busrf

How is “martial tradition” related to protest effectiveness? You know there’s more to building long lived protest movements than street fighting, right? The doc itself lists many forms of effective action that had nothing to do with “martial tradition”.

Just use “they” without any of that nonsense. Show some basic respect to the hacker who popped root shells inside Cloudflare and Tesla networks, without leveraging it to enrich themselves in any way.

I just looked it up and the history is that they did it so that users could access the site using fediverse clients, because their own clients were getting pulled from app stores.

https://www.theverge.com/2019/7/12/20691957/mastodon-decentr...

ofc there is that whole discussion about whether open sourcing actually affects application security, having your security model assume that attackers already have access to the source code, etc. Not to mention it looks like they did make quite extensive modifications on top of the mastodon code. Some of the code that people have discovered lying around in the gab codebase is really embarrassing.

Look at this very secure code written by their CTO: https://archive.vn/oxbck

Unfortunately the CEO of the large streaming company based in Los Gatos has strongly negative feelings about remote work even after COVID: https://www.wsj.com/articles/netflixs-reed-hastings-deems-re...

Frequency and severity of those symptoms are considered for the diagnosis. Everyone shows symptoms of depression sometimes; not everyone has depression.

This is interesting, thanks for posting it.

On the one hand, there is nothing on a technical level that Signal can do beyond what they’ve already done (linked in the twitter thread, set a flag that the installed keyboard may or may not respect). Anything beyond this is venturing into providing a general computer security 101 course and/or telling you how your mobile OS permissions work and/or region-specific opsec advice. I’m not sure they’re equipped to do that or if they are even the right people to do that. They are a small team and they most definitely do not have somebody embedded in activism of any kind in the sinosphere, which I think is what it would take for them to actually responsibly give region specific opsec advice.

On the other hand, I think it may be quite reasonable for them to say, very clearly, “use your system IME to input text”. It’s a very simple guideline with reasoning that I think can be understood easily by most people. They have a privacy/security section in the FAQ on their site; something like this could go there.

But of course if they did that, they would have to keep managing expectations around how much to delve into the security model of every platform they run on, and how many resources they can reasonably dedicate to usage scenario support. Their mission and product and user requirements are really unique; I’d love to be a fly on the wall of a signal product management meeting lol

I’m basic and use my iOS system IME to text in chinese, but also I’m a basic overseas chinese. Maybe I’ll have to survey my friends and family for what keyboard they use...

We already have petroleum Dutch disease, switching to another Dutch disease would be very welcome at this point (:

The saga of bean dad is here:

https://mobile.twitter.com/ManiacalV/status/1345870405085573...

The bean dad attention led people to discover these additional tweets which are much worse than his questionable parenting judgement in that particular thread, and that’s what drove people to stop associating with him:

https://www.thewrap.com/bean-dad-deletes-twitter-account-ant...

TBH when I first saw that he got chased off twitter for the other tweets I did think it was going to be some cringe “edgy” humour attempt à la James Gunn. But that “white homeland” and “mud people” tweet is overt and not acceptable racism.

Have you read this very extensive blog post on how the SGX enclave is used for Signal’s contact discovery? https://signal.org/blog/private-contact-discovery/

I am mainlander Chinese diaspora and this is such a reductionist portrait of the variety of opinions held by emigrants from China about the CCP, which can differ dramatically depending on when you emigrated, what age you are, what part of the country you are from, whether you are religious, your own specific family history, and who is currently in power in China.

There is also quite a bit of dissonance and public vs. private attitudes that you have to sort through. The mainstream and tolerated view in mainland china is that the cultural revolution was a huge mistake - there are way too many families that were fucked up by it - but Mao was still a great guy.

This is the blog associated with the channel: http://codeofhacking.blogspot.com/

And this is the Facebook page: https://www.facebook.com/technux0/

On both of those pages, you can see the titles of the videos that were posted. On the Facebook page, you can still see the video thumbnails.

I wonder if YouTube removed his channel for the cybersecurity videos, or if they removed his channel for posting walkthrough videos on how to pirate Burp Suite Pro ¯\_(ツ)_/¯

Some of the problem here is that people have many different use cases for Notion: personal note taking, project management, collaborative text editor, and company knowledge base. Notion markets itself as a general tool that can fulfill each of those use cases. As a result it is hard for them to come up with UX that fits everyone.

Some of the things people are saying here that they can’t stand about Notion are some of the things that I like the most about it, and some of the improvements people are suggesting here are things that would make me abandon Notion if they changed it to be in line with what they suggest, and I think a lot of that is from difference in expected use case (I use it as a personal knowledge base)

It is definitely a weakness of their product.

> Typing slash ( / ), for any reason apparently, and in any context, pops up the Basic Blocks selection window. If you type, for example, "10 / 2 = 5", or perhaps "a/b testing", or any other very common valid use of the slash symbol, you are left with that stupid popup on the screen. You have to hit ESC to close it. Pity the fool who has a touchbar Mac. And if for some reason you wanted to end your line with a slash, and you hit return after typing that /, the popup eats the slash and puts you in a new block below.

You can just keep typing and the menu will close. The vast majority of the time, it doesn't actually interrupt the flow of typing in content. This happens even if what you are typing matches with a menu item. As you said, you have to press enter to actually invoke one of the actions in the menu.

