lqdc13

Forward-Backward algorithm before there were all sorts of resources and explanations on how it works online.

The wikipedia page for it explains it well.

Not even dual boot. Just depending on the password/pattern entered, log in as a different user. It's possible to do in Android as an app. I've been meaning to write one, but it seems like lots of work and upkeep.

Also Northgard - the other game by this developer - had a pretty dull story unfortunately.

Ideally it would be someone like David Gaider doing the story.

What about the people under 18 who I assume could take the poll and also people who didn't go to vote but took a few seconds to take the poll on Telegram?

Also what about all the babushkas who most likely voted for Lukashenko but don't have a smartphone?

This is not to say that more people didn't vote for the opposition than the official numbers state. But Lukashenko still could have won.

Wouldn't this be different since we know the maximum number and the distribution?

The solution wouldn't be to still skip 1/e if you got something like googol - 1 on the first try.

Same with Russian (Yandex does an OK job).

But https://www.deepl.com is pretty amazing in my experience for the languages it's available for.

There is lots of corruption and bureaucracy and lawsuit-avoidance driven construction. Right now the cost of constructing subway stations in NYC is the highest in the world.

https://www.nytimes.com/2017/12/28/nyregion/new-york-subway-...

It would be quite laborious to figure out "normal" user traffic patterns and then adjust to those. You would have to collect data on a bunch of users and then shape your own traffic to match.

Only makes sense if you are doing it for a bunch of people and at that point you are another VPN provider.

I just tried hotbot and it seems to be better for programming-related questions than duckduckgo.

I wonder if they use mostly Google for the backend.

Why? Because they had a code exec vuln in 2017?

On the CoyIM site it says: "Not yet audited. Do not use for anything sensitive."

Regarding SMS interception, you can do it with every other messenger that uses this technique, which is basically every messenger that doesn't use passwords.

Regarding the nonce attack, it looks like the devs responded and said it was because of poor random numbers source on the client, which I personally don't understand as a justification. However, they said they'll remove it in the next update and that nonce has been "0" up until now.

Regardless, all of these messengers for cell phones aren't great if you are paranoid. That's because the hosting company's servers have all kinds of data on you as it is. Your contacts, access to SMS, access to location, camera, mic, photos, and all the files on the device.

This is true for all the messengers that are currently in widespread use.

If you are paranoid, use Pidgin with OTR plugin.

Problem with such use of statistics is that we underestimate black swan events.

Humans are intuitively better at it. For example, it would be impossible to predict something like 911 event with such frequentist analysis.

Also impossible to predict some sort of nuclear disaster terrorist act that never happened before and could take a million lives.

Another thing to keep in mind is the "missing life" (dying young) and quality of life after disease. That's why something like Alzheimer's seems a lot worse than heart disease.

Look up Stumbleupon on google trends. Tons of users left immediately after their redesign.

It might be that people enjoy living without children for as long as possible in the current western economic/cultural climate.

This age might keep increasing because those who try too late won't reproduce. So it's passive selection for longevity.

The way i see it you are basically describing south Brooklyn with the 30k/square mile. Something like Bensohurst (https://www.google.com/maps/@40.620487,-74.0093661,3a,75y,20...) or Western part of San Francisco.

I think the issue with this approach is it doesn't take away individualism. Everything is still too far away. Most people still have cars and look for parking for hours. The parks are few and something like 30 minute walk away. Your friends and gym are also going to be 30 minutes walk away. It's not dense enough for subways everywhere and buses stop on every block so it makes just as much sense to walk. Nobody walks anywhere besides their neighborhood and there is usually nothing in their neighborhood.

So it's really worse than suburbs and worse than city center that has buildings. Worse than city with buildings because you don't share common resources so everyone is still for themselves. You also don't get nice things like common public playgrounds and parks.

It's worse than the suburbs because you still get the same problems of it being difficult to get places but now it's even harder. You still get "what's mine is mine and I don't want public things" but now you have less of your own stuff and fewer public things because real estate is expensive. You also don't get the diversity of food or clothes that you would get in a city.

I think the ideal is 90k/sq mile in the places where people live with 4-6 story buildings.

Yes, because they try to strip the binaries as much as possible so that the file size is smaller. If you compile a regular "hello_world.c" with gcc -O3, the size is 8 kb. You can def make a malware that is way smaller that does something simple like change some registry value to some uri.

Average size for malware is ~100kb-200kb btw. This is way smaller than almost any software besides some console games.

Awesome. I hope I'm wrong and I'm looking forward to trying out your approach!

