The last quote from Desair really sums it up nicely, "The language of finance can be insidious. Words like leverage and concepts like diversification can morph from narrow financial terms into much more general ways of…
Who said anything about a border? A person was arrested in Seattle for throwing a Jose Cuervo bottle imported from Mexico. The importation was the "foreign or interstate" nexus. Do you own anything that is not imported?…
What's the difference between the US and a despotic regime? We have a gulag system. There is a degree of legal nihilism that borders on lawlessness. For example, the DOJ charged someone with a federal crime for throwing…
> The difference being that then we saluted getting access to raw data, whereas now we are being conditioned to consider them "misinformation". I like this point. I wish it would be reported as an "influence operation"…
\
Its been a while, but I just read an article arguing the case that Len Sassaman was a Satoshi. It was a neat article, so I watched one of Len's Defcon talks about remailers from waaay back in the day. In his talk, Len…
> It really comes down to how it's used I absolutely agree. The thing that concerns me is these cameras sitting on the internet. It says something about how overworked the security team is. I trust that they have good…
There's more information here as well. Cloudflare was apparently operating network connected facial recognition cameras in their offices. I'm not someone who's crazy about privacy, but this is a pretty dark indicator…
Or the commercial model that identifies criminals from their photograph. Turns out people who frown are criminals. People who smile aren't. Or so you'd believe if you anchored your expectations comparing mug shots to…
It would be nice to see a logistic regression using at least some of the features known to be useful (including geography and income). That way we can see how much of the performance is from magic AI pixie dust, and how…
When I read a paper like this I'm looking for four things: (1) the data, (2) the benchmarks, (3) the architecture, (4) the controls/ablation. 1. The data: "We used a sample of 1,085,795 participants from three countries…
Some problems that Fukushima had: 1950s vintage design, active cooling system, backup power at sea level in a seismically active area. This kind of failure was not just predictable, it was predicted. People travel to…
Feynman's lectures on the character of physical law should be something everyone sees in school. In general we look for a new law by the following process: first we guess it, then we compute the consequences of the…
A really good way to learn about concurrency is to write a SOCKS5 proxy. Start with a simple one using Python threads, then Python asyncio, and if you're brave C sockets with poll/select. The C parts are in Beej's guide…
Two bits surprised me. First, Intel is apparently collecting telemetry underneath the OS? "The ITH can trace different internal hardware component (VIA - Visualization of Internal Signals, ODLA - On-chip logic analyzer,…
Or just distribute your source with the binary, and opt into the no liability regime.
> but I can't think of any realistic policy that could be applied to stop these kinds of attacks, not without massively disrupting the technology industry at the same time Why wouldn't Dan Geer's proposal to attach…
I think part of the reason Feynman got as far as he did--apart from his unusual innate talents--was his skepticism of formality. Measure theory will tell you exactly when this result is true, but it is possible to grok…
I've been meaning to do a deep dive on semiconductor supply chains for a while now. I'd start by aggregating annual reports for the companies named in [1], identify their major categories of capex, gather information…
My read on that statement was "the censors can't just /dev/null anything with a plaintext CONNECT". Given its broad user base, it wouldn't hurt for Signal to clearly state "we can't keep the fact of the communication…
Then hear it from someone you are less likely to distrust. [1] [1] https://news.harvard.edu/gazette/story/2019/12/martha-minow-...
It is not true that Signal domains are visible in plaintext on the wire between the user and the proxy. You can spin up the proxy and check yourself. Alternatively, you can ask yourself "why go through the trouble of…
The SNI is encapsulated in an outer layer of TLS, which is removed before forwarding traffic to Signal. That's what nginx-terminate is doing.
Super unusual. I've never encountered the issue before or since.
I've used proton for several years now. The only headache I've ever had is being unable to subscribe to the openbsd mailing list. And that's only because openbsd added proton servers to a spam list... a decision I wish…
The last quote from Desair really sums it up nicely, "The language of finance can be insidious. Words like leverage and concepts like diversification can morph from narrow financial terms into much more general ways of…
Who said anything about a border? A person was arrested in Seattle for throwing a Jose Cuervo bottle imported from Mexico. The importation was the "foreign or interstate" nexus. Do you own anything that is not imported?…
What's the difference between the US and a despotic regime? We have a gulag system. There is a degree of legal nihilism that borders on lawlessness. For example, the DOJ charged someone with a federal crime for throwing…
> The difference being that then we saluted getting access to raw data, whereas now we are being conditioned to consider them "misinformation". I like this point. I wish it would be reported as an "influence operation"…
\
Its been a while, but I just read an article arguing the case that Len Sassaman was a Satoshi. It was a neat article, so I watched one of Len's Defcon talks about remailers from waaay back in the day. In his talk, Len…
> It really comes down to how it's used I absolutely agree. The thing that concerns me is these cameras sitting on the internet. It says something about how overworked the security team is. I trust that they have good…
There's more information here as well. Cloudflare was apparently operating network connected facial recognition cameras in their offices. I'm not someone who's crazy about privacy, but this is a pretty dark indicator…
Or the commercial model that identifies criminals from their photograph. Turns out people who frown are criminals. People who smile aren't. Or so you'd believe if you anchored your expectations comparing mug shots to…
It would be nice to see a logistic regression using at least some of the features known to be useful (including geography and income). That way we can see how much of the performance is from magic AI pixie dust, and how…
When I read a paper like this I'm looking for four things: (1) the data, (2) the benchmarks, (3) the architecture, (4) the controls/ablation. 1. The data: "We used a sample of 1,085,795 participants from three countries…
Some problems that Fukushima had: 1950s vintage design, active cooling system, backup power at sea level in a seismically active area. This kind of failure was not just predictable, it was predicted. People travel to…
Feynman's lectures on the character of physical law should be something everyone sees in school. In general we look for a new law by the following process: first we guess it, then we compute the consequences of the…
A really good way to learn about concurrency is to write a SOCKS5 proxy. Start with a simple one using Python threads, then Python asyncio, and if you're brave C sockets with poll/select. The C parts are in Beej's guide…
Two bits surprised me. First, Intel is apparently collecting telemetry underneath the OS? "The ITH can trace different internal hardware component (VIA - Visualization of Internal Signals, ODLA - On-chip logic analyzer,…
Or just distribute your source with the binary, and opt into the no liability regime.
> but I can't think of any realistic policy that could be applied to stop these kinds of attacks, not without massively disrupting the technology industry at the same time Why wouldn't Dan Geer's proposal to attach…
I think part of the reason Feynman got as far as he did--apart from his unusual innate talents--was his skepticism of formality. Measure theory will tell you exactly when this result is true, but it is possible to grok…
I've been meaning to do a deep dive on semiconductor supply chains for a while now. I'd start by aggregating annual reports for the companies named in [1], identify their major categories of capex, gather information…
My read on that statement was "the censors can't just /dev/null anything with a plaintext CONNECT". Given its broad user base, it wouldn't hurt for Signal to clearly state "we can't keep the fact of the communication…
Then hear it from someone you are less likely to distrust. [1] [1] https://news.harvard.edu/gazette/story/2019/12/martha-minow-...
It is not true that Signal domains are visible in plaintext on the wire between the user and the proxy. You can spin up the proxy and check yourself. Alternatively, you can ask yourself "why go through the trouble of…
The SNI is encapsulated in an outer layer of TLS, which is removed before forwarding traffic to Signal. That's what nginx-terminate is doing.
Super unusual. I've never encountered the issue before or since.
I've used proton for several years now. The only headache I've ever had is being unable to subscribe to the openbsd mailing list. And that's only because openbsd added proton servers to a spam list... a decision I wish…