Viewing profile — paddlepop

This. As a platform, where do you draw the line between offering a product vs not because a developer could do something stupid with it? edit: keeping in mind the use cases they ar…

>> My question to those who support big brother any lawful but awful speech is - do you really think it won’t be used to silence any dissent of the ruling powers? My question to th…

I recommend you read the FAQ for the implications. And as homework for the reader, consider the banlist is a bloom filter

>> Being decentralized means no single party controls it I suggest you have a look at how many people are allowed to merge bitcoins PRs in github

I call this the "Vulnerability view" instead of a "Remediation view" and its something I feel a lot of Security people and tooling gets wrong when sharing information with those ou…

For project maintainers, yes absolutely Monero. But then either only ever use Monero for everything (like pre-2013 bitcoin), or exchanges will need the will to "proof" the source o…

I think mainly that I do not envy the lawyer that has to make the service argument. We could get lost in the technical details of why it is or isn't a service but ultimately they o…

That's exactly what I mean, its the service that is getting sanctioned. The people that "knew and didn't do enough to stop it" will be arrested. My meaning of "code is just code" a…

As someone else has stated elsewhere in this discussion, I don't think GitHub have much to worry about. Tornado Cash the service was sanctioned, and MS would choose to censor the r…

Person that has worked on the defensive side of Money Laundering here. The Tornado Cash sanction has been fascinating to watch and my key takeaway has been that there are two camps…

This is a build deployment perspective. I for one do not miss hosts never being patched because all those slight modifications to systems files that were tweaked several builds ago…

The only novel benefit, as you say, is "decentralized trust". The blockchain portion of the NFT in most cases is simple a pointer to the asset and the owner, with the actual asset …

I still don't understand why this needs to be decentralised? > without having to solely trust the company issuing the nft ticket For the transaction yes, but what about the thing y…

...and they are? I think the subtext that is implied with the no use case statement is really: "that couldn't be done with an existing technology (such as a database)".

This is called the Ferber method and it worked very well for us as well. Note to others considering using it, the method is just as much about the ritual leading up to sleep (bath,…

A clinical consensus on whether addiction is a choice? Perhaps you are thinking of a clinical consensus on how best to treat addiction? This is often glossed over by the "addiction…

I will admit to not being a fan of FB also, but discouraged by the number of Slippery Slope arguments on this piece.

Observation: A number of external repos are having malicious looking repositories being created with the pattern ";[6 alphanum] [4 alphanum]([4 num]) r7kK(9626) All appear to be ru…

MITREs response to this is a perfect example of the old-school security team mindset. If I had a nickel for every security team I've worked with that a) treat reporting as gospel a…

This doesn't work so well for video games. Reviews come out saying its thin on content with a score to match and can kill a game before its had a chance to expand. Developers have …

From my experience the issues with this study have been well known for a long time. A first year Psychology paper I took over 10 years ago was at pains to point out the flaws in th…

I highly recommend pentesterlab.com. The Web for Pentester course is a great intro for first timers if you read the PDF and play with the VM When training newbies I will start with…

I'm not sure what in that quote isn't covered in the parent argument. Unless you are suggesting that Apple have never been guilty of following others popular design trends.