ballard

It's easy to be an armchair critic dispensing unasked-for advice but harder still to just listen.

In formal, established companies this does exist: it's called "decision support analysis (or researcher)." Whether a particular staff person is steeped in academic research, which they should, and whether a particular staff person provides actionable insight and intelligence that big companies often lack is another matter. The problem is discoverability of results (because there is a vast universe of unstructured data and research out there) and applying it to specific needs: academic journal search (LexisNexis) and regular search engines combined with talented staff might work.

Sounds like there's a startup or two in decision support anyhow.

Impossible to calculate considering "truth" is not fact.

Also war on drugs: http://boingboing.net/2014/02/27/us-prison-population-up-800...

Contrarian clickbait for sure.

Also couldn't load the page.

For embedded/industrial applications the future is in domain-specific operating systems that are JEOS by virtue of not compling unneeded syscalls. OSes like Linux have way too many ABIs and internal machinery that just aren't necessary for headless systems and merely opens a huge attack surface by default... Even with make menuconfig stripped .config, there's still a ton of extra bells and whistles.

In a positive direction, it would be nice to be able to be able to strip out more functionality and still produce a functional kernel. Unfortunately, I don't think this is scalable with autotools or any configuration management setups without having more #ifdefs than code. Haskell could be a good candidate for such a kernel framework, but I'm sure there are other functional and imperative languages that have better complex configuration mgmt support with formal verification.

Does "ultimatum" and "raft of complicated last-minute changes" not raise anyone else's tinfoil paranoia alarms?

Those commits should get significant scrutiny, because it sounds like US/CA govt were given an indirect opportunity to push whatever changes it wanted AND rushed code isn't necessarily the best either.

(Also I'm glad FIPS mode is dead in LibreSSL.)

Choose one of my adventures:

- Deploying a financial app through 4 bastion hosts by keeping Russian doll ssh tunnels up (clients outsource IT bouncing across the world to get to the right boxes)

- porting a 8 MLoC fortran nuclear reactor simulator from UNIX to windows

- generating PowerShell on Linux to be run on a windows box by reverse engineering the MS Api.

- silencing dialog boxes by DLLs which patch and proxy system DLLs

- making Java JRE run from a CD-ROM with the right JNI dll/so and a custom installer I wrote, before the advent of installanywhere (talking Java 1.1 days)

Ah yes exactly. The "prove them wrong" part, it's important not to attack the accuser but demonstrate that their claims don't hold up. Also if there is something to claims, admit it quickly (kills the story) and show enacting preventative measures.

Seems the same as google hangouts more/less.

Looking for something that's 1:N anonymously without a viewer plugin... has a page somewhere that shows a live feed: vimeo, ustream or YT but free to stream.

Denying something doesn't carry the same weight and it seems like a PR move, whereas "actions speak louder than words."

Right now, researchers are putting together functional brain structure maps combining fMRI, SPECT and PET scans for Alzheimer's research. Apart from the inconvenience of wearing a giant magnet, pulling together one or more brain scan techs with compute resources might be a way to pull it off. Heck, if the compute power needed were too bulky to be practical, it might be possible to offload it to a hosted service. (Talking a solution 15-18 yrs out anyhow.). It's entirely reasonable that keyboards would be slower than thought input in 50 years.

They're not, never will be. Especially if there were a concerted effort to put together a GNU/Linux like open source hardware stack to get rid of the fear, uncertainty and doubt of what's inside commercial processors and chipsets. Also there needs to be more decapping of commercial chips to see what's actually in them.

BusinessWeek (2013) also has a video interview at McMoon:

http://businessweek.com/videos/2013-08-15/abandoned-mcdonald...

Also yelp reviews of the former McD's (map position is wrong)

http://yelp.com/biz/mcdonalds-mountain-view-4

Correct map locating McMoon (green arrow):

http://goo.gl/maps/LhQGw

This is a dupe because it's already synced to git mirrors of openbsd sources.

http://anoncvs.estpak.ee/cgi-bin/cgit/openbsd-src/tree/lib/l...

"When I grow up..." Tandem multiplication commit is hilarious.

Sounds good because it suggests sec industry disengagement. Probably simpler to do that and maintain it as a set of minimal patches to LibreSSL, because not many people need it. Either way, it should be secure by default.

I guess it begs the question (FIPS mode seems to fail the "talk to a cryptographer rule"): why don't/aren't sec folks more involved to assure standards are meaningful? Was this a NIST-driven process or was it open to public comments?

Definitely. It'll be expensive commercial open source w/ a subscription and delayed to pass FIPS. And LibreSSL will still be more secure.

Yup. And it's simpler and therefore more secure to support a smaller codebase without magical modes.

FIPS mode is like a clipboard audit. It appears to fulfill a requirement like A+ certifications do for hiring qualified candidates, but instead puts blind faith in process ahead of content.

The problem is that being abrasive without displaying a clear, correct opinion won't lead to greater influence. The latter stance is the important bit.

Security projects need adversarial discussions to keep them honest, but that's a special case.

Abrasiveness and being opinionated are mostly orthogonal.

I think this is more of a correct opinion (to reduce whale blubber) than intentionally pissing people off.

This is great news.

FIPS mode is as my grandfather would say: "eyewash." Something that appears to address something by checking boxes on a clipboard audit but doesn't provide anything but security theater.

FIPS mode is as my grandfather would say: "eyewash." Something that appears to address something by doesn't. (FIPS mode is a "clipboard audit.")

There's three kinds of corruption:

- apparent when there isn't (false positive - mistaken)

- apparent when there is (obvious)

- not apparent when there is (false negative - not obvious)

I'd define corruption as a pattern of putting profit/loss considerations ahead of public interests. Other than personal ethics, this is a really hard thing to control for because it goes to why people want to be public servants and what are their interests/relationships.

Some of the OpenBSD CVS repos as Git repos: http://anoncvs.estpak.ee/cgi-bin/cgit/

Or DIY:

http://cynic.cc/blog/posts/working_with_cvs_via_git/

Does anyone know where LibreSSL source lives / will live?

Edit: Found it: src/lib/libssl/src/ssl/

Edit 2: here it is

http://anoncvs.estpak.ee/cgi-bin/cgit/openbsd-src/tree/lib/l...

I'm interested in this. An app that shares your work-mode laptop to the web more/less all the time would be interesting. Is there anything that can do this in 1-to-web way for free (or willing to exchange for feedback) and where the viewer doesn't need a special viewer plugin (html5/h264)? Vimeo, Ustream broadcasting?

This suggests future work on assistive devices that may be able to "speak for" a patient by ML and manual algorithmic adjustment... Huge quality-of-life improvement potential for people with limited/impaired vocal-ability.

Beyond that, there is far wider potential for translating brain scans directly and skipping vocal-aural pathway by communicating with others digitally.

Richard Branson had/has critics that accused him of all sorts of things. His advice, which is similar to Napoleon Hill's, would be to demonstrate actions that are discordant to the accusations.

(The bigger of a celeb / more successful you become, the bigger of a target you wear on your back for people to try to tear you down.)

There was a great report on BBC World Service about folks wrongly accused and/or convicted of crimes they didn't commit (in one case, a man was on death row for a couple years). A false accusation is as damaging as authorities not paying attention. The sad truth of the human experience is that without direct evidence (video, audio recordings), only the people close to it know how they saw what happened. It's then more important to redouble efforts to preserve justice by investigating thoroughly to attempt to uncover what happened, to not revictimize the wrong party.

Sounds more likely to shock the pranker than the prankee.