roastedpeacock

Not sure about the memory transfer bottleneck and potential mitigations. But out of interest, how insurmountable would it be to 'retool' fastplotlib to use JAX acceleration instead of wgpu?

> AFAIK Hardware jailbreaking/homebrew tools are fine even in jurisdictions blighted with with DMCA unless they're specifically for circumventing DRM.

Certain Japanese video-game companies would take issue with that interpretation of facts. Of course there is the arbitrary distinction between 'access' and 'copy' control mechanisms. Something arguably made irrelevant by the further integration of general concepts from personal-computing into certain video-game systems.

> Granted, this was a university project so we clearly were within the academic context, but we were in no way affiliated with a too big to sue company.

Even without supposed goodwill of AMD and seeing things a different way being a) affiliated with a university b) outside the USA may have changed some of the equation.

And how is the situation with desktop clients? Last I saw the situation was not exactly great.

Just a friendly reminder to everyone that a challenge of the DMCA has not reached the Supreme Court in over 25 years of its existence.

Claming injury to a third-party who hosted information (did they host binaries?) of a tool at issue seems like a novel legal theory to me. Best of luck to them.

Session started as a fork of the Signal client/server to use identifiers that are not phone numbers (perfectly sensible) but having deviated from the known primitives of the Signal protocol and omitting PFS gives me pause.

I was under the impression that the Signal server, if compromised could be utilised to potentially log metadata of communication between contacts. Sealed sender [1] is a feature of the Signal protocol to mitigate overt metadata retention but it may fail against certain correlation attacks.

[1]: https://signal.org/blog/sealed-sender/

Anyone know if EFF is going to attempt further appeals?

Are you able to discuss what this product is?

Sony omitted OtherOS support with the PS3 Slim hardware revision with seemingly no technical justification and later removed it from existing consoles.

Afterwards several researchers investigated how to execute third-party code on the device and succeeded. [1] In response Sony did attempt to prosecute several people under DMCA and similar claims [2] and were more successful with certain defendants in some countries versus others.

[1] https://media.ccc.de/v/27c3-4087-en-console_hacking_2010 [2] https://en.wikipedia.org/wiki/Sony_Computer_Entertainment_Am...

> If you think that the Internet Archive is their own worst enemy and anyone who thinks differently is wrong, then you don't actually support the work of The Internet Archive. Sure, you may like parts of it. But you oppose its core mission.

This is where I stand.

One can support the mission of the Internet Archive (in archiving the public internet) and still express concern over more legally questionable ventures that may threaten their existence (e.g digitising and redistributing owned copies of books) and may be more of a challenge being justified under the first-sale doctrine.

> Signal: Will leave the EU market rather than undermine our privacy guarantees

Considering the Lavabit case [1] this reek of grandstanding to anyone else? Not saying Europe is panacea but considering the unaccountability of American intelligence or law enforcement the European position does seem more favourable.

And to those who bring up policies such as Chat Control. The vote for that in Brussels has been postponed after enough outcry. [2] Hopefully it does not come back to life however them trying again under a different banner would not be a surprise either.

[1] https://en.wikipedia.org/wiki/Lavabit#Connection_to_Edward_S...

[2] https://www.patrick-breyer.de/en/chat-control-vote-postponed...

What current Intel products are fabbed at TSMC?

> But the whole story is very crazy, I should write a complete blog post on it and what their shady techniques are.

Please do. If you have any new details not in the public-domain and are safely able to disclose them I am certain many other readers would be interested. :-)

Censored by Rockstar/Take-Two no less. With presumably an ultimatum to discontinue the project as part of a settlement of a protracted legal case [1].

[1] https://www.gamesradar.com/gta-owner-settles-lawsuit-against...

> I named the DMCA because that was likely to be most recognizable by our most esteemed readers but fine I will elaborate how this shit is everywhere.

Yes. But not all countries interpret the restrictions on fair-use as aggressively as DMCA/1201 does.

a) DMCA does not apply the same to all countries

b) With the way politics is going in USA I am not optimistic about DMCA reform until the heat-death of the universe.

Card game? Does he mean there is a console/PC version of the Pokemon card game or this is simply bad journalism?

> Key pinning also can be done independently of the protocol; the SSH client does that, and it is helpful, but it isn't something that necessarily needs the SSH protocol in order to work.

While it was not entirely perfect Google threw in the towel with HPKP and they do not seem to want to reopen the debate. All the meanwhile they utilize static pinning for their own properties in Chromium [1] and 'secure' domain registration (MarkMonitor) that is very difficult to obtain when not a large corporation. Leaving the rest of us as fine pickings against those who can hijack domains and obtain a CA issued certificate to conduct MiTM attacks.

[1] https://source.chromium.org/chromium/chromium/src/+/main:net...

> after the recent xz backdoor, combined with the fact sshd runs as root, we probably shouldn't use SSH for everything

Independent sshd implementations with the potential of having neither issue do exist [1]

And many httpd's run as root as an easy way to bind to :80. Not strictly necessary either.

[1] https://docs.gitlab.com/ee/administration/operations/gitlab_...

Traffic of onion-services is encrypted. Traffic correlation to deanonymize the client can still be theoretically performed but ultimately you need to draw the line in the sand somewhere.

> Regardless, protonmail doesn’t let people register when connecting with Tor unless you use phone number or card to make a payment

Actually if you attempt enough times you will get the option to verify the registration with an e-mail. And they are rather liberal with which options they accept. So it is not exactly a circular dependency.

From there is it an exercise to the reader to create an account not linked to any other identity.

Even if the attacker cant decrypt existing e-mail the concern is by hijacking the account they can intercept future e-mail received such as password resets.

Some searching finds this comment. [1] I would be interested if such a password reset were possible against someone who for instance had 2FA enabled, no recovery information and only accessed their account using the Tor onion-service. ;-)

[1] https://news.ycombinator.com/item?id=19367063

That also struck me as odd. And seemingly a violation of journalistic best-practices of protecting sources. I sure hope this was done with consent of the anonymous source.

That is a pretty damming accusation. Can you provide more details? This should be the sort of thing you should be hearing from a disclosure or ideally a vendor advisory - not an HN comment thread on a vaguely related article. Failures of randomness are almost always fatal to a cryptosystem.

Anyone know if GitLab has a transparent archive of DMCA notices similar to GitHub?

The Suyu project also has their own self-hosted Git server. Be interesting if development continues there and information is spread by word-of-mouth or similar.

Some countries have better exemptions for fair-use even accounting for WIPOisms than others.

Given recent regressions in Hong Kong that may not be the best idea.

What jurisdiction will the organisation be registered in and in the unlikely event of a dispute how will that impact the project?