tyler_larson

5 ms·

1.
by tyler_larson 7y ago
reCAPTCHA is a rate-limiting measure. Google handles all the heavy-lifting and attacker protection for you, and the slow fade you see in the video is that rate-limiting in action. But if you get a clean CAPTCHA result back from them, then
2.
by tyler_larson 7y ago
Congratulations, you played yourself. It's not Firefox that's the problem; reCAPTCHA works just fine on Firefox. It's all those anti-tracking measures you installed and enabled -- they work by making your browser indistinguis
3.
by tyler_larson 8y ago
>> This may sound melodramatic... Yeah. A bit. Thing is, Blink is not Chromium, Chromium is not Chrome, neither of them is Google, and BSD-3-clause is a pretty damn solid bulwark against the monopolization of the "control of fund
4.
by tyler_larson 8y ago
I dug into the details earlier this year, and it turned out at the time that Microsoft counts some undisclosed but significant percentage of revenue from sales of Office 365 in their "Commercial Cloud" category, even if you buy it
5.
by tyler_larson 8y ago
The idea of SMTPing email out from your home ISP turned out to be problematic once spam became a business model. Gmail's not the only place that categorically won't trust it. You need a mail server. You can run it yourself if you&
6.
by tyler_larson 8y ago
Gmail's primary UI is a web browser. How... how do you think that _actually_ might work?
7.
by tyler_larson 8y ago
The thing is, in this case we HAVE a solid pictures of every alternative. There's no speculation necessary. We have the "before" and "after" story to point to, and we even have the "alternate universe" sto
8.
by tyler_larson 8y ago
No, it's functionally equivalent to uninstalling; the only difference is that since the app was installed on a read-only filesystem, the apk can't be deleted. But it's gone as far as the OS cares; it can't be seen or use
9.
by tyler_larson 8y ago
I guess it depends on how "experience" is defined. I had 8 years of "experience" programming before my first full-time paid job. I am somewhat entertained every time a see jobs requiring 10+ years of experience with Go o
10.
by tyler_larson 9y ago
Sponsored by Morton Salt? I knew it was too good to be true. It seems like every free arts-promoting venture these days is just another opportunity for _Big Salinity_ to push their salty agenda on us! Follow the money!
11.
by tyler_larson 9y ago
This is perfect. Now I can translate all my Pascal into Haskell.
12.
by tyler_larson 9y ago
Trading on research, no. But attempting to artificially manipulate the market while doing so is effectively "pump-and-dump" but short instead of long. A lot comes down to timing and exactly what the communication says. Not a sure-
13.
by tyler_larson 9y ago
This first of all: never underestimate the nearsightedness and self-importance of a university governance board.
14.
by tyler_larson 9y ago
http://wikipedia.org/wiki/Whataboutism
15.
by tyler_larson 9y ago
The problem here isn't so much that Amazon is going to hurt Google. Google will survive. But we only hear about this story because Google is who Amazon is attacking (today). The bigger problem is that Amazon has set themselves up as th
16.
by tyler_larson 9y ago
It sounds like the report glossed over a rather important bit of ux: If, when logging in, you see a big modal dialog asking if you want to grant webusb access to the site, then DONT select your yubikey out of the list of connected USB devic
17.
by tyler_larson 9y ago
> For instance HTTP 2.0 does not require TLS, but none of the browsers support plain text HTTP 2.0. (So the browsers are ignoring the standard) H2 requires TLS for practical reasons; without it, poorly-written transparent proxies mangle
18.
by tyler_larson 9y ago
You misunderstand what CAs are. Or, indeed, what their certificates imply. CAs don't provide permission, they vouch for an identity. Saying that CAs give you permission to communicate is like saying notaries give you permission to sign
19.
by tyler_larson 9y ago
So then it's akamai or limelight, then. Still not a threat. Open standard, opt-in free cdn, independent compatible alternatives; this does not sound like a hostile takeover of your freedom.
20.
by tyler_larson 9y ago
A VPN tunnel in the abstract provides the benefits you mentioned, but a VPN service is a slightly different beast. It doesn't solve the problem with your untrusted ISP, it just gives you effectively a different untrusted ISP. Imagine
21.
by tyler_larson 9y ago
The GDPR was specifically sold as limiting the things that well-known US tech companies (Facebook, Google, Twitter, etc.) can do with respect to EU citizens. The sad irony is that only well-resourced tech companies with a small army of lawy
22.
by tyler_larson 9y ago
Encrypt all person-specific data with the a key unique to that person, and if the person requests deletion, delete the key. This effectively deletes all backups.
23.
by tyler_larson 9y ago
Can it safely autorotate to the ground in the case of a motor failure?
24.
by tyler_larson 9y ago
I have adblock on my primary chrome profile, but occasionally browse using a profile where it is disabled because [reasons]. My experience has been generally pleasant if you discount the low-quality ads that would be blocked under this new
25.
by tyler_larson 9y ago
The GKE reference is a lot more relevant than you think, it's just a bit deeper below the surface. Google's relationship with k8s and GKE and in particular their motivation for creating an open-source orchestration service is well
26.
by tyler_larson 9y ago
Seriously? What are you talking about? Have you ever used online advertising before? The fact that you can show it, the fact that you can point directly from any specific ad campaign to the exact set of results it generated, is literally
27.
by tyler_larson 9y ago
Presumably you mean they're to low? Don't forget that land and construction prices have continued to increase by a fair amount in the past two years, so expect to pay somewhere between 10% and 20% more, depending on the area. Also
28.
by tyler_larson 9y ago
The answer to both the byod and permissions questions is the "tiered" device trust part from the article. You, the policy-maker decide how certain you are that a device hasn't been pwned given its provenance and user access s
29.
by tyler_larson 9y ago
Most companies need to be able to answer the question, "is this client one of ours," when protecting sensitive resources. Most companies will instead answer the question, "is the client on our network," and pretend that
30.
by tyler_larson 9y ago
So... like this? https://www.theverge.com/2017/8/9/16117850/deepmind-blizzard...

More ›