[-] riskable@programming.dev 89 points 4 months ago* (last edited 4 months ago)

The real question: Why didn't she just make a new Discord account? It's free and stupidly easy.

It's not that hard to contact your old friends and tell them your account was hacked. In fact, that happens all the time.

[-] riskable@programming.dev 87 points 7 months ago

Comcast—in the top ten of the shittiest companies of all time that no one wants to have to deal with—is surprised that their "new" deal of, "be slightly less villainous, and expect all our problems to go away" isn't working.

[-] riskable@programming.dev 86 points 8 months ago

It's not a big deal. It's silly and hilarious. Own it 😁

[-] riskable@programming.dev 84 points 11 months ago

Terry Pratchett nailed it in The Color of Magic.

Twoflower was a tourist, the first ever seen on the discworld. Tourist, Rincewind had decided, meant 'idiot'.

[-] riskable@programming.dev 89 points 1 year ago

If they're proper mermaid tops they can be expensive though. You'll have to really shell out for them.

[-] riskable@programming.dev 90 points 1 year ago

This just proves that Google's AI is a cut above the rest!

[-] riskable@programming.dev 94 points 2 years ago

Actually, the remedy Social Security needs is to remove the income cap. Elon Musk pays just as much into social security as I do: ~$10,900

It's because there's a cap: $176,100. Once you earn that much in income you don't have to pay into social security anymore! It's ridiculous!

Basically, the richer you are, the less you're paying into social security as a percentage of your income. It's the opposite of progressive (just like HSAs).

Remove the cap and people like Musk will be paying millions into Social Security every year. It'll make it solvent again in no time at all.

[-] riskable@programming.dev 92 points 2 years ago

Says the guy that won't allow Meta Quest developers the same level of access to their own hardware. Example: How would someone develop a 3rd party controller for the Quest VR headsets? You can't. They haven't exposed that API (or the cameras fully!).

They don't even let you set the clock on your Quest headset! Need to change timezones? Factory Reset

[-] riskable@programming.dev 87 points 2 years ago

At least they're open about it: The entire point (according to them) is attrition. The actual plan is to make work for these people much more hostile so they quit.

[-] riskable@programming.dev 89 points 2 years ago* (last edited 2 years ago)

Here's how it's going to go:

  • Pentagon will put up enormous resistance because of cost and impractically.
  • Pentagon officials will be fired left and right because, "they can't get stuff done."
  • Eventually enough competent people will be replaced with loyalists then they'll actually start kidnapping immigrants and placing them in facilities that were never meant for large amounts of people.
  • American citizens that look like the conservative enemy of the day will be kidnapped along with legal and illegal immigrants.
  • The US government will get sued over and over again for fucking up basic shit like "accidentally" kidnapping Black/Asian/Latino Americans and even simpler things like keeping people fed (because the Trump administration doesn't care about competency; only loyalty; or these people, for that matter).
  • Countries will refuse to accept the sheer number of people (same exact problem Hitler had!) leading the Trump administration trying to come up with "solutions".
  • They'll force the kidnapped people to do traditional prison work. Except there's not enough demand for that many license plates so they'll switch to literally selling their labor, allowing Trump's personal circle of rich friends to profit at their expense.
  • Due to unbelievable levels of sheer incompetentcy that won't work out so near the end of Trump's term--when he's panicking about having to face justice again--he'll attempt to implement a more, "final solution."
[-] riskable@programming.dev 89 points 2 years ago* (last edited 2 years ago)

This is a, "it's turtles all the way down!" problem. An application has to be able to store its encryption keys somewhere. You can encrypt your encryption keys but then where do you store that key? Ultimately any application will need access to the plaintext key in order to function.

On servers the best practice is to store the encryption keys somewhere that isn't on the server itself. Such as a networked Hardware Security Module (HSM) but literally any location that isn't physically on/in the server itself is good enough. Some Raspberry Pi attached to the network in the corner of the data center would be nearly as good because the attack you're protecting against with this kind of encryption is someone walking out of the data center with your server (and then decrypting the data).

With a device like a phone you can't use a networked HSM since your phone will be carried around with you everywhere. You could store your encryption keys out on the Internet somewhere but that actually increases the attack surface. As such, the encryption keys get stored on the phone itself.

Phone OSes include tools like encrypted storage locations for things like encryption keys but realistically they're no more secure than storing the keys as plaintext in the application's app-specific store (which is encrypted on Android by default; not sure about iOS). Only that app and the OS itself have access to that storage location so it's basically exactly the same as the special "secure" storage features... Except easier to use and less likely to be targeted, exploited, and ultimately compromised because again, it's a smaller attack surface.

If an attacker gets physical access to your device you must assume they'll have access to everything on it unless the data is encrypted and the key for that isn't on the phone itself (e.g. it uses a hash generated from your thumbprint or your PIN). In that case your effective encryption key is your thumb(s) and/or PIN. Because the Signal app's encryption keys are already encrypted on the filesystem.

Going full circle: You can always further encrypt something or add an extra step to accessing encrypted data but that just adds inconvenience and doesn't really buy you any more security (realistically). It's turtles all the way down.

[-] riskable@programming.dev 85 points 2 years ago

The base assumption is that you can tell anything reliable at all about a person from their body language, speech patterns, or appearance. So many people think they have an intuition for such things but pretty much every study of such things comes to the same conclusion: You can't.

The reason why it doesn't work is because the world is full of a diverse set of cultures, genetics, and subtle medical conditions. You may be able to attain something like 60% accuracy for certain personality traits from an interview if the person being interviewed was born and raised in the same type of environment/culture (and is the same sex) as you. Anything else is pretty much a guarantee that you're going to get it wrong.

That's why you should only ask interviewees empirical questions that can identify whether or not they have the requisite knowledge to do the job. For example, if you're hiring an electrical engineer ask them how they would lay out a circuit board. Or if hiring a sales person ask them questions about how they would try to sell your specific product. Or if you're hiring a union-busting expert person ask them how they sleep at night.

view more: ‹ prev next ›

riskable

0 post score
0 comment score
joined 3 years ago