pgraf

Really interesting, but I would love to be able to express honestly when I just guessed. This way the result would be much more scientifically sound. Four answers have a 25% chance of random correctness, which is a bit high in my opinion. I think either adding a "I don't know" or a confidence level (Known/educated guess/wild guess) would help.

This problem really bothers me as well. I think that ultimately this problem boils down to reducing search cost[0], which the internet has already partially done. I think AI will reduce them further if it is not captured by the advertisement industry for the average user. However, we cannot assume a fully rational customer in the real world. Especially in software, the customer does not know what they are looking for most of the time. Further they cannot evaluate how good your offering is vs competitors without investing a significant amount of time, which in turn increases search cost.

[0] https://en.wikipedia.org/wiki/Search_cost

Pretty ironic find: Extracting knowledge from cryptocurrencies - Michele Spagnuolo https://www.youtube.com/watch?v=9P04hm7tmgs

Wero uses AWS for their infrastructure... So much about their sovereignty focus.

Source(German): https://netzpolitik.org/2026/uneingeloestes-versprechen-auf-...

The quip about IQ tests might be true for common range IQ tests, but IQ tests that test for very high IQ like the Ultra test [0] are untimed and unsupervised.

[0] https://megasociety.org/admission/ultra/

Could you maybe post it here? I think many of us would find it useful to try.

I don‘t see any hint of AI being used here, but rather a handcrafted computer vision algorithm. Can anyone more involved in the matter elaborate if there was an actual AI model used?

Sorry if that came around as rude. From personal experience I have not met any professor in my life who could lead such a project, let alone with students that don’t have any work experience… And you imply there should be multiple of them for the project to succeed

> I get that there would be risk, but if it was under the supervision of professors (who hopefully are good at building, not just lecturing theory) […]

Good joke here! If you are actually serious, please tell us which university you encountered where the majority of professors actually did something productive in computer science

> The US government is so powerful, they are the only country that enforces a draconian global taxation scheme on any citizen or person who has ever held a US green card […]

While it may be true that they are the only ones able to do it effectively, there are some other countries with citizenship-based taxation. According to Wikipedia[0] these currently are: Hungary, Eritrea, Myanmar and Tajikistan

Some other countries have similar policies for tax heavens.

[0]: https://en.wikipedia.org/wiki/International_taxation#Citizen...

On another note the author of the book, Robert Kiyosaki, has also been a rampant promoter of Bitcoin. Just recently he predicted the price of one Bitcoin to be 10 million USD soon: https://www.nasdaq.com/articles/robert-kiyosaki-predicts-10-...

I don't think you should take someone who says that seriously for your financial planning.

Care to elaborate?

If I may ask, what is your use case so that a L3 tunnel does not suffice?

One quote that I find funny from today’s point of view:

As we approach the present, corresponding to a personal computer, the graph really should become more complicated since one consequence of computers becoming super-cheap is that increasingly, they are being embedded in other equipment. The modern automobile is but one example. And it remains to be seen how general-purpose the current wave of palm-sized computers will be with their stylus inputs.

Sounds like a problem that should be (rather easily) fixable in the Operating System, no?

If the emergency call doesn’t go through, try the call over a different network. This would also mitigate problems we see from time to time where emergency calls don’t work because the uplink to the emergency call center was impacted either physically or by a bad software update.

Genuinely curious, how would you block an attacker from getting to your SSH port without knowing the path you will connect from (which is the case for remote access) at configuration time? I don‘t see how Path-Aware Networking would replace a VPN solution

FYI, 84% of ID has voted pro chat-control in 2021.

https://mepwatch.eu/9/vote.html?v=134463&eugroup=ID

Just be aware that with your strategy “blocking 50% of unwanted traffic” means blocking non-attack traffic, as these Internet security companies are mostly legitimate. The automated attack traffic that you actually want to block is in the other half and will frequently change IPs.

Imagine a major bridge that was built by a contractor. A internal safety inspector repeatedly warned his supervisors of structural deficiencies that could lead to the collapse of the bridge. Furthermore, in the pass of time two external sources publicly warned about the issue, but the company downplayed the importance. Finally, the bridge collapses. It becomes evident that the company did nothing about the issue because it didn‘t want to loose contracts selling more flawed bridges. The public would justifiably go nuts, and there would be legal consequences for everyone involved.

What is different in our industry that companies (and managers) get away with such malice?

It is true that nothing is 100% secure. Sitting on a major security vulnerability internally with a motivated employee pushing to fix it and doing nothing for business reasons is not negligence, but malice. People in the chain of command need to be held accountable for this.

TLDR: A Denial-of-Service vulnerability triggered via cache poisoning on registry.npmjs.org which can render individual packages inaccessible

I don't see the big security impact that the headline suggests, as active big-scale exploitation would likely be quickly noticed and fixed. The most interesting attack vector IMHO would be to block individual security fixes to packages on a small scale.

Shouldn’t HTTP compression reap most of the benefits of this approach for bigger pages?

Which… is largely fed to our livestock?

Can anyone elaborate which (proposed) advantages LionsOS has over Genode?

According to this article, this is probably a myth:

https://www.theatlantic.com/health/archive/2018/09/victorian...

https://archive.is/idRiW

They can still deduce it from the TLS SNI unless the web server you access supports TLS 1.3 Encrypted Client Hello. https://en.m.wikipedia.org/wiki/Server_Name_Indication

Seems to be hugged to death. https://archive.is/xixuj

perfect use case for the public suffix list (https://github.com/publicsuffix/list)

e.g. add *.ext.workplace.com

related discussion (2021): https://news.ycombinator.com/item?id=27459466

If anyone wondered GIL = Global Interpreter Lock