MichaelGG

Programs can detect Ctrl alt del somehow, because RDP clients do it. But they can't intercept it.

But a phishing program can just show the enter password screen, without the ctrl alt del prompt. Few users understand the security need to press ctrl alt del. And in newer Windows, it doesn't seem to prompt unless you enable it via GP.

Privacy.com gives you one-time cards that, I think, provide a positive response for any address.

Is English the native language for most of California?

If people are going to leave the USB device in all the time, why not just use the onboard TPM the machine probably already has? At least on Windows, the TPM can create a virtual smart card so existing infrastructure can just use that as normal.

Then you get keys protected by hardware. Though the TPMs might commonly be easier to physically hack than good USB devices.

Yeah, it's a mess. F# got it right, use triple slash to provide a summary. C# should have at least gotten that, instead of forcing so much XML all the time.

For it to head that way, in my experience, you need people to start being incompetent and not caring at all levels of society. A slant towards stupid bureaucracy and paperwork will help too.

The US is so, so, incredibly far from remotely getting to that level.

I've been working on integrating a client's platform into other platforms. We looked at Wix. From a user standpoint, Wix is pretty slick. They require all their plugins/addons/apps to fully integrate into their UI. Not a trivial barrier to entry! Way better than some app stores that just let you toss up a redirect link and call it a day.

But man their editor, while neat, is just so damn slow. <generic comment about how shit was faster years back despite slower connections and processors>

I dealt with this quite a bit and recently consulted for a friend wanting to do something similar.

The issue is you think you can drag and drop data fields and be all set. But to deliver a halfway decent UI, you need custom bits and pieces here and there. From layout, to extra JS, to new "picker" types for some fields, and on and on.

When I've looked at it, the issue is either the forms toolkit gets stupidly complex or doesn't have a good customizability story, and in frustration you throw away the toolkit and just do it by hand.

There's room to do something better, so long the customization is really easy and trivial to add one-offs.

Exactly. I installed VsVim or ViEmu and went about my daily work. Played Vim Adventures, just a few levels. Every now and then I'd look up more. After a while, I couldn't imagine not knowing vim, and it's painful to watch other programmers edit text.

Hmm if they manage to put in a GPU and keep it from overheating it'd be worth considering I suppose.

So just some cutesy styling on a T470p, which seems underwhelming. Was hoping for 3:2 and something a bit more rugged which would also help with heat. The T470p and X270 have terrible reviews on heat.

I'm not on their side, but they should have announced it was invalid and that the results don't matter, promoted unity and then secretly committed fraud they could expose. They could have posed as pro independence units preventing no voters from voting (recorded "secretly" on a smartphone). Then they could spin the separatists as dirty playing and corrupt.

What're they going to do when Catalan goes underground and high tech with their voting?

Trusted computing, TPMs etc have always been about this scenario. It's just the anti DRM crowd has some people that think the end user is always the person sitting in front of the terminal, and there should never be a way to reduce that person's access.

The requirement is that only interconnected two way calling requires this. Skype sells separate in and out products, so they aren't two-way. Yeah, I know.

Oh. Well then it's a complete non issue. No wonder MS told them off.

So a more realistic scenario might be after gaining access to a company's LAN, or at a public WiFi? Did I read it right, you can force downgrade Exchange clients from TLS to plaintext, essentially?

What more did Apple say on the phone? No rationale given?

So basically they called eval() on an error message, to put it bluntly? Nice reminder that no matter how safe the language, people will do nutty stuff with it.

Don't blame him for Bitcoins ridiculous fees. Hard to pitch a peer to peer electronic cash system that costs $5. And don't blame him for buying into the online hype. Reading around, if you're not careful, one might even think LN is usable.

Bitcoin has been around for years. When does LN launch? The block size has been kept small for years past reasonability. Now we have segwit, so where's LN?

It's sad you're being downvoted. You're totally right. The issue is that the main Bitcoin community is insisting on keeping the blocks to 1MB every 10 minutes. They are doing this with the promise that one day, they'll have whizbang technology to do a million transactions a second for cheap. They're even calling Bitcoin a "settlement layer" or "layer 1" or just "store of value". Instead of a peer to peer cash system. Some such supporters have expressed interest in seeing the fees hit $100 or $1000, saying such fees would "indicate success".

I didn't particularly care before, but the more and more I've read, the less sense it makes. At this point, almost all miners (people running the equipment that keeps the network safe and operational) have decided to switch to larger blocks, "hard forking". This will be fun to watch. The "core" people are insisting the miners rebrand and break backwards compatibility so it doesn't hurt their main, small block chain.

That's not to say these other solutions are terrible, when they end up existing. But artificially restricting Bitcoin and driving up fees while slowing transactions down seems basically petty at this point.

NotebookCheck says the T470p gets up to around 50 C on the keyboard? That just seems ridiculously hot. Much above room temperature get uncomfortable.

(Plus no USB-C or Thunderbolt 3, just to make customers make more decisions.)

I came across a "hole" in the design of a vendor I was evaluating. Their fancy Java UI actually just downloaded plaintext root credentials to their MySQL database. All security was client side. As a bonus the root credentials were debug logged to the user's local computer.

Making it worse, they actively sold this as a multi-tenant platform to be used with mutually untrusting parties.

When I met with engineering and started to explain, they started smiling and said "this is a known issue and we're going to fix it in our next version."

Quite some time later I ran across people using it in the wild and they had not passed a lot of the glaring holes. Even their newer version had a hidden input field on the edit profile page named "IsAdmin". This did exactly what you think.

They ended up having a successful exit as far as I know and I've never heard anyone speak ill of them security-wise.

Telecom is a mess. These holes are easily exploitable for direct profit. But there's so much more low-hanging fruit, I don't think people bother.

How's the heat? Reviews say it gets hot and throttles immediately, with the fan being noisy.

But Lenovo won't let you get a high res screen on the thicker models.

It's like they take pride in making their loyal customers being forced to decide which pointless compromises they're going to take this generation.

Funny how they jump to using nukes and meteors but draw the line at DDT.

They're very difficult to deal with. Renewing my license which was in my name, but at a company I didn't actively work with, was a pain. Even though I had a valid email address at the company in question (part owner). They wanted the company to verify I was allowed to pay them to buy the product. Took over a week IIRC for me to give them money.

Then, if you lose your downloads (in my case, corrupted file) and your contract expires, you're out of luck. Since they make a separate EXE for each customer, they don't provide any way of getting the software once your support contract ends. Seems silly, considering pirated copies are readily obtainable.

But, they're the best so they can act like this and get away with it.

I get Google ads on mobile that flash and mislead. Virus Scan! Battery Scan! Clean Your Phone! With yellow and red. So at least on Android, Google serves tons of shit deserving blocking.

Then it's just another picture of a monkey's face, hardly worth paying much for. And anyone that had paid would feel defrauded.

Except anti Semitism isn't just "kill all Jews". If you're the ADL, then it might be "Israel sucks, screw those guys". They'll label it anti Semitism, lump it in with "garbage philosophy" and shut down discussion. Exactly what people are worried about.

So sure, feel free to censor "kill all Jews" but know it is 100% a slippery slope, in no small part because once you are allowed to delete opponents that meet that criteria, you'll try to expand the criteria.

Some of the folks renting cars here do that, rent out for a day and night shift. They're making good money doing so, making it so they charge enough so the actual driver can just squeek out a living. Still better than working a taxi they tell me.

Eh, there have been plenty of "blockchain, but controlled by one entity" projects proposed. The fact they make no sense and have negative benefits doesn't stop them from being deployed. Also see zCash's trusted setup which possibly allows them to mint unlimited money.