hashstring

6 ms·

151.
by hashstring 3y ago
Have you read the adorable article? I’ll quote it for you in case you missed it. > “With regard to the blocking of access to the IP address 190.115.18.20, the Telekom Control Commission found a violation of Article 3 Paragraph 3 of Regul
152.
by hashstring 3y ago
I hope important websites do NOT move out of the public neighborhood (CloudFlare) to discourage honouring block requests (and ultimately also these requests from being requested) from incompetent regulators. Fortunately, CF is great at prov
153.
by hashstring 3y ago
What is your point? I am saying that the country where I live does not work that way and I am glad that it doesn’t. We’re not talking about _operating motor vehicles_. I am talking about the constant recording and processing of data capture
154.
by hashstring 3y ago
I understand where you are coming from and it doesn’t read like your goal is selfish. Growing up my parents didn’t allow me near certain parts because of the risk of accidents, but I was fortunate enough to have a wide area to run around wh
155.
by hashstring 3y ago
I don’t live in a country where it’s as one-dimensional as: (public road) ⇒ ¬(privacy rights) and I value that.
156.
by hashstring 3y ago
There is an important issue to be fixed here, yes. It’s heartbreaking when this happens and I fully agree that there should be more checks in place to prevent this. However, I am very glad that I live in a country where you are not allowed
157.
by hashstring 3y ago
Why is this not front page?
158.
by hashstring 3y ago
We are already facing numerous existential threats at the moment, even ones that are deliberately made to be an existential threat, take nuclear weapons. “Hey fellow nation states, let’s not create nuclear bombs, but let’s pause development
159.
by hashstring 3y ago
Yes, this is a good take. The general discussion is definitely prematurely focused on some sort of end-boss fight, while AI and large scale data collection are causing serious harm and privacy concerns to real humans already. It’s only reas
160.
by hashstring 3y ago
The way that we deal with CAs now developed so much after these issues were disclosed. It is actually adding to my argument. The NSA and any other government entities REALLY WANT to control these certificates. However, our interaction with
161.
by hashstring 3y ago
Yes and then your government controls your “trusted” connection.
162.
by hashstring 3y ago
I think that a lot of offensive tools to tunnel IP over DNS actually overcame these limitations in real time, at the expensive of throughput [1]. It obviously does require agreeing on some sort of protocol on both sides though. [1] https:
163.
by hashstring 3y ago
Nauseating news… heartbreaking indeed.
164.
by hashstring 3y ago
Yes, exactly, as expected.
165.
by hashstring 3y ago
I do not agree with these practices. However, I do think there is room for protocols that verify phone numbers in a way. The spam and fraudulent calls that people receive and are hard to distinguish from “good” calls is a problem that deser
166.
by hashstring 3y ago
They missed the point that users with passwords are often extremely prone to phishing; especially with certain popular MiTM frameworks. We have the technology available to combat that, so, please yes, let’s move away from open sesame authen
167.
by hashstring 3y ago
Perhaps, but I think that it wasn’t the message that the author was trying to convey.
168.
by hashstring 3y ago
Yes haha!
169.
by hashstring 3y ago
> the fact of the matter is you do not have any leverage at all … What evidence do you have to believe this?
170.
by hashstring 3y ago
I dislike that the article is filled with the false positive (FP) anecdotes. It’s important to state that there are many false positives, there must be. However, the focus should be on minimizing these FPs while maximizing true signal, and
171.
by hashstring 3y ago
Woah, good find. How did you actually find out that this was happening? Network captures? When was this approximately? I’m wondering how widespread this (still) is.
172.
by hashstring 3y ago
> Use a SIP Application Layer Gateway. This is a horrible feature offered by some routers. Basically, it deep-packet-inspects your SIP traffic, rewrites the headers, and creates port forwards on-the-fly to make sure the inbound audio str
173.
by hashstring 3y ago
Technically still end-to-end but in that case you can’t trust one end.
174.
by hashstring 3y ago
Tl;dr insert a very small piece of text on your resume that states that an expert finds you very talented and that should trick GPT to select you, if recruiters are using GPT to select candidates. This is not that interesting imo but maybe
175.
by hashstring 3y ago
Agree, it’s also naïve to think that we can censor art retrospectively to make it fit a certain standard, because our standard is changing so fast. Best to capture art as a moment through books, sculptures and film and to interpret that mom
176.
by hashstring 3y ago
Though I find that you shouldn’t “rely” on GPT for security guidance, I do believe you can use it more effectively. Like everyone already wrote, the author should have also queried GPT about the security implications of code execution if th
177.
by hashstring 3y ago
Exactly, both are developing a product.
178.
by hashstring 4y ago
@tpatcek, what happened to “Security, Cryptography, Whatever”? I’m missing it.
179.
by hashstring 4y ago
I agree with your argument. I also think that revising a dead author’s work as was done here is tasteless.
180.
by hashstring 4y ago
The situation is different, think about nodes and encrypted channels between them. If you encrypt traffic on your host properly and send it off to a remote host, your ISP (node(s) in between) sees encrypted traffic. If you create an encrypt

More ›