rphlx

6 ms·

1.
by rphlx 7y ago
> people vote The "high taxation is not slavery, because you voted" argument lost all merit once net recipients of the welfare state became able to out-vote its net contributors - which has already happened in the US. > mak
2.
by rphlx 7y ago
Slavery was not fully eliminated in the US; it was just fractionalized, and the terms - which groups are enslaved, which groups are entitled to their output, and how much of it, etc - were obviously heavily modified. For instance you are ab
3.
by rphlx 7y ago
> It's not legal for Americans to completely avoid taxes simply by operating in a jurisdiction with different tax laws. This is not correct, and pretty much all of the US Elite, above a certain wealth level, have some offshore struc
4.
by rphlx 7y ago
If the untoward event is solely in USD, perhaps, but not if it's in crypto. Exit scams, hacks, rogue employees, etc, could still hit a US exchanges' crypto holdings and the government probably cannot or will not compell a roll bac
5.
by rphlx 7y ago
I believe they valued at time-of-transaction. e.g. if you had no other transactions except for a $100 buy in 2013 that you immediately withdrew to personal cold storage, and then that appreciated to $20k+ today, you shouldn't have bee
6.
by rphlx 7y ago
It doesn't necessarily tax everything but the IRS does seek God-level knowledge/insight into every transaction - and then it just exempts certain things based on size or other factors. If you are deducting charitable contributions
7.
by rphlx 7y ago
AFAICT the risk/reward for this change (and others along the same line) is poor, because like it or not, as a factual matter, there are many tens or hundreds of millions of notionally "open source" devices that will never get
8.
by rphlx 7y ago
This is not a complete, imperfect, optimal, uncontroversial or always-trivial-to-implement list, but some common ways to increase attacker costs are to: 0. Put a CAPTCHA on expensive/abused functionality. 1. Rate-limit costly transacti
9.
by rphlx 7y ago
The solution there is to have the app use line buffering rather than a "raw" term mode that exposes inter-char timing on the network. How widely that's followed in practice, I do not know, but one would certainly hope that su
10.
by rphlx 7y ago
If you really cannot use keys, then one mitigation is to use copy/paste to paste the entire password instead of typing it one character at a time. That can open some copy/paste vulnerabilities e.g. in X11 where any app can then re
11.
by rphlx 7y ago
Right - I believe the whitepaper says it'll be a mix of bank deposits in various currencies plus short-term government securities. Still my point stands: you can have lower systemic risk in a serious crisis by holding t-bills or whatev
12.
by rphlx 7y ago
In the US the evidence for a central bank PhD Politburo "preventing" or even "minimizing" financial disasters is dubious at best. Financial panics in the 19th century were generally shorter, less frequent, and probably e
13.
by rphlx 7y ago
This seems to be a false either-or because FB is probably not holding 100% reserves as actual paper cash in a giant Scrooge McDuck vault underneath their HQ. It's holding them at a bank, so that it can get the interest payments. Thus,
14.
by rphlx 7y ago
That may be the protocol at launch but the protocol can always be changed/hardforked, including (as an extreme example) to just centralize the system into VISA/MC style db at FB after achieving wide adoption. AFAICT power ultimate
15.
by rphlx 7y ago
Though not as bad as Win9x it definitely had some frag-of-death/ping-of-death vulns around 1997/98. teardrop et al.
16.
by rphlx 7y ago
When was the last time Linux had a similar, reliably-remotely-exploitable kernel panic in the TCP/IPv4 stack? Pre-2000?
17.
by rphlx 7y ago
They use a different TCP/IP stack which implemented SACK without introducing this bug. It's a Linux-specific implementation defect, not an intrinsic problem with the TCP SACK wire protocol or spec.
18.
by rphlx 7y ago
> that's just how the internet works Well, the Internet does not strictly require all traffic between two parties to go through a MegaCo Cloud. Location privacy in this system would appear to be greatly enhanced (vs Apple-as-an-adve
19.
by rphlx 7y ago
The Wired article is not detailed enough to definitively poo-poo this scheme, but I am pretty skeptical about some of the claims, given a) how easy it is to map an IP to a coarse location, b) how easy it is to map many IPs to a small number
20.
by rphlx 7y ago
That's a good idea, though I would still prefer to understand their detailed CPU% abuse criteria pre-deployment rather than via just-try-it-and-see-what-happens. Secret rules are a problem, no matter if the enforcement is automated, ma
21.
by rphlx 7y ago
> They don’t care if you use 100% of CPU They clearly do, at least for some subset of customers meeting various quasi-secret criteria. > they don’t want you to do is use 100% CPU and not pay the bill. The account here was fully paid u
22.
by rphlx 7y ago
Indeed, but AFAICT there are apparently still some opaque, undefined CPU% limits for people paying with CC instead of free credits. They also mentioned elsewhere that customers paying via PO are exempt from the automated miner murderer, but
23.
by rphlx 7y ago
I don't think there is a single cloud provider that accepts unlimited liability and wholly compensates customers for lost data, lost sales during downtime that was the provider's fault, etc. Their liability is generally strictly l
24.
by rphlx 7y ago
Their apparent conclusion that high CPU% for a few hours or half day or whatever means "cryptocurrency miner - ban ASAP!" is naive and flawed. Compute offload is an ancient and fairly common use case for the public cloud; my VPS (
25.
by rphlx 8y ago
FWIW deb9 installs both 3.5 and 2.7 by default.
26.
by rphlx 8y ago
FWIW Win10 was affected by that same horrific SMB RCE vuln. So the implied argument that 10 has been immune or even much less vulnerable to ransomware over the past year or two is on shaky ground, though I agree it probably will start to ha
27.
by rphlx 8y ago
These days it would probably make more sense to just require a small cryptocurrency payment in place of hashcash. There are some obvious adoption and scalability issues with that but it may be workable as a prioritization mechanism.
28.
by rphlx 8y ago
For some further, semi-amusing support for the title's assertion, save all of your work, close important programs, and then run 'sudo systemctl --dry-run reboot'
29.
by rphlx 8y ago
I reject this premise that every CoC must "promote inclusion" i.e. be approved in full by some social marxist Politburo notionally intended to protect everyone's "feelings" by expunging and banning everything that m
30.
by rphlx 8y ago
I have to quibble with that a bit. The US regularly overflew the USSR and China through at least the mid 70s, meaning our best aircraft were in a very real sense fighting their best air defense systems 20 years+ after the Korean war ended.

More ›