ewanm89

Okay, discriminators are randomly assigned unless one pays for nitro, that said they have account creation date on record, so they can do it in order no problem.

The issues are the order they have chosen is not that simple. They are giving verified bots first choice (some of these are questionable), then owners of partnered servers, then discord for business, then it is going by account age.

They have added a clarification to their blog post: "Current Nitro subscribers paying for the ability to customize their discriminator that registered for Nitro on or before March 1, 2023 will also be given early access." Yeah, when early access is in the list I do not know.

Let me be clear, basically the "rolling cipher" is DASH/HLS streaming for automatic quality changing. This has been an argument RIAA has been making since 2016, but outside of the judgement in Germany (which is wrong). All they have had on it are default judgements where no-one has even tried to counter it in court.

Ah, there is a logical fallacy there. That logical fallacy that is just because they reused the same bitkeeper word that they took it from there AND are using it in the same sense. Ultimately this is a strawman, you are putting Bitkeeper's practice and arguments onto git.

Slave is never used once in git documentation, never has been and never will be: https://git-scm.com/search/results?search=slave

1) My server runs nginx on debian squeezy, even using the newer packages for nginx from upstream, they are built against OpenSSL 1.0.1t matching the system version which does not support APNL. So while I have HTTP/2 enabled, neither Mozilla Firefox or Google Chrome can negotiate to even know the protocol is available for use.

2) HTTP2 forces TLS encryption and compression and several other things making it a PITA to debug as one has to first extract the session keys, then decrypt and decompress the data before one gets something readable. What's more wireshark does not yet have the same level of support for piecing together HTTP/2 as it does HTTP 1.1. And even after all that the data is still a binary format.

1) US government should cancel all contracts with Equifax,

2) US government should demand a list of all effected SSNs

3) US government should use pre-breach tax data to issue replacement SSNs to all affected and send Equifax the bill for doing this.

3) US governments should ask the courts to consider any use of a breached SSN on any credit issued after breach date to not be enough evidence alone for any credit recovery processing (basically nullifing any credit after the breach for an affected SSN without the Banks being more careful with regards to identity checks).

Well, it only takes one report to the relevant authority.

Same goes for claiming to be made in most countries when it is not. I'm pretty sure the author/company founder is in France and EU law has quite a few things to say on the matter of misrepresenting goods and services provided. His post is pretty much a confession of such misrepresentation.

"Converting the (VERY analogue) Morse key into a digital device was the next step."

Urm what? A morse key is either on or off, pushed or not pushed, morse code is an on-off keyed digital mode. It is not analogue under any circumstances.

Technically code via SMS is 2FA, it is proving one has access to that cell/mobile phone account either directly or indirectly. I would say it is a terrible authentication system but it is a different factor to something you are (biometrics) or something you know (password/passphrase). However cell/mobile phone accounts are really easily to social engineering access to via the phone companies to send replacement SIM cards for that IMSI, not to mention the encryption to/from the phone has known major flaws (especially pre 3G GSM standards). Far better to use TOTP, HOTP or U2F which are actually designed for authentication purposes rather than have the phone company attempt to do it for you.

If I was Google I would just remember I served add for website for account x but the number on the click was for account y. Real easy to detect.

That is exactly what international maritime law requires. For reference, I estimate the eye height of people on the bridge and watch deck is about 28.5m above the waterline (from a picture of an Arleigh Burke-class destroyer on wikipedia), at that distance the horizon is approximately 19.1km away or a ship higher than that come into view from further away depending on the height of that other vessel which would be substantial for an oil tanker of cargo vessel (which has masts with radar reflectors and navigation lights). Now an Arleigh Burke-class destroyer is listed as having a greater than 30knot (56km/h) top speed on wikipedia, this probably means it is less than 40knot (74km/h), however it is probably not cruising at more than 56km/h so lets assume that is the common cruise speed (which is fast for a ship). So at 56km/h 19.1km takes 20.6 minutes to cover even if the other vessel is going the same speed head on that still gives more than 10 minutes to avoid a collision from when the other vessel was first able to be spotted.

So WTF was that destroyer doing for 10-20 minutes minimum that had it in a collision with another ship?

Right, has the reporter visited China?

No, it is targeting both. I see no mention of how monocypher implementation does anything 5o prevent side channel timing attacks, I haven't looked to see if there is any sensitive memory scrubbing. Of the bugs listed most are performance bugs by someone who doesn't know C very well yet have they done the things actually!my required in a crypto library like attempting to make sure all branches are the same instruction length for all implemented algorithms?

Why lose flexibility and switch to medium in the first place?

The other useful case is when you open project on another machine for some reason and you find your usual editor not installed and configured. Open any editor and away you go with this, for those quick dirty edits. I require all editors installed to be able to read .editorconfig files and use them accordingly.

