News for hackers. Stuff that matters.

Eli_P

> editing it on a computer, and then "printing" it back out to a DNA molecule

That's kind of what Novavax claims, search for the interview with David Rubinstein on WEF. NVAX wants to print short fragments of virus's proteins, so the resulting vaccines supposed to be safer than those made by working with live viruses.

I use open source app Nebulo[1] which is a localhost pseudo-VPN which reroutes all DNS to any DoH/DoT you want. It also has a request log, I was (not very) surprised when it came my default file manager connects to facespace when I don't have any account there.

The bad news is, GPS still turns on on its own and camera seem to click sometimes </tinfoil>

[1] https://play.google.com/store/apps/details?id=com.frostnerd....

Accessibility utils like screen readers do OCR and read aloud the content for blind people.
All correct. It's just important to remember who's the attacker:

  Alice -- ISP1 -- 1000 hops -- ISP2 -- Bob
Alice and Bob's identities are protected from each other, but not from the govt because ISPs collect metadata.
Yes, overlay network's configuration will be somewhat different, but physically it will be the same. It's like you're rearranging apple bits in a pie to save them; the pie will be sliced and eaten anyways.
I doubt the number of nodes is important when you can split a large group of them into a few subgroups and analyze them or alter how they interact with each other, then repeat subdivision; because again, them overlay networks are like smaller sandboxes inside the big one.
> I wonder why there are so few people

Maybe because people understand that it's security model is flawed: the peers in the mesh treat all the other peers as not trusted, that's okay; but the network design doesn't seem to take into account potential hostility of the physical medium itself.

Say, your ISP can tarpit packets or shape traffic, or shut down the power or cell tower in your block temporarily, and then measure how the mesh congestion changed. At the same time the mesh relies on building hop chains with TTL of 10 minutes iirc, which I think makes a peer a sitting duck. It is (was) all documented/leaked.

Huh, your imaginary city reminisces one in The Murderer by Ray Bradbury.
Re:YouTube-dl has received a DMCA takedown from RIAA on Saturday October 24, 2020 @09:09AM (#24878976)
> Abolish copyright

If they did, it'd be still complicated. A real example, a modder makes some content for an old abandoned game. He needs some voice over, so he contacts the original voice actors, but they deny to do that job on the grounds of being a member of org like this[1] which strictly prohibits to take side jobs.

And to make it even more complicated, consider tools like for making deep fakes; if somebody makes a neural network that emulates the original voice, should it be sub-licensed or copyrighted? Can a voice be copyrighted?

[1] https://en.wikipedia.org/wiki/SAG-AFTRA

Re:The High Privacy Cost of a “Free” Website on Wednesday September 30, 2020 @09:58AM (#24638743)
> I don't fully grasp what privacy is

> people like me find it hard to quantify what that thing is

Privacy is [REDACTED]. Intelligence is not privacy.

Recently I cleaned some olde books I don't need anymore and there were a bunch of them on info security, so I skimmed them good bye, and they all stated the same vague definitions like no one knows what privacy is, there's no agreement, etc.

Actually there're definitions of privacy and intel, they are just sad and unethical, hush shush.

It seems like the context is built with a simple bag of words model. One day I searched "how to make a mousetrap", the following day I got a recommended video about statistics, where the author explains something on a mouse population, and says "mouse" many many times.
> that increased exposure to any porn has effects on attitude

What does your research say about the fixation of that attitude? Is it like, forever and ever? How those effects compare to watching martial arts, war footage from the news, movies etc?

Isn't it just a Pavlovian response training thing? Before the age of 25 people are more susceptible to learn or relearn, and some are just born (and exacerbated by insane upbringing instead of proper diagnosis and meds) with predilections.

> but the effects are more pronounced with violent porn

Sure, and if they had a fist fight behind a school, a kiss, a cigarette, a caffeinated drink and listened to violent music in a short time they'd probably had a heart attack.

