w8rbt

Go wanted to deprecate OpenPGP support. But, it looks as if they have walked that back a lot:

https://github.com/golang/go/issues/30141

"We will be deprecating the packages listed above, except openpgp/, otr/ and xts/.

I'll update the proposal and send a CL shortly."

I'm pulling for Walmart! I've seen the death of so many stores that I dearly miss (Sears, JC Penny, etc.). I can no longer get good hand tools or good t-shirts locally. And, the online stores are full of rip-offs and forgeries. Walmart is the last bastion of honest retail (where I can talk to a fellow human in person). I really hope they make it.

Poison toothpaste and pet treats from China have been ongoing problems for the last decade:

https://www.accessdata.fda.gov/cms_ia/importalert_207.html

https://www.fda.gov/animal-veterinary/news-events/fda-invest...

I'm not sure getting a cheap price/good deal is worth the risk (even for clothing) as the materials may be dangerous to your health.

It may replace C++, but it will take decades to do so. The C and C++ ecosystem is gigantic and has been around for 30 to 40 years and will will be around for the next 100 years or more years IMHO.

I've never used either. I seldom travel to large cities. I was in Atlanta for GT's commencement. I live in a more rural college town and I don't really need the service routinely, but I can see the value when traveling. It was great.

I did not mean to imply it was cheap, only reasonable. I would have paid more. Nice cars, polite drivers and quick service.

Neat. Thanks for sharing that.

I just recently used Lyft while visiting Atlanta. I'd never used Lyft or Uber before. The app and service were both fantastic. I hope they keep it up. Awesome service at a reasonable price.

I put all the 'Have I been Pwned' SHA1 hashes into a bloom filter: https://github.com/w8rbt/bp

Zero it and install Linux. Problem solved.

net commands, kerberos tickets, etc. You can really only 2FA web interfaces, VPNs, RDP and interactive console logons. You can 2FA LDAP, but it's a real pain to do so (I've seen it done).

Just think of any backend protocol that the system uses. The vast majority of those can't be 2FA'ed. This is not Windows specific either. The same is true for most all protocols.

This is why most companies buy firewalls and VPNs and only 2FA the VPN. That meets most compliance requirements and is simple to do. Is it secure? Probably not, but it checks the box (makes audit happy), so buy compromise insurance and move on.

Yes, they are two very different things.

Insightful comment. I call this 'working on the car more than we drive it'. You see that a lot in tech. It's fine as a hobby, but not for production. You do need both as the tinkering helps us to master concepts and systems and find new, better ways which end-up becoming best practice in the stable, production systems. Just have to known when to tinker and when to not.

Very smart people have tried for a very long time to show one way or the other. We don't know if P = NP (seems unlikely) or if P != NP (seems likely). But there is no proof either way.

If P = NP, then we can generate solutions to very hard problems as easily as we can verify given solutions to those problems (both in polynomial time). Again, this seems very unlikely.

What's the runtime of 75^4096 mod 236?

Right, it's a pity RSA does not use 32 or 64 bit ints.

O(n^2) is polynomial and perfectly acceptable for many use cases. Basic multiplication is O(n^2), as are many other operations.

    for i = 1 -> n:
        for j = 1 -> n:
            do something

Although, if the outside n differs in size from the inside n, it should be written O(nm).

So is Machine Learning. It can be dangerous too:

https://www.usenix.org/conference/usenixsecurity18/presentat...

James Mickens is awesome BTW.

SSH Brute force bots... beware ;)

Reminds me of this Knuth quote, "Email is a wonderful thing for people whose role in life is to be on top of things. But not for me; my role is to be on the bottom of things."

Source: https://www-cs-faculty.stanford.edu/~knuth/email.html

That picture made me cringe. Who sets a cup full of coffee right next to their laptop keyboard and phone?

If you think of CS as a distinct area (outside of math) then it is used there a lot. Especially in cryptography (RSA, etc.).

I have been looking at saltpack to replace many of my PGP use cases. Has anyone else?

https://saltpack.org/

You can still read about this: https://evil32.com/

Not to be confused with his little Theorem.

It's not revolutionary to say that asking for user passwords is stupid and dangerous. Nothing good will come from giving your email account password to Facebook (or any company). It's also a basic human rights violation. We all have a right to our passwords. We do not have to share them with organizations seeking to exploit us and our information. It's just basic common sense, not revolutionary.

Yes, they can always see the metadata. To, from, ports, bytes sent, packets, time, duration of the flow, etc.

I find this to be largely generational. Younger people tend to be more visual. As long as the source of the videos is accurate and complete, I would not worry about it.

I wonder if he took up walking after the injury? A lot of people I know who used to run walk now instead.

It's like a free puppy.