bennofs

Nix does have binary caching (but only if you use `/nix/store` for the nix store path), I'm using it all the time on linux. OSX support is definitly much less stable though and there have been problems with build machines for OSX in the past, so I do not know how the situation on OSX regarding binary caches is currently.

Regarding your point about build time, I'm not sure why installing with nix would make that much of a difference. Nix still just executes the build system of the underlying packages. However, nix might have to build more packages since it doesn't rely on the underlying system to provide dependencies which helps to make it more robust. Additionally, emacs has various build configurations, which might also require different dependencies, affecting build time.

You wouldn't even have to agree. I could just start myself going around and asking various companies the question, without the companies themselves knowing about my plan. But perhaps then I am myself acting against the law, because I do this with the intent of circumverting gag orders?

What would happen if I hadn't set up the communication strategy voluntarily, but instead was asked the question "Have you received any gag order" by an outsider (which I do not know and I didn't ask them to do this or plan it with them)? Can I be forced to lie by law? Or can you just not answer that question in general, even before you've received a gag order, just so that you don't have to answer it differently once you've got a gag order? (If I always said " I can't answer this", my answer wouldn't have to change if I get a gag order).

You make a very good point: why do they even need to update the firmware? Surely, just cloning the phone's encrypted memory should be possible? (I have no knowledge of hardware at all, but I would have thought that the data is stored on a memory chip somewhere in a phone, and it should(?) be possible to copy the data from that chip to process it offline?)

I guess the problem is that you don't know:

> allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact

As far as I understand, trying to predict what is possible by exploiting a buffer overflow is hard because it depends on many specifics, such as compiler options used, OS protections, ...

Doesn't a technique like selfish mining (http://arxiv.org/abs/1311.0243) mean that you can undo past transactions faster than 2% of the time, though?

It would be interesting to compare this with the improvement that he would have got if he did altitude training.