Viewing profile — libdjml

This entire piece and author lost me within the first paragraph. “and soon Google” links to a complete unsupported fluff piece from November, drawing a loose connection to an activ…

That would be a terrible business strategy. If someone comes forward with legitimate good security vulnerabilities and you don’t pay out, you’re massively encouraging them to go to…

The twice-linked brief article states that basebands have full OS memory access, which is not true in 2018. And the article is completely uncited.

Fortunately, Australia doesn’t make any phones or popular e2e software.

Agreed. If anyone thinks it’s a legitimately bad book, feel free to discuss why.

There are a load of criticisms you could call out about google, but suggesting that their “one primary platform and single focus (social media)” is about to collapse is not valid; …

> Just go sit somewhere and turn your attention inwards Perhaps you were born with a natural instinct for what meditation is, what to do when thoughts arise and you go off track, h…

Given the posted article is about the poor security posture of most home routers, has anyone inspected ubiquiti? I gather they have a bug bounty which is a good start, but so do Ne…

Yeah it seems like RCE in the context of Chromium, but not SQLite? I know it’s pedantic but if this is RCE in SQLite because it’s exposed to the network via other software, every v…

Remote implies it can be accessed remotely, is that true, or did they mean “remote if an attacker can remotely send data to SQLite”?

Good question, to which I don’t know the full answer. But if you look at their motto “move fast and break things”, insistence on pushing new features as fast as possible, and the r…

Agreed. If you’re trying that hard to build a relatable hook, maybe what you’re writing about just simply isn’t that important/useful?

I highly doubt this is a off the shelf Wordpress install. In fact, a standard WP is not > 1gb of data, which the post describes. There will be a massive amount of customization, so…

There’s IBB; the internet Bug Bounty. But it’s for widespread open source software. Typically FOSS that isn’t well funded yet is critical to massive parts of the internet. Popular …

> I still don't understand what this has to do with blockchain. Funding from VCs?

Sure, that’s a great idea. But your transport security is going to show vulnerability sooner or later (see: regular issues in TLS), and it’s worth having a slightly less compromise…

Excuse my very basic question, but how do you manage spam when using mutt? Do you interface to a cloud-based service in mutt, or have some kind of other spam filter? I’ve always li…

We recently had a 2nd hand copy shipped to NYC to bring a little bit of home back to the kitchen. It’s almost like the Michelin: intended to sell more of a product (tires/flour), b…

Did you do the DLND? If so, they may have updated the videos, as the current explanation of conv2d_transpose seemed fairly clear to me. Or maybe it was some of the extra materials …

I don’t believe your statement that AI is just a subset of software. It’s almost entirely math. Furthermore, “somebody like yourself or anybody else can’t pick it up” is wildly unt…

At what point did it go from understandable to not for you? Do you understand GAN architectures? Basic ideas of the DCGAN paper?

I applaud the positive spin, but the responses are due to the headline which suggests these salaries are normal. If an article said “supermarket checkout clerks are earning over $1…

True, although what are they going to do with the data? If it’s primarily for selling to ad companies, a tiny slice of privacy minded people aren’t worth much.

This is a huge unsolved problem in journalism: reporting whether a company was wildly negligible and deserved to be punished, or did the right things and fell victim to “no org can…

I’ll take a wild guess: * a lot of legacy kit that’s expensive and hard to upgrade * lots of things rely on backward compatibility * attacks are still too difficult/expensive to th…