goodplay

As morbid as it may be, I wonder if that system can tell the difference between a lamb and a human of comparable size. The system might still able to identify (or misidentify) all targeted joints.

I second your proposal.

While I never post a comment on an article before reading it, I almost always read the comments before reading the article to avoid click baits. An brief one-line summary that serves the same role as an abstract would eliminate the need to read the comments first.

It might even help eliminate clickbaity titles in technical articles altogether.

You're saying that because normal consumers wont be helped by a "technical" list on github/gitlab, we shouldn't bother?

What about "technical" users?

These sites are actively participating in harming their users with their negligence. Users should have the ability to know which site is safe and which isn't.

I also believe that a something better than the status quo is possible. Perhaps render the URL correctly then display the obfuscated URL beside it in between parentheses.

International domain names will never be used if browser and website support remains as horrible as it currently is.

Tinfoil. Lots and lots of tinfoil.

Conductive meshes work as well provided that the holes are small enough.

Maybe it was wishful thinking on my part, but there was a time when I hoped that svg would be to vector graphics what png is raster images. With svg continuing to gain complexity, all that hope is gone.

At this rate, it'll become another html spec.

I personally found it too informal; I found the numerous non-technical remarks about how "boring" TCP off putting, tbh.

That said, I understand that the author added these in an attempt to make the article more enjoyable. I also appreciate the fact that some readers will indeed find these additions enjoyable. To each his own.

Morality does not make sense in the absence of common principles. I personally consider IP to be morally deplorable because it encourages rent-seeking; companies can stop innovating and use law to thwart competitors.

I bet the lack of IP is what will give china and other countries the edge in the long run.

Not looking for a debate: Why can't you use it everywhere you could write or compile Go code?

Mine does. His bowl gets refilled whenever it's empty. He is not fat. He is castrated.

If you can, could you elaborate more on python's stdlib holding it back? I think batteries-included experience is one of the reasons why so many people (including myself) use python.

It's also one of the features I sorely miss when using Rust. Luckily, Rust's stdlib is starting to tend towards being more practical with recent additions like system time.

Capitalism and Free Market :)

Lol.

No government would buy unreliable weapons.

neither does a key logger.

I tend to call software that tries to trick users into doing things they explicitly do not want to do malware, but that's just me.

That doesn't mean we shouldn't mitigate MITM. Using either gpg or tls without the other makes the security of the system weaker than it needs to be. Gpg key authenticity can't be practically verified by end users.

I remain unconvinced.

> alarmist

How so?

The author is voicing criticism that a lot of people (including myself) have with regards to the current state of software distribution security.

Furthermore, his survey of the top distributions is interesting for people who take their security seriously.

Canonical in particular makes it very difficult to download images over HTTPS. For Ubuntu 16.04, I spent a relatively large amount of time trying to figure out the best way to download this image over HTTPS: After going through multiple mirrors, I eventually found a reputable mirror that offered secure downloads.

Seeing that there is no way for me to verify the authenticity of the signing keys (short of visiting canonical in person), every bit of security helps.

Poe's law in full effect.

If you're serious: Why not make use of existing infrastructure (current courts, laws, etc) rather than reimplementing all that again on top of ethereum? Also, what prevents this new layer from becoming as corrupt and bureaucratic as the one we currently have in place?

I wasn't aware of Sandcats.io. Thank you for mentioning it.

While it doesn't address all issues, it does go a long way towards mitigating them. I must also take this opportunity to commend you guys on how transport security is handled; the fact that traffic remains secured end-to-end using a host certificate rather than terminating security at the proxy puts sandstorm well ahead of anything else in this space.

Secure, easy, and open source. I'm sold as both a developer and an end-user.

I'm excited. Today was the first time I tried Sandstorm via their demo serivce, and I must say that I am genuinely surprised and impressed with the level of polish. One click gave me a private gitlab, a collaborative document editor, and even a running instance of browserquest!

This level of polish might just be what it takes to get the masses to host their own digital services. I'm strongly considering setting a sandstorm server up for my family.

One question promptly and prominently pops to mind: Given the focus on non-technical users, How does sandstorm mitigate issues that are caused by NAT and NAT traversal?

I would be very happy if Niantec releases an in-depth write up on the how the backend was implemented and what measures they took to make it scale to handle this kind of traffic.

I don't care much for the game, but details of why the servers weren't (aren't?) able to handle the traffic interests me immensely.

Space-bar heater :)

ON a more serious note, I always use http://example.com. Being reserved and maintained by the IANA for documentation and testing, it's the most stable site I can think of.

Most likely. The FAQ states that home offices are acceptable (Second question from the bottom).

> RSA-4069? That's pretty damn hefty

This surprised me for a different reason: I was under the impression that effective security bit size does not scale linearly with bit lengths in RSA, and that key size would need to be 16,000-bits long for a comfortable safety margin (a size not practical and not supported by RSA).

Are there any practical reasons why one shouldn't use epileptic-curve based crypto?

There is. You can either randomize the fingerprint (per-session fresh vm configured from a pool of possibilities) or unify it (tor/tails), provided that enough people do the same.

Do you destroy this information once the owner has chosen to opt out?

The reason I, and I suspect many others, avoid these types of services is the risk of this information being inherited or possessed by an entity that would use this information in ways to which I do would not consent nor approve. This information would not only affect me personally, but also my children.

Germans are more privacy-aware than most for a good reason. I dread a future where an evil government gets a hold of this data and the technology to effectively use it.

While statically linking most certainly has its use-cases (as the parent comment pointed out), it unjustifiably presents challenges that would not otherwise occur.

To elaborate on the parent's example: a particularly bad bug in a library depended on by a set of programs might not cause much of problem if you build and deploy this software yourself.

However, it would be a more significant endeavor on both the distribution's part (recompile, repackage, sign-off, and release every program in the set), and on the user's part who has to download the large binaries each time a dependency is updated rather than a small library. This problem is further exacerbated by the npm-like dependency graphs rust programs tend to end up with. Take servo as an extreme example of what these graphs might look like: https://web.archive.org/web/20160703132700/https://dirkjan.o...

Furthermore, I don't see how dynamic linking prevents the compiler from optimizing the resulting binaries. C libraries have been dynamically linked for decades without issue.

I am aware that this is a troll comment (I hope), and that it is not in any way meant to refute the GP or earlier comments.

That said, the parent post was merely demonstrating that "morally right" or "best human rights" record is completely subjective.

In a democratic system, your notion of "right" and "wrong" is nonsensical and incorrect if it does not align with the majority, regardless of how "evil" or horrifying this may seem.

You either have democracy or you don't.

The parent raises a good point though: Tax law is extremely complex when it doesn't need to be. The only justification for this complexity (that I could come up with) is exactly that it's complex to enable tax evasion/tax burden minimization.