Viewing profile — aj3

The strategy that MEV bots use is not a law. It is not even defined or endorsed by Ethereum standards, and arguably is not an intended feature of the network. You could alternative…

> Tokens are property. What law says this? Technically, tokens are smart contracts, basically OOP classes with both data and behavior. They also by design have public methods which…

I bet this indictment will be used as a case study to justify the need for government oversight and taxation.

But you're not signing EULA's in order to participate in the network. Moreover, there are no real "laws / regulations" within the network either, specifying what you are or are not…

It's weird to consider paying taxes as a tradeoff. "Digital nomad" isn't a code for tax avoidance, is it?

Android has different security guarantees compared to desktop/server Linux. E.g. people should expect that none of the installed software can hijack the phone completely and that m…

There were over a dozen of 0day exploits this year alone. Some used in water hole style attacks, so not even that targeted. And these are state of the art incidents which would hav…

Right. Session is stored either in cookies or in Local Storage. Both get cleared when you "clean cookies". If there is no device session, next time you're trying to log in, service…

It's not user agent, it's session (cookies, localStorage) that they didn't have in Firefox, but still had in Chromium. And this isn't Google specific at all.

Clueless users: "Let me enable uber-secure mode, so nobody can hack me" Clueless users next day: "Damn, I got locked out of my account, there are no alternative email addresses for…

Most probably they've added MFA and lost it. Devices that have been authenticated already can be used with the bare login & password, but new sessions will ask for the MFA they can…

Well yeah. If the recovery process is weaker than regular authentication, that's what bad guys will use for account takeover. You don't want to lose Gmail because someone bruteforc…

AFAIK, there are exactly two ways to avoid getting phished. One is using physical security keys (not implemented everywhere and we can't expect everyone in the world to buy one). T…

That's awesome for phishing.

The official repair shops that Apple Repair will guide you to should never ask for the pin, afaik. There is that mode for diagnostics which you need to approve, but you don't need …

Android has exactly this feature, two in fact: "Safe Folder" for regular files and "Locked Folder" for photos specifically.

Employer might have been defense contractor. Most jobs without clearance don't even have "threat assessment coordinaror".

Counter example where companies didn't stay silent: https://en.wikipedia.org/wiki/Operation_Aurora

Archived version: https://archive.md/z3t8O Note that it uncritically accepts report from 2009 which according to company was meant to be risk modeling exercise. Authors outright di…

From the security perspective both snaps and flatpaks are preferable to dep/rpm for browsers, email clients, office suite, document viewers and other stuff that is used to parse un…

Nice story, but it's just a coincidence that the platform you found uses NFTs, as far as I can see just as easily it could have been regular centralized platform operating over Str…

Your last sentence reads like FOMO. Not sure if it's intended, but it seems that you are making an argument for NFTs as a tool for speculation.