greyface-

5 ms·

1.
by greyface- 6d ago
> taking away people's rights as [...] workers I was recently reviewing a collective bargaining agreement (after being approached by a campaign to add my job category to an existing union at my employer), and was surprised to find t
2.
by greyface- 9d ago
It appears this commit actually introduced the bug the attacker exploited by adding additional flexibility for cache key confusion via scriptPubKey. https://twitter.com/mononautical/status/2096928595432374706 The
3.
Filepack(rodarmor.com)
1 points by greyface- 10d ago|0 comments
4.
by greyface- 10d ago
Further on-chain communications: https://mempool.space/tx/91271efcbb5ab29abfc38ae635f0644e3ba... "Please contact security@blockstream.com" https://mempool.space/tx/bd81219691eb1e22475c598
5.
by greyface- 10d ago
While moving the funds, the attackers left an OP_RETURN message with the text "we are whitehats. contact us on chain" https://mempool.space/tx/c103de95817b43f2df635ec6f35ff126ca2...
6.
by greyface- 12d ago
IIRC, Google addressed the incident you're referring to by adding E2E encryption to sensitive inter-DC RPC sessions, rather than by fully encrypting inter-DC traffic at the link level. It would be nice to be able to reasonably expect
7.
by greyface- 12d ago
Why would they serve a secret subpoena and gag order, when instead they can just drive to a secluded location 5km away from the super secure datacenter, dig a few meters down, passively tap a strand or two, facility and service operators no
8.
by greyface- 12d ago
Adversaries don't always ask nicely. Sometimes they break in and silently take the data. These services centralize traffic flows and make it so that an adversary only needs to tap one or two circuits to get a full picture for all use
9.
by greyface- 12d ago
Sending every single query to a centralized third party is hard to square with "high privacy". I prefer to run my own local recursive resolver.
10.
Late Merge(third-bit.com)
2 points by greyface- 13d ago|0 comments
11.
by greyface- 13d ago
> This isn’t how things are done these days The old locality domains still exist, and in many localities you can still register them today by the same "email a request to some sysadmin" process. https://news.ycombin
12.
by greyface- 14d ago
This one thinks LLMs should be trained and RLHF'd into illeists, as an experiment.
13.
by greyface- 15d ago
> I'm not clear if you're doubting the correctness of what I said in my previous comment. I don't dispute any of the factual or legal claims you've made. I even agree that a FOSS license is probably the best choice i
14.
by greyface- 15d ago
There are 22,000 third-level registrants currently. https://www.icann.org/en/system/files/files/reconsideration-... (via https://www.icann.org/resources/pages/reconsideration-2
15.
by greyface- 16d ago
> Like what? djb's software is the canonical example here: qmail, djbdns, etc. Widely used; distributed without explicit license until 2007, and placed in the public domain thereafter. No legal disputes ever arose from this.
16.
Discontinuation of third level domain registrations for the .name TLD [pdf](itp.cdn.icann.org)
86 points by greyface- 16d ago|61 comments
17.
by greyface- 17d ago
This is exactly what GP was talking about: entrenching a preference for one style of licensing over another. We all know what set of licenses the FOSS zealots would prefer for us to release code under, and those who release license-free or
18.
by greyface- 18d ago
https://www.pdos.org/ Public Domain Operating System
19.
by greyface- 18d ago
It only applies to software distributed under a license. Public domain software isn't distributed under a license. It's in the public domain; no license is needed.
20.
by greyface- 18d ago
The bill exempts: > a person or entity that distributes an operating system or application under license terms that permit a recipient to copy, redistribute, and modify the software which at least doesn't choose specific winners an
21.
by greyface- 23d ago
IPFS doesn't fetch or store content that the user has not explicitly requested. If your application allows strangers to request arbitrary IPFS objects, this might be a concern. Otherwise, no, simply running a node doesn't expose
22.
by greyface- 27d ago
The general public was authorized to enter the facilities 24/7. The exterior doors were unlocked and it was considered an "open campus". The access controls you see today have only existed since COVID. Whether he was a stu
23.
by greyface- 27d ago
Both Aaron and "those hackers" were MIT community members .
24.
by greyface- 27d ago
> trespassed into a room A room with an unlocked and unmarked door, off of a hallway that was open to the general public. An INCREDIBLY tame act compared to other unprosecuted trespasses normalized and celebrated at https://h
25.
by greyface- 27d ago
Their upstream transit providers do, surely.
26.
by greyface- 29d ago
One man's "disruption of police work" is another's protected First Amendment activity. https://www.reuters.com/article/world/us/top-new-hampshire-c...
27.
by greyface- 1mo ago
You can change the MX records of the domain to point at Fastmail (or some other provider) without losing the ability to log into associated "Google Workspace" accounts.
28.
by greyface- 1mo ago
Trump didn't invent fascism.
29.
by greyface- 1mo ago
Brick-and-mortar banks often don't want to provide these to existing clients, either. I got the runaround from mine when I tried to open a TreasuryDirect account.
30.
by greyface- 1mo ago
> Being unable to comply is not a valid legal defense. Sure it is. Lawyers even have a pithy Latin maxim about it: lex non cogit ad impossibilia.

More ›