Your conclusion reminds of witch-hunt-approving arguments like, violent games make kids violent. Which is moot, Take for example Children's Crusades[1] in 13 century, which was induced by religion and politics. Or, I know some parents who watched a documentary about how a talented musician was raised with beatings, so they took that literally, you know what I mean? Sick ideas find a fertile ground.

Btw did you watch that Black Mirror episode "Arkangel", seems related. Or The Alienist by Caleb Carr, the book and series, about underage male prostitution in 19 century, the plot is based on real life, sort of.

[1] https://en.wikipedia.org/wiki/Children%27s_Crusade

Re:Microsoft duplicates data from Firefox without asking on Thursday June 25, 2020 @01:13AM (#23637138)
It's not that easy. Take into consideration spreading of sensors like light/water/gas/sewerage meters, which report measurements to a central SCADA. I touched that around a decade ago, I had to build link with the meters with AT commands through GSM with modbus protocol on top of that.

These days it's a grown-ass market with competition and much more advanced toys involved. You turn on water, they know timings and how much you used. You use more electricity, they call you to suggest a different plan. You used drugs and flushed, they find metabolites in sewerage sensors (I heard that on news, dunno maybe bs).

So I think it's basically about bills; cameras in toilets are different market.

Re:I Just Hit $100k/year On GitHub Sponsors on Wednesday June 24, 2020 @01:19AM (#23624371)
High entropy edition: with RSA padding, signed by famous cryptographers.
Re:I Just Hit $100k/year On GitHub Sponsors on Wednesday June 24, 2020 @12:41AM (#23624169)
> the protections of an LLC

Won't protect one guy or a small team in case of legal disputes, it's called piercing the corporate veil. I wonder if the EU has something similar.

Re:DuckDuckGo, Google, and Android choice screens on Monday June 08, 2020 @01:28PM (#23458608)
What's interesting, does that strategy end like: less effective ads -> need more of them -> raise ad price + show more of them?

Another thing is regarding k-anonymity which I suppose privacy-first guys would use. If I gather user info with a high entropy, I don't have an incentive to sell it to anybody and create a competitor, and it'd probably illegal to do that. But if I anonymize the data set into a k-anon data it's now less restrictive to sell from legal point, also I'll probably sell that data to third parties just to make ends meet.

For entities whose behavior fit their model, it's called negative selection[1], a mandatory attribute of emerging dictatorship.

[1] https://en.wikipedia.org/wiki/Negative_selection_(politics)

Re:Google tracks individual users per Chrome installation ID on Tuesday February 04, 2020 @10:00PM (#22243619)
If I use a bunch of older Chromes from portableapps, are those affected by feature testing, provided I've disabled google update but I'm not behind a firewall?

In other words, is feature polling just hard-coded or it is bound to a specific installation?

You might be a visual kind of person, those make a good mathematician.

After a decade of experience I happily dump all the boring stuff to type checkers and linters.

One day in the morning I was being in a state of half dreaming - half awake, and among other closed-eyes visuals I observed a series of white screens (sort of 80x25), filled with the same digit, like all zeroes or all threes.

I don't know if those were the layers of my brain's NN responsible for recognizing texts. But I generally suck at visual navigation: I don't rely on code-minimaps, scroll-bars, I don't remember if that particular function is above or below. I use tools like quick-jump, fuzzy search, I just need to run a thread of interest through my mind and recall instantly what to search.

Re:Congrats! Web scraping is legal! (US precedent) on Wednesday January 29, 2020 @04:17PM (#22185938)
The link you gave, says (sic):

> Sign up now for free access to this content > [...] > Email (NOTE: Free email domains not supported)

I think this sort of antinomy[1] sounds ironical especially in this thread. This is practically legal dependency injection pattern, when you call something free, then administer antinomies, catches-22, etc.

[1] https://en.wikipedia.org/wiki/Antinomy

Re:Switching from Chrome to Firefox on Tuesday December 31, 2019 @02:27AM (#21919529)
> in the devtools console

Wow, you are right, thanks. Lesson learned.

