Viewing profile — longtermsec

bingo. one should always assume that userland access on a linux box is a short step away from full system privileges and active exploits are ready for use by an attacker. docker ha…

I'm not sure that it is overly simplistic, I think the statement that "containers do not contain" is an intentional oxymoron that points to some ground truths. These ground truths …

so a) and b) are common in practice. these were not obscure boundary conditions or a corner case. and it was very trivial to exploit. "all software has vulns" is a slippery slope i…

The idea that it's trivial to break out of any Docker style container just doesn't reflect reality. -- not just being contrarian here, actually, the reality is that it might be tri…

Yeah it's a tough space for sure. Given that this is a research project i'd hold off on making assumptions that the software has been adequately verified as well. Forgive the loose…

The money for the interest payments comes from taxes!

TL;DR dividends dont get a tax deduction, interest from debt for buybacks do, so buybacks are more attractive Given that interest rates were so low from 2009-2017, many companies a…

Apps are one risk, but it's an opt-in risk. Telecom companies are also another risk, and much larger one in that, because there is no opt out of location sharing with them. Same wi…

Keeping a log of visitors to your own computing resources is an ethical grey area since when? IP Addresses themselves are most useful for deanonymization/violating privacy when sha…

Is this accurate? If that was the case then interest from savings accounts and CDs wouldn't be taxed at the marginal tax rate as ordinary income is.