awaythrow999

Right. More accurate predictions for meta-data based killings which as championed by US in their war on terror

Absolutely can be both. And often they make it clear: like cappello army does. But then there are the more shady ones where it's less transparent

Why would thet be a conspiracy theory. The public facing guy who is behind Warfronts has 4 other channels that peddle content unrelated to natsec/warfare. If you follow "cappy army" and the drama he went through at "task and purpose" his former employer it becomes pretty clear that there are entire media companies behind what looks like "a single hobbyist content creator expat living in Prague" ...

Agree on the only solution being reducing dependencies.

Even more weird in the EU where things like Cyber Resilience Act mandate patching publicly known vulnerabilities. Cool, so let's just stay up2date? Supply-chain vuln goes Brrrrrr

Aren't many channels funded by the companies they pretend to get sponsorship from? If you look at the OSINT and Natsec adjacent topics there are many who have had the same sponsor for years: ground.news ... many pretend that they are indie content creators when they are just the marketing / growth hacking arm of the sponsor.

Examples: Caspian report, Warfronts, Geopolitics decoded, ...

Many of them (the content creator) are even located in the same city.

Uninstalled my AirBNB because of 2 resolution issues with hosts that were not in my favor despite me providing all documentation and (damning) evidence.

The reason I should have uninstalled it much longer is because it's toxic for rent prices. I now pay more for hotels and sleep well.

I got rid of Uber for the same reason.

We do have tools in every step of the sdlc so we can find issues as early as possible. Anything that is exploitable and left unmatched is a compliance violation so we take it very seriously. That said, exploitability is very (expensive) hard to proof, so in practice we try to mitigate via upgrading instead of long pointless discussions about risk. The second thing this forces us, is to look at complexity and tech-debt in a new light.

This link is now on Google News lol.

The AABill hits hard against Australia being a useful jurisdiction alternative to the US. Heck this law has made it impossible to hire any Australian National into security critical positions outside AUS. And the same law made services by fastmail and Atlassian suspect.

Is he a realtor politician? Sorry I'm not familiar with him. Genuinely interested if these points are valid though because it would be insane scary.

Because extending trust usually works retrospectively?

Or

which battle tested applications exist today using crypto+, that illustrate it's a better choice than what sofar held up under libsodium (which is a lot)?

Defining minimum support period is already required by law in UK and will also be mandatory in EU as of next year.

Checks out for Europe provided you're not an immigrant. Being blond also helps. I never get flagged for traffic inspections or in any way harrased by cops. But I constantly see people who aren't my skin color, or simply poor, get treated rough. True for France, Germany, Austria, Switzerland, Spain and based on personal experience. ACAB.

Python 70x worse than C

Immediately gets slapped over the head by the requirement: "preventing downgrade to a vulnerable version" (which would be just a matter of enough time passing)

On 32bit it remains -fomit-frame-pointer for me. On native compiles -march=native

Interesting but

>> My guess is that nobody is going to notice this unless they are specifically looking for this technique.

But having two identical PIDs is a pretty weak cloak. Even more so when reducing terminal clutter e.g. run "ps | grep procname" ... anyone not completely asleep is bound to notice it.

YN hug of death?

I wonder if there is a chance for HN to contribute some aid for sites like this, archive.org, and others whenever their links are on the frontpage.

Had to cripple the title when submitting. Apologies

Creat awareness across all your social media the same way you did here.

Why can't you ditch IG? How does it differ in its power to addict users compared to the other garbage Meta peddles?

Crazy to consider we already forgot about other big ideas that ended in a pandemic because gain of function research conducted in a lab. And now companies like Montesanto want to push more such dangerous ideas by arguing it is to combat hunger.

Having more humans on the planet is not the solution to climate change. And science isn't going to save our ass from it.

Sustainable agriculture is not about monoculture farming GMO crops while the rest of the environment gets obliterated by the practice.

Utterly stupid.

I remember an article in the Economist between 2000-2010 claiming this was the cause of French drivers acting more reckless and aggressive in traffic compared to other countries. Not a subscriber anymore so sadly can't find the link in their archive.

It's a power grab in tge same sense as when people got outraged that everything on HTTP suddenly had to have PKI and x509 certificates. While x509 is shit, ASN1 an outdated mess, nobody would today argue that TLS is bad.

Threat models matter. If you're defending against nation state actors in a military/cyber context it is an essential part of the overall defense strategy. Ignoring BGP on the grounds that "it was always insecure" is then just weird, if not reckless.

The SCION project (Iirc from ZTH) solved all of this and also has been extensively tried in the field.

This is the equivalent of telling a depressed person to eat healthier and exercise more.

Upvoted even I vehemently disagree with the analysis. It is because every reason cited in the review for why it's a "must read" is actually a reason for not reading it and instead reading Jacques Ellul's "La Technique" (in English "The Technological Society").

The damage these "system thinkers" inflict on humanity and the planet can never be undone.

https://archive.org/details/JacquesEllulTheTechnologicalSoci...

Not just related. It __is__ the essay. This is like rewriting No Silver Bullet without giving credit to Brooks.

>> understand the code at a level sufficient to make accurate annotations, which isn't that much easier. And you're not getting as much safety bang for your buck for the effort as you would in a rewrite in

But rewriting assumes I learn a new language on top of rewriting.

Frame pointers are still a no-go on 32bit so anything that is IoT today.

The reason we removed them was not a myth but comes from the pre-64 bit days. Not that long ago actually.

Even today if you want to repurpose older 64 bit systems with a new life then this of optimization still makes sense.

Ideally it should be the default also for security critical systems because not everything needs to be optimized for "observability"