lsofzz

5 ms·

91.
by lsofzz 6y ago
> http://langsec.org The maintainer apparently has no transport security concerns. It takes literally two minutes to set up TLS these days
92.
by lsofzz 6y ago
flatpak/snap applications can run on its own confined sanboxes
93.
by lsofzz 6y ago
COBOL
94.
by lsofzz 6y ago
From watching the presentation on Youtube ( https://youtu.be/sQCgtCoZyFQ ), it seems NiFi is geared towards acquisition of data, gluing/batching/massaging the flow between systems and providing the necessary interfa
95.
by lsofzz 7y ago
> This time, AMD may have stepped up with a steel pipe. We'll see how well they can use it... :-))))
96.
by lsofzz 7y ago
Expanding on it further, what I mean is that our BT stack should be built from ground up with security in mind. We cannot fight every attack surface but we probably can get to all the low hanging ones that the crims can exploit. One day in
97.
by lsofzz 7y ago
> You can disable Bluetooth by default and enable it only when used. You are missing the point. Ever heard of secure by default?
98.
by lsofzz 7y ago
> Thousands do care. So here's what I mean: When you take the ratio of the thousands that do compared to the millions who don't, you get a number that's pretty close to zero (one tenth of a percent, back of envelope). Fa
99.
by lsofzz 7y ago
> And it certainly isn’t dead. Or to put it another way, it's alive and kicking ass :-)
100.
by lsofzz 7y ago
> If you define hacking as controlling your computer hardware at the lowest level, then hacking is dead because no-one wants to write device drivers. This is absurd. Dude, let me be clear - Just because you write Java all day long does
101.
by lsofzz 7y ago
> There was a term from the early 00's for malicious "hackers", which was crackers. Yes. > But if the media is unwilling to budge should we just make a new word? Not sure how that will pan out :-)
102.
by lsofzz 7y ago
> 1. I have no idea why "hacking" aka "going fast and breaking things" is so glorified while "building good reliable programs" aka "good programming" is not. The way I see it, `going fast and bre
103.
by lsofzz 7y ago
> OK: it's fairly trivial for someone like me to do this, and you don't even need "ML" to do it. It's just counting, binary trees and simple models. Would you be interested in PoC'ing it out for such a tri
104.
by lsofzz 7y ago
> I do not have direct ML experience at the moment. I’ve only run simpler regressions. I was making an educated guess as to the tech which may emerge, and it doesn’t seem far-fetched since it probably would not require language comprehe
105.
by lsofzz 7y ago
> Sherlocked :-) Hehe
106.
by lsofzz 7y ago
> Train it on content that you know was produced by someone, then unleash it on the rest of the internet to find content that they wrote anonymously. I apologies but that's disappointingly vague..
107.
by lsofzz 7y ago
> What next? A publicly available ML web crawler that analyzes speech and belief patterns, triangulates them with metadata, and returns someone’s identity with 99% confidence? Close but no cigar. But seriously, correct me If I am wrong
108.
by lsofzz 7y ago
> Which is basically TOR Last time I checked Tor's technical paper (probably been 10 or so years), it stated the fact that a relay? node in between can only decrypt the information required to route to next hop and not the actual p
109.
by lsofzz 7y ago
Yes. To add, any number of middle boxes during egress from the VPN provider can also sniff the SNI in TLS packet (SNI stands for Server Name Indication and stands on its own as a plain text traffic) before a TLS sessions is established (ass
110.
by lsofzz 7y ago
> Either way, yes, your data will also be wiretapped by your carrier themselves and sold on the open market [ ... ] Woah. Hold your bong son! ;) Any reference to documentation or any information of what you mean by `sold' on the ope
111.
by lsofzz 7y ago
> No need for EC2, you can use Digital Ocean or Hetzner Cloud (GDPR ftw) to cut the costs. Throwing GDPR and `ftw' in the same sentence. Hmm. No GDPR does not work that way hah. At least not in the global context. GDPR only applies
112.
by lsofzz 7y ago
> Have you entertained the possibility that the decision to de-mitigate was the result of considered risk and resource management modeling ? What do you mean by `resource management modeling` in this context? Do you mean `capacity planni
113.
by lsofzz 7y ago
Definitely a good refresher video. There is absolutely no doubt in my mind that its important to re-visit what we take for granted every single day and at the least be appreciative of all the amazing value open source software community bri
114.
by lsofzz 7y ago
Would the final revision include any chapters by Sasha Goldstein? I’d love to get his insights on it.
115.
by lsofzz 7y ago
Would love to see it on Safari books.
116.
by lsofzz 7y ago
Whenever I have boring cron-style or once off task that needs to be done, I bring out Apache Airflow cluster to schedule them for me. Nomad is another option but we haven't productionised it [edit]yet[/edit].
117.
by lsofzz 7y ago
Nope. They are alive, well and kicking arse on multiple fronts.
118.
by lsofzz 7y ago
Ha Ha! ;_;
119.
by lsofzz 8y ago
Nice work. Just read this :-)
120.
by lsofzz 8y ago
How is this different from seccomp?

More ›