FastEatSlow

I haven't had issues with let's encrypt with them in the last 2 years, though I do recall seeing free SSL promotions and never a certificate.

An alternative Microsoft Teams client. It's cool because it doesn't warm your computer as the official client does. (https://www.opercom.co.uk/) the website needs a complete revamping and the UI is being changed to be more modern.

I second this, primarily because I was chuckling the entire time there. Czech is quite funny to Polish speakers [1].

[1] http://wiedza-jest-super.blogspot.com/2018/10/smieszne-czesk...

This certainly looks scary, but it's a bit difficult to understand right now even with their explanations, hopefully this bill will have more attention.

Avoid buying a GrapheneOS phone being advertised specifically for privacy with encrypted chat. They are specifically for selling to criminals, be it from a government or an enterprising young adult.

Many people have tried to pay me to make them a custom ROM based on GrapheneOS but with their name and reskinning notepads and encrypted chat apps. They'll claim it's for privacy-focused businesses of course.

IP over Avian Carriers https://datatracker.ietf.org/doc/html/rfc2549

I'm surprised at how many browsers there once was. Were they all custom or did many share the same base, like the current situation with Chromium and Firefox?

My downloads folder is /tmp. If it's needed, I'll move the file to an appropriate location in Documents.

Demo-first looks good, it certainly tracks with my experience that building something needs to be shown off at every step to catch issues and get people excited.

I'm not sure how this includes fixing bugs and general maintenance though, short of showing one side of a video with the software crashing and the other not.

Many hobbyist drones are flying Linux computers [1], so it's not a stretch that an autonomous drone could be constructed.

[1] https://youtu.be/5CzURm7OpAA

Old people need a pension, which is paid by the workers through taxes.

The process of shrinking to fewer humans is painful however: less people working, more people old and unable to work.

Brilliant, much better than having to use heavy and clunky tools like recaf or jbytemod, or one-off java projects with ow2 ASM to create custom classes.

If a design includes many analog components then it is effectively required to fab a prototype. Analog simulation is very imperfect, and the analog equivalent of an FPGA, Field-Programmable Analog Array (FPAA), are very limited in resources. [1]

[1] https://www.digikey.co.uk/en/blog/whatever-happened-to-progr...

The courses look brilliant, definitely a strong advantage to gain a reference from a Cambridge postdoc. I'd take part if the £2.5k for online or £5k for residential was much lower, but it's understandable why the fees are so high.

An interesting point from the LockPickingLawyer that I'd like to point out is that while many, many locks are easy to break if you're interested, it's still effort. Your average locker or bike thief isn't picking locks, they're just taking whatever's easiest.

Web assembly is extra code and complexity in a web browser compared to one without, so there are more potential vulnerabilities

My engineering teacher showed us last year how to use dowsing rods, it was very odd watching the rods cross over a puddle. The article focuses heavily on the historical "witching" use case for these, which is of course nonsense, but it makes sense that dowsing rods work for decomposing bodies, considering that there's not that much difference between a dead body and a puddle of water.

We don't know how or why dowsing rods work over bodies of water, but they're good enough for our water companies to use. If it was completely luck, then they (hopefully) wouldn't do it.

The surgery was done by an ENT (ear, nose, throat) surgeon. I'm not sure if it was within the ear or not, as the device was "skin coloured", though that may be because of how thin the ear's skin is.

Chrome's developer tools has a device toolbar to help you test usability on mobile devices.

Based on the certificate authorities linked to by Microsoft [1], around $400 to $700 a year, depending on the type of certificate. Extended validation certificates grant the software a better reputation with antivirus products, but I don't know if there is actual validation involved, or if it's just buying a rank.

[1] https://docs.microsoft.com/en-us/windows-hardware/drivers/da...

DuckDNS is sadly often abused for malware and phishing.

The current cyber reservist page is:

https://www.gov.uk/government/organisations/strategic-comman...

On the off chance that's not sarcastic, I doubt we have.

> You have to code as if someone you don't want will be reading it.

This reminded me of "Always code as if the person who ends up maintaining your code is a violent psychopath who knows where you live."

Yeah I've noticed it as well. I suppose it's because the GCHQ can't necessarily pay enough for very talented individuals who are required for certain work, whereas defence companies are somewhat poured with funds. I've heard that a popular path is to start in the government, then to the private sector to earn bank, and then back to public.

Very high, zerodium [1] offers from $10k to $1mil depending on the exploit.

[1] https://zerodium.com/program.html

I'd argue that it's not too significant of an issue, as generally most clients do a good job of presenting themselves with completely normal behaviour to the discord api. Most people are banned because of API limits, such as attempting to spam without keeping in mind the limits, (Random delays with around 1 msg/s last I tried), or there's a bug in the client, such as ripcord once causing a login loop for me. If you keep it sensible, it's fine. Most people using these custom clients know the dangers and keep information on how to get back into everything, so there's not too much of a black hole effect.

I agree that it's very easy to tell between the students of a great teacher and a bad teacher. I've found that the best teachers are ones that came from industry, they did their work, and then went into teaching. That's why my school's engineering department is great, as is one of the physics teachers who sadly only teaches me once every 2 weeks.

Yes, actual threat actors use these techniques even after publication. There is a lot of outdated/misconfigured systems in the wild. A fairly recent example is the defacing of multiple Ukrainian government websites[1], through exploiting a vulnerability fixed and publicised in august 2021. There's also around 10,000 (can't remember where that statistic is from) Huawei routers on the internet vulnerable to an issue from 2015, which are constantly being infected with botnet worms.

[1] https://www.bleepingcomputer.com/news/security/multiple-ukra...