grifball

    $ cat com.txt | sed 's/^\(\S*\.com\)\.\s.*/\1/' | sort | uniq

For understanding: this proof makes sense if you (incorrectly) assume that any two horses are the same color, because then you can take any pair of horses in an n-sized group and split it into intersecting pairs to show that theyre all the same color. With this assumption, this inductive proof would work as well.

Myth busters did this:

https://m.youtube.com/watch?v=MAfAVGES-Yc

?13? Years ago?

My favorite part of the photographic process was watching prints come to life. I loved starting with a blank sheet of paper and applying various photographic methods to bring the image to life.

I found that building websites was similarly satisfying. For example, click the "Reveal Image" button to watch an image fade in to the blank canvas!

I think a lot about why I went into computer science and this is the same conclusion I came to. There's something really cool about starting with a blank page and coding in elements that appear one by one and adapting the code to be what you want. Maybe there's other ways to do it but programming seemed to be the most powerful.

Just to be clear, it was video games, not photography that kinda nudged me into programming, but same idea with a blank canvas and having control of it.

Yeah, there's a lot of crypto that's specifically tailored to minimizing the effect of mistakes like IV-reuse and it's not solved, the primitives can't do everything, so it's good to know these pitfalls. This book is more theoretical than that though and there's probably better sources idk.

Lemme know if you find them

Lol they're using the old discord logo that got all that buzz about the slight purple color tweak.

For most use cases, you should also add a local bind, "-Llocalhost:5900:localhost:5900" or else everyone at the coffee shop will be able to access your insecure Vnc server

Can you recommend a good blog then?

What's MLS data?

We spend a ton of time locking down OS API/ABIs to prevent sandbox violations and I wouldn't trust a shared server with sensitive data unless I had an IT team working on it. JS seems to be a lot better with sandboxing though. You still have to really worry about CSRF though. I use multiple profiles to ensure sketchy sites can't get at my data.

I think JS gets a bad name when people use it to make crazy modal popups or inline video ads or change the way the page scrolls. Beyond that it's cool that devs can get really creative with a website and I love coding in JS. But also you're adding a lot of complexity for that. HTML/css are fine for creating a website that communicates information and maybe even looks nice. And they aren't actually a programming language, they're just data. JS is a full programming language and gives you enough rope you hang yourself and I think developers kinda go off the rails messing with their sites and ruin the user experience.

It is cool that I can have whoever execute code on my machine without worrying if it will get privileged access to it. That is a pretty amazing feature of JS/browsers.

You can buy a usb numpad for blender. I did this to save money on a mechanical keyboard.

My gcc is tens of KBs

$ wajig size | grep gcc gcc-5-multilib 6 installed gcc-multilib 8 installed gcc 44 installed gcc-6-base 60 installed gcc-5-base 66 installed libx32gcc1 98 installed libgcc1 105 installed lib32gcc1 125 installed libx32gcc-5-dev 6,280 installed lib32gcc-5-dev 7,020 installed libgcc-5-dev 12,193 installed gcc-5 23,648 installed

If you know the g's of vibration (force) and the hertz they needed to use on the screen, can't you calculate it? Maybe you also need to know the weight of the passenger as well as the details of their strobe method.

Yeah. Mostly, the difference is whether you're protecting against big tech or smaller hackers.

The only other difference is that computersecurity also protects your computer as a resource say against mining trojans.

Yeah I did this at work recently with netcat. Our file sharing "solution" wasn't going to work so I just thought to try it for the hell of it.

I also setup a horrible video chat in bash using just vlc and netcat. Audio works better like this

Yeah I've been following malware for a while and this is the first time I've heard of a Wiper. I guess it's like ransomware without the ransom

I only skimmed the paper, but I think the title extracts and confuses a small part of the paper: "Google collects around 20 times more handset data than Apple" They didn't intend to say that google collects 20x more data than apple in total, which is what the use of the term "devices" kinda leads us to think. The paper seemed to be equally critical of both and this article made it into an attack on google.

Idk which device is worse, but this article title is a bit misleading. Why not just quote the paper directly?

My computer just does what I tell it to do, and nothing changes unless I want it to.

whenever I do have to boot into Windows to run some specific application, it's like I've invited a corporate representative from Microsoft into my home. Things are changed for me on updates

Yeah, it is really nice to have a consistent interface. But there is a flip side. Sometimes, people have to change in light of new security problems, and these sometimes need to be done quickly. The most obnoxious of these updates are interface changes (both UI and API). I think Windows does this too much and maybe for non-security related issues. The only real example I can think of is how OpenSSL uses envelope functions because ppl would abuse the primitives [Source: Alexandra Boldyreva, Christopher Patton, Thomas Shrimpton: Hedging Public-Key Encryption in the Real World].

If there were an easy indicator of justified scoffing, investing would be a lot easier.

Yeah, honestly, I hate the truth that this compartment-based system is the best method for security. I never have the access to do my job, and it's a constant frustration to get access. Also, it makes for really uninteresting problems to solve. Instead of using something interesting to secure our systems, like cryptography, the most effective method is just phishing tests, employee training, and web form fuzzing. Cryptographic innovation is part of the solution, but at a certain business level, it's just about training.

It sounds impossible, but I've read the abstract of this article which claims to provide a cryptographic proof of a physical object (nuclear warhead): https://www.pnas.org/content/113/31/8618

I'm not sure if this is possible to extrapolate to prove an energy generation process... But, it's exciting that a physical material can be cryptographically proven over a network (if I'm reading this abstract correctly).

Haha, but actually, you might have to put up with that soon. There's recent research on a blockchain technology called: "proof of space" which would require systems with large storage to idle for long periods of time I believe.

EDIT: proof of storage -> proof of space

What laptop do you have? You may know this, but for anyone who doesn't: with Linux, you really have to choose the laptop model from a list. Here's a good list for Ubuntu: https://certification.ubuntu.com/desktop

I've got two thinkpads that I've never had any real problems with. One is a 2-in-1 and the tablet mode is amazing with xournalpp (I've never owned an iPad so I can't compare).

Bluetooth is always a little testy though. Lately, it's been getting a lot better, but if bt is a make-or-break feature, you might wanna try wsl or a VM.

Also, remember to 'sudo apt upgrade'. It fixes a lot of random problems.

Seems that a lot of these attacks (except for this one) are just simple social engineering: an employee is phished to get into the company VPN, and from there, it's maybe a couple more simple exploits on systems that were never meant to be exposed and then it's over. You can compartmentalize employees but it's harder to do than compartmentalizing software I think.

Saves us a byte in the sqlite database

For me, if I see the time, I'm awake. Something about seeing the time makes me go into work mode and I have to get up. I think I'd like something like a "color clock" so when I wake up early, it'll show a blue screen, meaning I should go back to sleep, but if it's close enough to when I should wake up, it shows a yellow screen or something.

Last time I tried, my code didn't work because it had to be renewed and the renewal server has been down for a while.

But he still hasn't been able to build a subway system in LA.

I guess I don't fully understand this, but RSA works so there MUST be "secret" primes (as in, then can be randomly generated like a symmetric key can).