Using a single key to invoke a menu and then having successive keystrokes search through that menu as well as enter the text in the editor at the same time is a UI choice I actually vastly prefer over having say dedicated keyboard shortcuts for each of those menu items, or having to click a button to open the menu. It's similar to having leader-key-driven menu selection in Vim or Spacemacs (but of course different in that the editor is modal). It is a menu discoverability and ease-of-use tradeoff they have to make.

Yeah the original press release from mail.ru [1] says "Daegu Limited (member of Parity.com Group)". It is not at all clear that this is a Korean company.

[1]: https://corp.mail.ru/en/press/releases/10761/

I’ve been using this along with the other extensions bundled with VSpaceCode and it has been an awesome experience (and has brought me back to VS Code from Spacemacs). Just want to say thanks for writing this extension and for bringing the magic of Magit to more people.

I didn’t know about the forge features, will check those out.

There’s a pretty good community associated with 1bitsquared, a vendor for a whole bunch of embedded/fpga hardware tools: https://1bitsquared.com/pages/community

With the pace that Cutter developers have been delivering improvements and with r2ghidra developers being onboard with this fork, I think Rizin is the project to watch going forward.

The guy who did it is a lawyer whose case hadn’t even come before this judge yet.

I was honestly really surprised that this was the “will not test” list rather than the “must test” list!

I actually think the last version, using a single lambda with constexpr ifs inside, looks completely reasonable.

But yeah the first time I had to use boost::variant (which is what the version in the standard library is based on) I thought the visitor was too much boilerplate. Things have gotten better since then, but many people are not even on C++17 yet ):

You are paying someone to work 18 hours a day, every day. They would like to not work 18 hours a day anymore, and stop working at a mere 12 hours; they are even willing to accept less pay. You fire them, because you clearly told them not to do that. They organize with other workers and demand the right for a 12 hour day, with this right enshrined in law and with penalties for employers who do not comply. You say “they are free to work for someone else or quit if they don’t like it!”

Fast forward many decades later. This is a right you and I both enjoy. (This is also why we both have time to shitpost on HN.) If there was a serious proposal to take it away, you and I would probably be standing side by side on the street demanding our rights back.

It’s easy to talk a big game about human rights when your rights aren’t on the line.

Let us pretend together that you are the VP of security at Google. I’d suggest you take a stroll through Matthew’s twitter page for the past year or so and mark down everything you find seriously concerning and in your view making him incapable of performing his job. You might find quite a bit, and you might think “I can’t believe the real VP of security at Google hasn’t fired him yet!”

And yet, somehow, he’s not enough of an “insider threat” to be dismissed.

Matthew Garrett, a senior security researcher at Google, is very critical about Google on his Twitter all the time. As he has pointed out, he's still very employed.

https://twitter.com/mjg59/status/1334382463498391557

Neither of us are on her team at Google. (I'm certainly not and I doubt you are.) We have no idea how easy it is to work with her.

Certainly if I were working with an AI ethics researcher I would expect them to ask difficult and uncomfortable questions. I think that's part of the job description.

Here's a tweet with more details about her conditions and how that ties in to her resignation:

https://twitter.com/timnitGebru/status/1334341991795142667

> Apparently my manager’s manager sent an email my direct reports saying she accepted my resignation. I hadn’t resigned—I had asked for simple conditions first and said I would respond when I’m back from vacation. But I guess she decided for me :) that’s the lawyer speak.

> I said here are the conditions. If you can meet them great I’ll take my name off this paper, if not then I can work on a last date. Then she sent an email to my direct reports saying she has accepted my resignation. So that is google for you folks. You saw it happen right here.

In the email she posted, it seems that they "accelerated the timeline" for her termination because "certain aspects of the email you sent last night to non-management employees in the brain group reflect behavior that is inconsistent with the expectations of a Google manager", i.e. a separate email from her conditions email.

It seems like she was ready to leave if they didn't meet her conditions, and that this would have been a reasonable outcome for her. However, it bothers me that they wouldn't even come to the table about the non-condition email.

Like OK, "inconsistent with the expectations of a Google manager". That's some weak shit. It had better be something pretty fucking severe for them to fire her immediately and not, I don't know, do some planning around transitioning her projects? Work out what to do with the team she herself managed? Be given the grace of leaving on a good note that an engineer of her caliber deserves?

She's a leader of their ethical AI group. What happens to that group and all of their research and direction now? Who do they hire to replace her? This isn't the same level of impact as firing a cog in the wheel IC who gets too uppity with organizing.

This stinks like a convenient excuse to shoo an AI ethics researcher asking some inconvenient questions out the door.

Hmm, that actually seems to be an older version of the course? The page you posted is for the Winter 2018 semester, the page the parent posted is for Winter 2020.

https://pwn.college/ (CSE466 at Arizona State University) is a great offensive computer security course. The lecture videos, slides, labs and lab infrastructure from this semester are all open to the public.

I’d bet she was probably thinking about resistor values while writing the title! You would always say 1.6k resistor and not 1600kohm resistor

If you get an ACM membership, which costs $99/yr, you get access to Safari as a membership benefit.

Thank you for this comment.

One thing that I have noticed myself and some other engineers I know being susceptible to is the desire to view the world as systematic, ordered, certain, and understandable. It’s a desire to find the root cause to everything, to understand the reason behind everything, and to package that up into a chain of causality that fits within my mind.

The positive side of this is that many of these attributes are needed to be a good engineer. The negative side is, at least for me, trouble dealing with chaos or ambiguity in the world or anything that has an unclear explanation.

Maybe this contributes to being more susceptible to conspiracy thinking. I am not sure; that’s a question for social scientists to uncover.