vengefulduck

5 ms·

1.
by vengefulduck 3mo ago
And it will spend 1 million tokens finding the most memory efficient program: int main(){}
2.
by vengefulduck 2y ago
I think the problem with this argument is the assumption that nature is inherently good. Nature is cruel and uncaring. Moving beyond it is a good thing imo. We’re just lucky that as a species by the roll of the dice we were given the power
3.
by vengefulduck 2y ago
Have you used VLC on MacOS tho? Full screen video looks very slick and is tough to differentiate from native quicktime other than having support for more codecs and features. The non full screen UI is a little more crusty but still looks be
4.
by vengefulduck 2y ago
Browsers enforce that certificates are signed by two independent CT logs. The public keys of which is shipped by the browser. So a MITM would need to compromise a trusted CA and two CT logs to be able to pull off an attack undetected. Maybe
5.
by vengefulduck 2y ago
Assuming that living with your parents is a safe option which for many, especially LGBT people it isn’t.
6.
by vengefulduck 2y ago
Of course, this is the only explanation. No one can just make stuff up on the internet. That’s impossible.
7.
by vengefulduck 2y ago
Browsers are just mini OSs at this point. It’s probably best just to accept it. Honestly in some respects (security, isolation, resource management) they do a better job than the operating system they run on top of.
8.
by vengefulduck 3y ago
Even as a user I don’t there’s a good reason to love cert pinning. If you’re going up against adversaries that can compromise web pki they also probably have some other exploits up their sleeve to pwn you. Cert pinning pretty much serves to
9.
by vengefulduck 3y ago
Write access to .bashrc is plenty to very sneakily get sudo access tho. alias sudo='./.my-evil-sudo-binary' And wait till the next time the user authenticates, they wont see anything amiss and you just silently delete
10.
by vengefulduck 3y ago
Installable web apps would give you a workaround for that wouldn’t it?
11.
by vengefulduck 4y ago
Hahahahaha. Yeah, sure cryptocurrency never comes crashing down. It certainly would never lose 60% of its value in 6 months. That would never happen. What a perfect store of value. /s
12.
by vengefulduck 4y ago
The math used in AES (Rijndael) utilize operations in GF(2^8) tho, so you're doing operations using Galois fields whether your utilizing GCM or CBC. I don't really see how adding the GCM mode utilizing GF(2^128) on top is signific
13.
by vengefulduck 4y ago
The fact that any Xorg client can become a key logger without any user input or authentication is a pretty big security hole imo. By design Xorg has no isolation between clients so they can all read each others input, control others windows
14.
by vengefulduck 4y ago
Even when applying to companies that are LGBTQ friendly? I sometimes self identify on applications if the company has a good reputation with that kind of thing because I’d expect It would give me some diversity points. But maybe that’s not
15.
by vengefulduck 4y ago
I submitted this in light of the recent iCloud end to end encryption announcement which seems to indicate they're using Convergent Encryption here: https://support.apple.com/en-ca/guide/security/sec973254
16.
Convergent Encryption and Why No One Uses It (2020)(smarx.com)
11 points by vengefulduck 4y ago|3 comments
17.
by vengefulduck 4y ago
Looking into the details it seems like they're using Convergent Encryption [1][2] in order to enable deduplication in iCloud drive and photos. Which would imply it is possible for an attacker to determine if your account is storing a f
18.
by vengefulduck 4y ago
Your kidding right? Anything IO bound like an server isn’t going to be remotely affected by the speed of underlying language. There’s almost no compute required for a mastodon server just take HTTP requests and store and retrieve data from
19.
by vengefulduck 4y ago
I’m not so sure that’s true reading through the privacy notice when enabling SMS filtering it reads “You can install and use third-party SMS filters. If you do, the filter provider can access all of the text and content included in incomin
20.
by vengefulduck 4y ago
I don’t think you need to be from the west coast to understand people saying SIKE. It’s a pretty common phrase across the US. I’m from Colorado and I heard that a fair amount growing up. Agree on the appropriate name though it was my first
21.
by vengefulduck 4y ago
They can usually still see Domain names. DNS traffic is normally sent in the clear and in the event it’s not the SNI field in TLS (https) is unencrypted. So your ISP can know which domains you visit but not the individual sites on those dom
22.
by vengefulduck 4y ago
To me being FIPS compliment would be a good definition of something being “Military Grade” because that would be the actual standards the US military would use. However, that still doesn’t mean it has the best security because really good a
23.
by vengefulduck 5y ago
No Flops are floating point operations. GPUs are better at them because they run floating point operations in parallel on thousands of optimized cores. While python will run a floating point operation serially on (likely) a single general p
24.
by vengefulduck 5y ago
See paper. All the “misinformation” ever spread before the internet was written on paper. Is paper evil?
25.
by vengefulduck 5y ago
I highly doubt it. Dual EC DRBG basically works by encrypting your seed value with a NSA provided public key. It’s kinda amazing how blatant the back door is.
26.
by vengefulduck 5y ago
Ever heard of bitcoin?
27.
by vengefulduck 5y ago
You can do that too. https://support.google.com/youtube/answer/7491256?hl=en
28.
by vengefulduck 5y ago
DNS servers can be used in an DOS amplification attack by sending requests with spoofed ip addresses. So if you don’t take measures to prevent this it’s likely your server will be used in DOS attacks. https://us-cert.cisa.gov&#x2
29.
by vengefulduck 5y ago
They most likely meant a web extension (or “add on” as Firefox refers to it) not a NPAPI plugin which was what was removed in January.
30.
by vengefulduck 5y ago
I think you misunderstood, the GP is commenting on the Pfizer CEO saying that boosters will be required in 6 months which this paper seems to indicate won't be necessary.

More ›