The reason simple hello world apps are marked as malware by AI-based engines is that small programs tend to be malware. There are probably close to no hello world programs in their dataset.

The problem is that to be a "good" program, yours has to do something other "good" programs do. And there aren't that many of those that use different software development paradigms (not different versions of the same one). So new different programs tend to be marked as malware.

This also brings up a very easy way to circumvent such AVs. Simply modify an existing goodware program and it will be marked as goodware. Add some obfuscation/polymorphism and it would be virtually impossible to detect such malware using static analysis/AI-based AVs.

Having worked on a machine learning-based AV for several years, I'd like to point out that the dataset choice here is extremely important and they seem to have a pretty small one considering the number of possible variations and the choice of model.

What happens in the wild is that one malware author releases a lot of very similar polymorphic or differently-compiled malware so it ends up being trivial to identify it. For example, they could have picked up a small icon that is common to half of the malware or some internal library that is used in a large portion of them. Then a week later the nature of the malware changes and you would identify a lot less.

Another thing to consider is that in many cases, a tiny modification to a known good program can make it malicious. This includes such things as changing the update URI. I don't see how they could catch such malware using this method so the 98% detection seems like a very unrealistic number.

Just to present an example:

One can train a simple logistic regression on some metadata features where the malware comes from one source and easily identify almost all of them correctly, while failing to identify malware from most other sources.

Having said that, it's a pretty cool novel approach and I'd love to try it.

Toolbar thing is my fault. And violent monkey seems like a good alternative.

With tree style tabs I didn't realize there is a CSS hack to remove the top tabs.

These are good. Thanks.

Weird that the only way to get to that menu is through a toolbar that's not visible by default.

Firefox keeps getting less and less usable for me. I'm considering switching to chrome for the first time in a while.

Things that bother me on desktop developer edition:

    * no usable mouse gestures extension
    * constantly changing UI
    * hid really useful things like file/edit/history/bookmarks/tools menu behind
      holding alt button on Ubuntu. 
      Pretty sure that whole menu will be gone soon.
    * it's impossible to clear for example last week, last month  etc of browsing data (not sure if you could do it before).  
      In fact, I'm not sure if I can clear cookies but not site history anymore after spending 5 minutes in the settings.
   
    * tree-style tabs turned into something unusable
    * getting rid of all the rare extensions that worked previously and are no longer supported by the original author
    * tons of greasemonkey userscripts broken
    * greasemonkey a lot less usable now (still can't figure out how to write a custom script from scratch)

Unfortunately, on desktop I'm stuck between this new FFX and Vivaldi. On mobile, I already switched to Brave even though it's terrible because you can't easily google for selected text or select a part of a paragraph easily.

Wire has crazy usability issues after sending a few hundred messages. Clients just freeze up and crash. Another issue is centralized metadata collection.

I know it's open source, but modifying it and recompiling all the clients I'm using would be very annoying.

To provide a counterpoint, I think it's great the way it is in this respect.

I don't want any of these features and wouldn't want others to use things like HTML signatures.

Yes, I'm on a fast network and using a newish Android device. It's mostly the rendering performance. All I want is to get to the mailbox quickly. I've never wanted to use the timeline and notifications features and whatever else they're loading.

Even on a desktop I get a loading screen for maybe 2 seconds and the site loads in ~4 seconds.

A modern website that works well on all devices quickly is soundcloud. Seamless browsing/listening and excellent user experience.

The site still takes ~20 seconds to load on mobile Firefox. I don't know of another popular site that takes as long to load

Please be advised that taking SSRIs can have negative side effects that you might not be aware of.

When people I'm close with start taking them, they are less interested in being intimate and stop "loving"/being affectionate.

In my experience, having a schedule, exercising and making sure you are around other people help a lot more while preserving your personality.

Are you saying state sponsored malware should not be looked into?

It seems like American companies tend to find Russian state-sponsored malware and Russian ones keep finding US/US allies-sponsored malware.

Ok, four questions:

1. Is hacking into a foreign AV company by a state an OK thing to do?

2. How do we know the anonymous source is being truthful?

3. If yes to the first two, are we certain that it wasn't exploited but was coerced?

4. If all of these things are true and they were coerced, what is the practical difference for the party being monitored?

In this article and the nyt one they are actually saying US is doing it and it's not even a secret. Here is a quote:

"The N.S.A. bans its analysts from using Kaspersky antivirus at the agency, in large part because the agency has exploited antivirus software for its own foreign hacking operations and knows the same technique is used by its adversaries."