seandougall

Hey, at least those are immutable and memorable facts. Not great from the standpoint of adding security, certainly, but I'd rather have that than things like "who is your favorite band", which I'll have no hope of reproducing five years from now, and which will only serve to lock me out of my own account.

Agreed. I had a mixtape that my wife made for me back when we were dating in the late ‘90s, and it stayed on loop in my car tape player for years. To this day, my pitch memory of those songs is still about a half step flat.

You're right, I missed that your sin(x) example was talking only about a single component.

However, cherry-picking a different reordering for each frequency component before doing an inverse FFT really isn't the same thing as playing all the sounds simultaneously.

Anyway, the thing is, we're not talking about an infinite series. This is a thread about digital audio playback, where both amplitude and phase components (I'm going to assume this site uses some sort of DCT-based codec) are quantized, and hence occupy a finite space. No amount of reordering will change that sum.

That reasoning allows you to get any final signal you want depending on where you stop in the series, not on how you order the individual coefficients. Addition is still commutative. The parent comment was about every sound _and_ its inverse, which can only ever add up to zero.

(Also, you're missing the frequency components there; your math cannot reproduce any sound at all, it can only reproduce different amplitudes of the same sine wave.)

What forms of birth control spike estrogen? My understanding was that it worked by suppressing the natural estrogen spike that triggers ovulation.

> Then don't ask for a loan.

Translation: Don't participate in the economy unless you're independently wealthy.

Conveniently left out: Don't ever apply to rent a house or an apartment. Instead, buy a home. In cash, of course, because you're independently wealthy.

Oh, and also: Don't apply for a job. Because, you know, independently wealthy and all that.

The idea that non-participation in the credit racket is anything but an exercise in extreme economic privilege is laughable.

They certainly are, but I don't believe there's anything novel about that.

What's (relatively) new is that they've discovered they can summon their own personal army in the form of an increasingly militarized police force.

That's fair, although it doesn't allow tokens to be revoked or to expire. For that you'd need to store at least some unique part of the payload you're signing, and then you have O(n) storage requirements again, right?

It seems like you're describing a specific use case that is different from what most readers think of when they see a post about cryptographic signatures.

If the server generates the token, and all it's effectively doing is verifying that the client has the correct token, then what is gained by making that token be a signature of any sort?

> Any cocoa app use that much of memory.

What gives you that idea? Lots of apps have cruft, but that's nothing to do with Cocoa.

A "Hello, world!" in Cocoa uses around 13 MB, and the application bundle weighs in at 79 kB. The fact that Electron uses a bare minimum of over 100 MB just to get an application running is a source of some understandable consternation.

macOS's APIs and developer docs don't really encourage checking for cellular vs wifi the way iOS's do. So you probably do need relatively fine-grained control to get the same effect, as the vast majority of processes will assume the network connection is either fully up or fully down.

Back around the time this SE question was asked (2013), I was using an awesome open-source app [1] to tether on my iPhone. It was very easy to use, though you had to be able to compile and run it yourself, as there's no way it would be allowed in the App Store. I would be surprised if something similar didn't exist for Android.

I needed to tether on train rides a few times a year, which was really not worth paying for the service. Nowadays I can do it without an exorbitant extra charge (aside from the extra data that tethering guzzles), so there's no need for it.

[1] https://github.com/tcurdt/iProxy

Even if you figure the mule is expendable, you'd at least want the car to make it across reliably with the payload. I don't have a lot of experience in this area, but doesn't it seem a bit implausible that the car's electronics would work normally with that much radiation coming from the steering column?

Published in 2013, but describes "the Apple internal iSight webcam found in previous generation Apple products including the iMac G5 and early Intel-based iMacs, MacBooks, and MacBook Pros until roughly 2008".

> Is it possible to turn the camera on and off very quickly?

Not particularly. At least on my 2015 rMBP, using code that I wrote (so I know it's not doing anything extraneous), the light is on for about a quarter of a second before the first frame is returned from the camera. This is because the LED is literally showing you when the camera has power (which includes any sort of handshake with the system), not just when it's capturing frames.

Is that enough that a user who's really concentrating on the screen will nonetheless see the light come on? Not necessarily. But GP has a good point about this being a feature that doesn't rely on the user being proactive.

If your old calendar includes holidays, you'd have to remember to ignore the ones that are based on rules other than the Gregorian calendar (e.g. Easter was April 21 this year but will be April 14 in 2047). Clearly those holidays are just a conspiracy by Big Calendar to get us to buy more calendars.

Cool project otherwise!

A custom URL scheme would at least provide an opportunity to confirm launching Zoom, even if Zoom itself didn’t confirm joining s particular meeting (which I agree it should).

Oh, yeah, I missed that. That’s patently false.

Ah, yeah, the flow for when the app isn’t installed makes particular sense (at least as a motivation for why someone would implement something so awful). Thanks!

> This vulnerability leverages the amazingly simple Zoom feature where you can just send anyone a meeting link (for example https://zoom.us/j/492468757) and when they open that link in their browser their Zoom client is magically opened on their local machine. I was curious about how this amazing bit of functionality was implemented and how it had been implemented securely. Come to find out, it really hadn’t been implemented securely. Nor can I figure out a good way to do this that doesn’t require an additional bit of user interaction to be secure.

Does anybody understand (and have a moment to explain) why the author says this is difficult to do securely? macOS has a simple facility for handling custom URL schemes, so my impulse would be to have `https://zoom.us/j/492468757` do a server-side redirect to a URL like, say, `zoomus://492468757`, which would launch Zoom locally using the OS's built-in services. This wouldn't require a third-party daemon of any sort, and would just be a regular application that the user could trivially uninstall.

Is there a security hole there that I'm missing? Or have I misunderstood the author's point?

Does that mean poverty is not a problem worth addressing, because on average we’re a reasonably wealthy country?

Is inequality not a problem, because on average we all have the same opportunities?

This was also relatively remote. If it had been, say, the East Bay, where there’s high population density and lots of older homes with unreinforced masonry foundations, the situation would look a lot different.

You got it right! (Though Pasadena is also in the SGV.)

I felt it in South Pasadena, but it was very gentle; would have been easy to miss if I hadn’t been sitting still when it happened.

Our family vet said the same thing. At the time she was personally tracking seven cases of unexplained bladder problems, all of them in dogs who ate Blue Buffalo. This was at a small local practice, not a huge patient base.

There are still the big pet food issues like melamine contamination, but those seem to affect both large and small brands.

For an individual, yeah. Apple belongs to a number of standards bodies and consortia, though; when they deviate from an existing standard, they usually do do more deliberately than this letter implies.

> You can literally buy little plastic condoms for your e-cigs.

That's both an amusing mental image and a pretty great idea. One that has no analog with hypodermic needles, so it's still a false comparison.

There’s a public health reason for that. How many people have ever contracted HIV from a used e-cigarette?

I'm convinced that type of spatula isn't designed to last anyway. Even if they don't break, moisture gets into the joint between the wood and the spatula and develops mold. Sometimes I've discovered this when the mold spreads to the visible part of the handle; other times it's only been apparent when the moisture weakens the adhesive and the moldy black handle pulls out in the middle of being used. It's just a lousy design to begin with.

Yeah, the NASA article says, "it will be the weakest of the last 200 years." It does not say, "it will last 200 years". Those missing words between "will" and "last" are rather crucial.

I want to believe that, but how do you evaluate models’ usefulness if you refuse to acknowledge facts and data, and just yell “fake news” when they point to a conclusion you don’t like?