News for hackers. Stuff that matters.

bhitov

Re:The Darker Side of Aaron Swartz (2013) on Thursday December 30, 2021 @11:28PM (#29744910)
> Read the Abelson report (which has been discussed ad nauseam in past HN threads). MIT did not want Swartz prosecuted, and told the prosecutor that.

from the Abelson report (pg 53, https://swartz-report.mit.edu/docs/report-to-the-president.p...):

"With regard to substance, MIT would make no statements, whether in support or in opposition, about the government’s decision to prosecute Aaron Swartz"

Am I missing something? Been a while since I read the report in full.

"While MIT did not conform precisely to this rule, in this sense of similar responses MIT—broadly speaking—did not side with the prosecution, nor did it side with the defense. In consequence of the differences in the powers, timing, and goals of the two parties in the case, neutrality in responses was not consistent with neutrality in outcomes, and MIT was not neutral in outcomes."

I agree that MIT was not trying to make an example out of him. But it wasn't that "they didn't push back harder on the prosecutor", it was that they didn't push back at all. The Ableson report correctly criticizes MIT for this.

Re:Prediction Markets Beat Polls on Tuesday November 17, 2020 @09:25PM (#25132493)
Other way around. 10% profit 5% withdrawal.
Re:PrlConf 2016 is cancelled on Saturday March 26, 2016 @01:25AM (#11364560)
I read the entirety of his AmA and did not once see him "advocate for slavery". Could you directly link to where he does and quote him?

for reference: https://www.reddit.com/r/IAmA/comments/4bxf6f/im_curtis_yarv...

Re:Amazon Sues Fake Reviewers on Fiverr on Sunday October 18, 2015 @09:55AM (#10408219)
> Third, we have already accepted that our design is vulnerable to end-to-end timing attacks https://blog.torproject.org/blog/one-cell-enough

They are not talking about the same kind of timing attacks. Deanonymization attacks require vastly less latency consistency.

Re:Of Money, Responsibility, and Pride on Sunday April 13, 2014 @06:27PM (#7583383)
> This is the wrong funding model.

It's only the wrong funding model if there is a superior alternative. It's a non-ideal funding model, but as is the main point of the article, they are and have been actively looking for alternative sources of funding without success. I hope your gripe is not directed at OpenSSL but at those who could be supporting it financially.

Re:The Other Side of Depression on Friday April 04, 2014 @04:07PM (#7533986)
They absolutely do not use the same language. Where did you see that?

>Notice that it didn't say, "Academics disregard the chemical balance explanation because it lacks evidentiary support."

A lack of explicit critique in a rephrasing on wikipedia should not be used as evidence.

The cited article for that sentence (http://www.medscape.com/viewarticle/516262) is from 2005 and includes the following:

> Numerous studies to identify reproducible changes in neurotransmitter levels in the cerebrospinal fluid of clinically depressed patients, or to induce or correct depression by manipulating brain serotonin levels, were inconclusive and fraught with methodological limitations.

> Gordon McCarter, PhD, an assistant professor of biological sciences at the College of Pharmacy of Touro University in Vallejo, California, agreed that the evidence for an "imbalance" in neurotransmitters causing depression is "circumstantial" and "more and more tenuous." He noted the dearth of studies showing any measurable difference in serotonin or norepinephrine between depressed patients and controls

> "The Diagnostic and Statistical Manual of Mental Disorders does not list serotonin as a cause of any mental disorder; it is simply one neurotransmitter that continues to be investigated. And the prescribing information for the SSRIs does not claim that their mechanism of action is to correct a chemical imbalance, although this is exactly what the advertisements claim."

> "We suspect that many consumers believe the serotonin theory to be more scientifically based than it is, and that they might have chosen an alternative approach to their distress if they were fully informed.

Re:The Other Side of Depression on Friday April 04, 2014 @12:40PM (#7532587)
I didn't say it wasn't an oversimplification, I said oversimplification isn't the problem. You seemed to misunderstand the complaint of the first post you replied to.
Re:The Other Side of Depression on Friday April 04, 2014 @11:43AM (#7532116)
I assume when you say SSRE you are talking about tianeptine? Its affinity for SERT is low and its primary target is believed to be elsewhere.
Re:The Other Side of Depression on Friday April 04, 2014 @11:36AM (#7532047)
The problem wasn't that 'medications help to balance out those chemicals' is an oversimplification, it's that the theory doesn't have a lot of support. The evidence for the monoamine hypothesis is far from conclusive. I agree with the parent that 'chemical imbalance' is a PR line if stated as a medical truth. (I am only commenting on the class of medications mentioned in the article)
> That Mozilla is and remains a place where any employee can express their views on political issues, even if they know they're contrary to the CEO's. And that destroys any argument for Eich's role as CEO creating a conflict with Mozilla's ability to welcome LGBTQ employees and community members.

Not that I necessarily think having Eich as CEO would make Mozilla unable to welcome LGBTQ employees, but this argument is absurd. It is not at all difficult to imagine a rule set that permits free speech while still discriminating against LGBTQ employees in some other way.

Agreed. It would be entirely uncharacteristic of the supreme court to make such a broad ruling.
Re:Off-the-Record Messaging Protocol v3 on Monday February 17, 2014 @05:51PM (#7255066)
Much appreciated =). I looked for references after reading the parent discussions and xnyhps's blog post but was unsuccessful.
Re:Off-the-Record Messaging Protocol v3 on Monday February 17, 2014 @05:20PM (#7254916)
> The current state of the art puts the precomputation step at complexity L_n(1/3, 1.923)§, and additional individual discrete logs at L_n(1/3, 1.232).