Re:Switching from Chrome to Firefox on Monday December 30, 2019 @07:09AM (#21912772)
I found it interesting how Chrome and FF handle differently cpu-heavy code like this:

    arr = new ArrayBuffer(4)
    arrInt = new Uint32Array(arr)
    t0 = performance.now(); for (; arrInt[0] <= 1000000000; ++arrInt[0]) {} ; 
    performance.now() - t0
On Windows it takes 2.5 secs even on old chrome versions, while it never finishes on the latest FF. The latter's call stack says firefox.exe!TargetNtUnmapViewOfSection(), xul.dll!get_stored_pointer. I wonder if that happens on other platforms?

Update - on my Android: Chrome: 7.5 secs, forever on FF. Weird. If I say a var is typed it should work faster.

Re:38 People are looking at this post right now on Sunday October 20, 2019 @10:53PM (#21308979)
I'd pitch that to the board like the algorithm was just smart enough to detect the partial activity coefficient ranging in [0, 1].
Re:Match.com Used Fake Ads to Swindle Users, F.T.C. Says on Thursday September 26, 2019 @07:15AM (#21079873)
Dating apps today are more like gambling with your time. Its mechanics is pretty same as for lottery game, so it will generate profits for the same reason all scams do with our primate brain. Monkey gives a banana now and expects 10^6 bananas later.

Last time I used Tinder they seemed to make a right move towards video chats. If I were to develop a dating app, I'd incorporate vid chat as the only way to communicate. Ain't streaming video of yourself atm -- you don't exist at all, can't be found or swiped on. Procrastination & waste of time -> 0.

Also real-time video basically renders any account validation unnecessary because all Photoshop guys/gals went to learn neural networks and how to implement DeepFake face replace.

Re:Trusted Types Help Prevent Cross-Site Scripting on Wednesday September 25, 2019 @10:44PM (#21077674)
There's another issue with Unicode: the same string can be encoded in many ways, which affects at least collation. On server side I deal with it with normalization[1]. I'm sure I can do it on the client with js but that just doesn't feel right.

While rendering unsafe content still can be useful, I think Google better off added trusted-types as a tag attribute for WebComponents, like per-component CSP, and not into CSP header.

[1] https://docs.python.org/3/library/unicodedata.html#unicodeda...

Re:Our Brains Are Not Multi-Threaded on Friday September 13, 2019 @08:20PM (#20967998)
Listen to Terence McKenna's recordings where he describes tripping experience, or somebody doing DMT, or Michael Stevens doing ayahuasca. Maybe all these observations are anecdotal and not scientific, but it feels like ideas and thoughts live their own lives inside neocortex.

Our brain's potential is harnessed with reptile and mammal tasks which are more asynchronous than parallel. Even if we could overclock ourselves into massive parallel thinking it would have ended up with oxygen or glucose deficit. And mind overheating, whether cpu is made from silicon or grey matter, there's a limit for FLOPS per joule.

Re:Anna Karenina Principle on Saturday August 31, 2019 @06:38PM (#20849251)
I mean family is a structure built on top of real human beings. Social structures are real while everybody trusts in them, same as how any belief system works, money, etc. Even the definitions of family are different in various cultures.

What it means in real life, the happiness of family is not a sum of everyone's, but some sort of compromise.

> Web 2.0 brought none of the democratization it promised

It introduced formula "If you're not paying for a product, you are the product", while in old world model delivery of value is more about givers/takers ratio.

Re:Anna Karenina Principle on Saturday August 31, 2019 @04:01AM (#20845155)
It's hard to understand how family as an abstract entity can be happy. If we don't have some metric of happiness for one, how can we add it up?

If abstract happiness existed it would be incomprehensible, like consciousness in China brain[1] thought experiment. Or such happiness would be observable for all but this particular family, i.e. show-off happiness. The latter is a punchline in Dostoevsky books.

[1] https://en.wikipedia.org/wiki/China_brain

Older »