I would point out it is d because latin typesetters back then often didn't have a greek typeface to print with and it is the closest to the greek letter delta δ. Once one understands it's δx and δy (or Δx and Δy) and today still today most people don't know how to get delta characters on their latin keyboards, then it is easy just to not use d in algebra and use for differential calculus only. Finally (Δx)^2 and Δ(x^2) are the same thing in differential calculus.

Okay so the article is wrong about some points. We have evidence for both IIII and IV notation in classic roman archeological finds. The obvious example is the entrance fee doors around the colliseum in Rome, they're are engraved with numbers, in both forms of notation.

Seriously I figured they used abacus for everything they just figured out the notation to write it down in at the end some would convert to the if notation while others would not.

Okay, here is my attack:

  1. Find drone operators home addresses, information whether they have significant others, kids. Most of this is public or fairly low security information.
  2. Send goon squad to pick up significant other and kids
  3. Send threatening message with proof you have significant other and kids with the correct level of pressure for drone operator to follow your instructions very carefully.
  4. Now disappear. Very quickly, yeah, the military doesn't like to demonstrate that it has glaring weaknesses in their security and tend to send goon squads the other way to solve the issue.

That said, ultimately I proposed a social engineering attack, there are quieter less threatening methods available that could be effective with enough planning. Ultimately the point here is, formal verification can't work, for it to work the model it is verified against must include every possible form of outside influence and the code at all levels must be 100% verified against that model.

So you need to verify everything (including the workstation doing the verification against absolutely every possibility) this is an exponentially hard problem. This is why formal verification is used only in small areas, and why it does not always work, please see the 1990 Arianne 4 launch failure, where while most of the avionics had been formally verified certain data tests had been removed for optimisation and when a sensor fed bad data meant the computer had a bad cast to different data type ditching important information.

All browsers can tell you what certificate signed the one in use. Unfortunately a recent chrome UI change made this a pain to get to.in chrome, into the other browsers just clicking on the lock in the address bar, it soon becomes obvious if the company is mitm all SSL connections.

Assign a fqdn, I log into my router with a domain name, most routers actually have a domain name for them.

Configure the LAN setting of RT-AC68U. Device Name: ghandi

It is pretty easy to manage your own CA, make a Debian VM, install something like XCA and it is literally click a few buttons to generate and issue certificates and set up certificate authority root certificates.

I even do this on my own private network. Installing root certificates is not hard.

1) internal company webapps just install company root cert and create properly signed certs under corporate internal CA. Installing the certificate across network is easily automatable on windows, OSX and Linux. The only issue is Firefox as it uses its own trust store. Any senior admin who can't figure it out with the resources available (plenty of information available online) should be replaced days it is not that hard.

2) with regards to raspberry pi, will anyone who can write code can learn to also create their own CA the only difference is probably no automation of adding to the trust store likely however it is only a 2-3 click install in most cases.

If his customer asks, he doesn't need to do shit if his customer doesn't ask. My recommendation would be do what the likes of Toshiba do for their TVs include in the product an offer with an email address on some hidden copyright page.

What does "Google Home" speaker usually do when there is no clear result? On the phone google assistant just displays google search results in such a case, obviously that can't work on the "Google Home" speaker.

No, but under Lenz Vs. Universal a take down under the DMCA must considered in a subjective fair use analysis before being issued. This sounds like it wasn't done. As for how much of something allowed to be reused the law states the minimal amount needed for the critique or parody, if this is the whole thing as is sometimes the case in an image then that is something for a judge to decide.

My reply would probably be something like this, after checking it with a copyright lawyer:

Dear whomever it may concern at Zillow group,

As you do not have rights to the images are you authorised on behalf of the rights owners to issue DMCA take-down requests under title 17 of the United States Code under penalty of perjury?

Should this be the case I suggest you read Lenz v. Universal Music Corp., 801 F.3d 1126 (2015) in the 9th circuit which has just been refused certioari in the US Supreme Court (2017-06-19).

If you wish to continue this matter please submit a properly worded DMCA take down request.

Regards, ....

P.S. If you do continue this matter you obviously didn't read Lenz Vs. Universal and therefore I'll see you in court.

We have very strong regulations about political advertising in run up to elections in this country, such a track could easily fall under such regulation. I doubt any major organisation wants to take the risk.

Well, if you look in the options you'll find Firefox actually does have an option whether to accept all cookies, only first party, no cookies or always ask. Chrome also has an option to deny all cookies, third party cookies or accept all (no ask here).

Amazon aren't allowed to store the CVV so transactions via their one click ordering has to be CVV less. The store gets lower fees on CVV transactions, but it has never been required.