of Moxie's propaganda. Here's an example of this conflict at play: https://news.ycombinator.com/item?id=22106536
199.
by zzzcpan 7y ago
Oh, it's worse. End-to-end encryption assurances are essentially in conflict with centralized control over software development and distribution. Literally the same organization end-to-end encryption is supposed to protect from is the
200.
by zzzcpan 7y ago
No issues with other metrics? To me all those metrics look like they are targeting work where every problem is well understood and people are just implementing primitive solutions and fix bugs. Or maybe just maintenance work. But not work w
201.
by zzzcpan 7y ago
On local networks TLS doesn't make things more secure, maybe even less in some scenarios given all the obtaining of certificates over public internet and leaking info to the public internet. So sane thing to do would be plain http. But
202.
by zzzcpan 7y ago
So, better way to say it is "uniformity breeds extinction".
203.
by zzzcpan 7y ago
It doesn't work like that everywhere, certainly not in Eastern Europe, which is a broad term that includes both police countries and the opposite of police countries, a wide range of policing behavior, but I don't think any of the
204.
by zzzcpan 7y ago
> Following that throught process everything will look like a propoganda. Almost everything is. In tech industry and tech media in particular. PR is essentially another name for propaganda, because propaganda got bad name at one point
205.
by zzzcpan 7y ago
> but rather someone with power who is to be feared That's the core of police country idea.
206.
by zzzcpan 7y ago
I don't think anyone's brain is wired for pair programming. Maybe it's tolerable for people who are in early years of their programming career and are also writing in very inexpressive languages to spend too much time dealing
207.
by zzzcpan 7y ago
Everything you ever used in production is "production-ready". The bar is super low, there is no deception here. The security thing is particularly interesting here. If you care about security even a little bit, you absolutely cann
208.
by zzzcpan 7y ago
> and ask if anyone wants to be added as an admin to take over. That's the worse possible course of action, this is how you get RCE vulnerability or bitcoin stealing malware injected into a popular project. Other random people sho
209.
by zzzcpan 7y ago
Well, maybe people didn't provide detailed enough explanation for the author to understand and merge the patch, so he didn't bother.
210.
by zzzcpan 7y ago
> it's refusing to investigate use-after-free vulnerabilities Please investigate yourself, don't ask others to do the work you consider important for you for free.

More ›