261–270 of 316 posts
Is it possible that China is actually gleaning foreign IP from Zoom customers?
Should ICANN give each assigned IP block a flag to indicate whether it's capitalist or communist, so vendors can connect more carefully?
Earlier quoted context omitted.
While you wait for his response: https://www.newyorker.com/news/letter-from-silicon-valley/th...
At first, the site attracted about sixteen hundred daily visitors, and Graham moderated and maintained it himself. Today, around five million people read Hacker News each month, and it’s grown more difficult to moderate. The technical discussions remain varied and can be insightful. But social, cultural, and political conversations, which, despite the guidelines, have proliferated, tend to devolve. A recent comment t…
Earlier quoted context omitted.
I’m not arguing that. I’m saying that for compressed data , underlying patterns in data aren’t trivially exposed by ECB. Ergo, the “tux” attack on bitmap image files doesn’t really apply here. I meant nothing more and nothing less than that.
And I'm saying that they aren't just sending compressed data, nor would hardly any practical communication application, which makes the "well maybe they have enough entropy that it doesn't matter?" argument moot.
Earlier quoted context omitted.
>The site’s now characteristic tone of performative erudition—hyperrational, dispassionate, contrarian, authoritative—often masks a deeper recklessness. Ill-advised citations proliferate; thought experiments abound; humane arguments are dismissed as emotional or irrational. Logic, applied narrowly, is used to justify broad moral positions. The most admired arguments are made with data, but the origins, veracity, and…
Would still be interesting if someone could train language / interaction model on different years of hacker news to see how a certain topic would be discussed differently over the years.
Earlier quoted context omitted.
At first, the site attracted about sixteen hundred daily visitors, and Graham moderated and maintained it himself. Today, around five million people read Hacker News each month, and it’s grown more difficult to moderate. The technical discussions remain varied and can be insightful. But social, cultural, and political conversations, which, despite the guidelines, have proliferated, tend to devolve. A recent comment t…
>The site’s now characteristic tone of performative erudition—hyperrational, dispassionate, contrarian, authoritative—often masks a deeper recklessness. Ill-advised citations proliferate; thought experiments abound; humane arguments are dismissed as emotional or irrational. Logic, applied narrowly, is used to justify broad moral positions. The most admired arguments are made with data, but the origins, veracity, and…
Someone needs to do a deep cognitive study of how memes, especially in image form, affect cognition during discourse. Whatever is going on it seems obvious that their presence immediately reverts people to a juvenile junior high level of discussion at best.
They also seem to lead to the development of this kind of obscure signaling culture hive mind. I don't even know how to describe it. In Star Trek TNG they called it the "borg songs," the sort of emotional-cultural carrier wave that pervaded the Borg collective.
Meme-dominated sites like 4chan immediately turn me off. I find that whole style creepy and culty and gross and it feels like some kind of soft mind control technique. I felt this way long before 4chan became "Stormfront for nerds," but the fact that this style if discourse would create an environment compatible with that way of thinking doesn't shock me at all.
Earlier quoted context omitted.
And I'm saying that they aren't just sending compressed data, nor would hardly any practical communication application, which makes the "well maybe they have enough entropy that it doesn't matter?" argument moot.
Literally nobody is making that argument or in any way suggesting that ECB is a great choice. Just that this one specific attack doesn’t apply.
Earlier quoted context omitted.
Everything that isn't authenticated (like CTR mode, which is what was supposedly "recommended" here) admits the potential of an oracle attack, so what's interesting to me here is what's distinctively bad about ECB in this setting. And: I'm not saying ECB is OK in this setting. I'm saying "it's not PenguinVision simple" and "what makes it not OK is probably interesting". You know more about the codec situation here th…
> CTR mode, which is what was supposedly "recommended" here Where are you getting this recommendation? Who recommended it - to Zoom? And when? > You know more about the codec situation here than I do. So, you tell me! What should I be looking at? If you're prepared to be at least slightly interested in problems even if ECB only contributes rather than blowing them wide open, then maybe you should look at H.264 I-fram…
Isn't an important part of the argument that the point the penguin 'makes viscerally' is actually an extremely narrow, relatively uninteresting one? It tells you something like 'certain types of synthetic images represented entirely uncompressed in the spatial domain are obviously super leaky when ECB-mode encrypted'. Which, you know, neat but nobody does that.
It seems extra-uninteresting compared to things like 'plaintext can be recovered from encrypted realtime VBR-encoded audio'.
In that context 'I-frames might be both identical and magically align' seems even more contrived than the already more-famous-than-informative penguin.
The serverside key handling stuff is bad, but generally known (Zoom has features whose natural implementation require them to keep keys serverside). People are dunking on Zoom for rolling their own crypto and coming up with AES-128-ECB. This is also bad, but people should be aware that it's a lot more complicated than "you can see penguins through it". You can see penguins through an ECB-encrypted bitmap because disc…
Screen sharing a presentation is problematic; lots of discrete blocks of bitmap image being repeated.
Earlier quoted context omitted.
People are political animals. The only way to avoid politics is to avoid people. Not exactly a workable proposition if you want to change the world with a billion dollar unicorn.
So, if we can not avoid politics it is ok to encourage some views while discouraging the opposite views? How can we know for sure we are right or even on the good side, whatever "good" means?