Could you cite that? Not skeptical, just interested.

Re:The Facebook Comment That Ruined a Life on Thursday February 13, 2014 @04:49AM (#7230464)
> So I'll start by playing Devil's Advocate very briefly. It's interesting how facts can be shaped with different language ("his only brush with the law"): it appears the restraining order from two years prior related to similar threats to those alleged in the Facebook comments (although in a remarkably different context).

IANAL but I'm reasonably confident that a restraining order he received as a minor would not be admissible as evidence in this case, and thus should be irrelevant to the prosecution.

Re:New Jersey slaps MIT Bitcoin hackers with subpoena on Thursday February 13, 2014 @01:58AM (#7229942)
The javascript miner was not deployed anywhere. At no point was anyone in New Jersey knowingly or unknowningly served Tidbit's bitcoin mining code.
Re:Losing Aaron: Bob Swartz on MIT's role in his son's death on Friday January 03, 2014 @05:37AM (#7004831)
As explained by the director of the Media Lab:

"Apparently a grand jury is meeting to render an indictment on Wednesday and there is really only one more day to provide any input into the process. Since it is a criminal case and the prosecutor needs to prove beyond reasonable doubt that it was unauthorized, I think MIT is in the position to “cast doubt” if it desires."

Re:The case against Kim Dotcom, finally revealed on Monday December 23, 2013 @08:05PM (#6957664)
> straw man argument

In what way is it a straw man argument?

> copying software is not zero sum.

This doesn't seem to contradict the parent post, nor affect its argument.

Re:Crowdsourcing a More Secure Future on Sunday December 22, 2013 @10:00AM (#6950455)
>they're literally paying people to like their product

I don't think this statement is reasonable. Are you suggesting that they gave the 100k reward out because they wanted the recipient to like their product?

>Now they're throwing money at him. How is that in any way a good thing?

I think bug bounty programs have a track record of efficacy. Do you disagree?

Re:Crowdsourcing a More Secure Future on Sunday December 22, 2013 @09:45AM (#6950412)
I understand that you care about Telegram and want to defend it when it is attacked, but comments like this are inappropriate and will damage Telegram's reputation.

It is unfair to imply incompetence on tptacek's part given only that he spent some finite amount of time looking at your protocol and did not find the nonce vulnerability. It is also unfair to say that he didn't find any vulnerabilities despite the potential for a 100k reward as the potential for such a reward (outside of your specific contest) had not been stated clearly.

If you do in fact have evidence that tptacek was involved in RSA's deal with the NSA, you should state your accusations explicitly and provide that evidence. If you do not, I think the accusation is inappropriate and certainly counterproductive.

That said, I very much appreciate the resources you are donating to open source crypto software. It is undeniable that the potential for a 100k reward will send a lot of eyes to your source code. I would encourage you to also consider hiring a security firm (US based or otherwise) and to consider how your comments will affect public perception of Telegram.

Re:Crowdsourcing a More Secure Future on Sunday December 22, 2013 @08:35AM (#6950239)
Vulnerability to passive attacks is worse than vulnerability to active attacks. I'm not downplaying the severity of a MITM vulnerability, but certainly there could exist more serious issues.
Re:Alcohol without the hangover? on Sunday November 17, 2013 @07:24PM (#6751747)
With absolutely no specifics this article is useless.
For those of you in the Cambridge area, he will instead be giving a talk at MIT tomorrow.

'DISSECTION: A NEW PARADIGM FOR SOLVING BICOMPOSITE SEARCH PROBLEMS'

https://calendar.csail.mit.edu/events/116296

I don't think this is what did him in. Posting advertisements for silk road [1] and then posting his personal email address [2] from accounts with the same name seems the more likely cause.

1) http://www.shroomery.org/forums/showflat.php/Number/13860995

2) https://bitcointalk.org/index.php?topic=47811.msg568744#msg5....

Re:Flutter: $20 Wireless Arduino with 1 km range on Wednesday August 28, 2013 @07:45AM (#6289225)
Did you consider using the ATAES instead of the ATSHA? It has onboard authenticated AES (AES-CCM).
It is hard to get tone over the internet, but I hope you understand why your example is incredibly far removed from a device that meaningfully interprets EEG data and uses that data to stimulate the motor cortex with a TMS machine.

What do you consider breaking new ground? It was their goal to demonstrate the concept of human brain-to-brain interfacing. If it had not been done before, it seems to count as 'new'. What about the headline did you find misleading?

Re:Mailpile – taking e-mail back on Wednesday August 21, 2013 @03:03AM (#6248642)
That is not correct. There can exist flaws that cause loss of entropy that do not entirely compromise a cryptosystem.
Re:No, really—consciousness is worth thinking about on Monday August 12, 2013 @06:41AM (#6198545)
You are assuming that the "feeling" of pain is inherently different from neural activity during pain. He is saying that to do so without argument is special pleading.
Re:No, really—consciousness is worth thinking about on Sunday August 11, 2013 @09:20PM (#6197145)
This article is attacking a strawman. The original article was dismissed not for merely discussing consciousness but for doing it nonsensically.

Older »