TwoBit

> way to have an excuse to throw someone in jail

More like: "way to have another means to put a criminal in prison."

I don't understand what I'm looking at here.

Seems primarily like Cardi B's writer started it and Cardi B modified it.

At my last company, signing keys were physically stored in a safe with limited access. No network security breach could possibly get them.

I haven't read this study, but I read about this from other studies 20 years ago.

CyberDuck ten years ago was the only Mac FTP app that actually worked.

What was the cause of the false positive?

Chess has been big lately and I feel that as a game it's far more rewarding and scalable than Tetris. The mastery curve of chess is very long and doesn't ceiling like twitch games do.

Right. I wish somebody would do a proper technical analysis of this instead of all these current "well the super-res version looks good to me" reports.

Who has old 800x600 camera raw images lying around?

What's preventing someone from getting mutiple regular phones and accounts for them then?

It would be useful to understand the flow of an SMS from a source to a Google voice number. While you can't port a Google voice number, it seems like if you can intercept an SMS from a source before it gets to Google then this technique will work.

A useful strategy to help against this in any case is to use a different email address for every online service. Hackers generally can't initiate an account password reset if they don't know the account.

Also if you use a different phone number for account security than your public one then it's a lot harder for them to know what SMS to intercept. Security by obscurity sucks but in this world it may be your only practical choice.

How does it compare to the Ryzens?

In any case, x86/x64 is a terrible ISA and it really needs to go. Sad that it's still around and I'm surprised it can even run as fast as it does.

Hmm, Sky ECC says they weren't cracked but rather some users were tricked into using a faked version of it: https://finance.yahoo.com/news/sky-ecc-platform-remains-secu...

"A U.S. district court later ruled in support of Chevron's allegations that the report had been ghostwritten by Mr. Donziger and his associates and an environmental consulting firm hired by the plaintiffs in addition to participating in the bribing of the deciding judge."

Donziger looks like a crook according to your provided reference.

I don't know about those two scores, but the second paragraph was definitely simpler written.

Or maybe this Hemingway scoring is bunk.

I think the only real solution is operations that can't fail, like C++ string operations. Of course even those can fail, but do so with an exception, which IMO is easier to deal with from a security standpoint by aborting the process, which is the default behavior. And an exception is only going to occur under pathological conditions (typically out-of-memory) which really wouldn't be solvable with any practical solution.

But that's the problem with these announcements. They make one or two factual statements that seem positive but hide the downsides. A year or two from now and the downsides aren't overcome and at best they gain a small market niche.

We need to call on Home Depot etc. to stop selling these.

Was somebody following him filming it for TikTok?

If you live in a suburban area like I do, practically every day one of the neighbors has these running. And half the time it's just blowing it to the street to later land on someone else's property.

Well maybe because the cynicism is justified. Every week there's a new battery announcement and only rarely is it not hype.

----------------------------------------------------------------

Dear battery technology claimant,

Thank you for your submission of proposed new revolutionary battery technology. Your new technology claims to be superior to existing lithium-ion technology is is just around the corner from taking over the world. Unfortunately your technology will likely fail, because:

[ ] it is impractical to manufacture at scale.

[x] it will be too expensive for users.

[ ] it suffers from too few recharge cycles.

[ ] it is incapable of delivering current at sufficient levels.

[ ] it lacks thermal stability at low or high temperatures.

[x] it lacks the energy density to make it sufficiently portable.

[ ] it has too short of a lifetime.

[ ] its charge rate is too slow.

[ ] its materials are too toxic.

[ ] it is too likely to catch fire or explode.

[ ] it is too minimal of a step forward for anybody to care.

[ ] this was already done 20 years ago and didn't work then.

[x] by this time it ships li-ion advances will match it.

[ ] your claims are lies.

----------------------------------------------------------------

Well memcpy_s is a Microsoft initiative and so Unix devs will reject it on principle.

Was there ever anybody a fan of C style strings?

Maybe I misremember, but I think long ago people made arguments that C strings were superior because of how simple they were. Such was the thinking 30 years ago.

The decision to use 0-terminated strings in C may be the single worst decision in programming language history, at least from a security standpoint.

OK but it was probably social engineering.

Well it's only fair.

> is this true for most people?

No, only poor engineers.