madars

With special equipment and by half-pulling/disassembling the power outlet. See https://wiebetech.com/products/hotplug-field-kit/ and https://www.youtube.com/watch?v=-G8sEYCOv-o

showdead is essential for Orange Reddit but it will show downvoted comments in unreadable light grey on light grey. So you probably want a user CSS (e.g., with Stylus) like this (italic and the particular color are to taste, of course):

    .c5a, .c73, .c82, .c88, .c9c, .cae, .cbe, .cce, .cdd { color: #222; font-style: italic; }

Maybe they did not expect any useful info? One gets jaded but https://en.wikipedia.org/wiki/The_purpose_of_a_system_is_wha...

Your E/Fp has order 2^3 * 3 * 37991 * 21183269 * 373015308871 * 16071902378831708724506232718210977087913221837027589 and thus you can't hope for more than 86 bits of security due to Pohlig–Hellman, never mind cofactor attacks. encrypt() is also insecure (xor every byte of the message with the same shared secret byte), even if you chose a better curve.

Running or virtualizing DOS-era software can be non-trivial: see, for example, Windows 98 vs TLB cache invalidation behavior in modern CPUs https://blog.stuffedcow.net/2015/08/win9x-tlb-invalidation-b... requiring a patch. Any code that does loop counting to estimate cycles for sleep() will also overflow (hello, Pascal CRT Error 200!) requiring a different patch.

Ledger uses STMicroelectronics secure elements and should not be affected by this. Trezor Safe uses Infineon OPTIGA though. See https://bitcointalk.org/index.php?topic=5304483.0 for a table with wallets and their respective microcontrollers/secure elements.

PDF of the EUCLEAK writeup: https://ninjalab.io/wp-content/uploads/2024/09/20240903_eucl...

Yubico blogpost: https://www.yubico.com/support/security-advisories/ysa-2024-...

Apple's great AAC encoder was (is?) also available as part of iTunes for Windows. One can extract the DDLs from the installer and use them with qaac to encode AACs. Apparently even works in Wine: https://www.andrews-corner.org/qaac.html ! OBS also picks up CoreAudio DLLs so streamers install iTunes for Windows to improve audio quality on their streams.

>why do you think there's no anti-anaesthetics movement?

for one, I've never been required to get anesthesia as a condition of employment. lumping all vaccines together is not productive and we don't do that when discussing painkillers. there is a movement against OxyContin but not a movement against Ibuprofen.

Traditionally, Cuba libre also has lime juice while a plain "rum and Coke" order leaves it out. https://iba-world.com/cuba-libre/

The article does not say but I'd bet $20 that breed-specific legislation would help. Most people can't handle a pet tiger ("it's just how you train them!" yeah right) and when 6% of dogs (pit bulls and pit bull breeds) account for 68% of dog attacks and 52% of fatalities [1] it is time to recognize the fact. (edit: add citation)

[1] https://time.com/2891180/kfc-and-the-pit-bull-attack-of-a-li...

It's worse: Pr[correct output | hard input] = 0, even though they estimate that Pr[correct output | random input] ~ 1. This means that you can't, for example, amplify your success probability by repeating the algorithm a bunch of times and taking the majority vote.

Amazing naming choice - doggos like to dig!

Slack lets free plans to turn on 90 day retention (i.e. content auto-deletes after 90 days). Free workspace users might want to consider this as a risk reduction measure: free users don't have meaningful access to beyond-90-day content anyway (explained in the article), yet anyone who compromises Slack (via any means, be technical or legal) gets access to extended history that workspace users don't themselves get. https://slack.com/help/articles/203457187-Customize-data-ret...

And anyway, the best UX is that of Zulip, which you can self-host :-)

If you like dogs, one can recommend https://en.wikipedia.org/wiki/Wishbone_(TV_series) which got praise for "refusing to bowdlerize many of the sadder or more unpleasant aspects of the source works." Not sure if PBS is streaming it anymore but there are magnet links around.

This is already happening: Microsoft's opt-out is _optout (can appear anywhere in SSID), Google/Apple's _nomap has to be at the end so prepare for YourAPName_optout_nomap! https://superuser.com/questions/1005235/wi-fi-opt-out-micros...

Something related is part of Android 15 Beta 2 released today -- "Private space lets users create a separate space on their device where they can keep sensitive apps away from prying eyes, under an additional layer of authentication. The private space uses a separate user profile. When a user locks the private space, the profile is paused and any apps in the private space are no longer active. The user can choose to use the device lock or a separate lock factor for the private space.": https://developer.android.com/about/versions/15/features#pri... (there is a known bug related to it https://developer.android.com/about/versions/15/release-note... that will be fixed in a hotfix in next few days.)

https://kiljan.org/2021/12/14/vpn-as-wan-for-guest-network-o... is a great start for how to set up a WiFi network with an always-on VPN

Yes, it also disables WASM, MP3 decoding, gamepad API, JPEG 2000, SVG fonts, PDF previews, WebGL, Speech Recognition API, Web Audio API. Pretty much web as it was meant to be ;-)

https://9to5mac.com/2022/07/25/lockdown-mode-ios-16-restrict...

Might be http://witch.valdikss.org.ru/ , e.g., using number of flows and MTU (and maybe other techniques)

100%. Another underappreciated point is that factoring connection is very misleading. That is, we don't know if factoring is equivalent to breaking RSA (in particular, the algorithms breaking low-exponent RSA (which one shouldn't use for a number of reasons) don't factor the modulus). It might be true that computing e-th roots (i.e. breaking RSA) is tractable while factoring is not.

Similarly, PKCS is complex but every part of PKCS is there because without it there is a concrete attack. Burt Kaliski (former chief scientist of RSA Labs) has an amazing talk which goes into detail about this: https://www.youtube.com/watch?v=sqsDKjPaJVg For example, why does RSA need randomized padding, besides the trivial IND-CPA violation? Because if you encrypt the same message to many recipients, the attacker can use Hastad's attack, which uses lattices in a deep way, to recover the message from non-randomized ciphertexts https://en.wikipedia.org/wiki/Coppersmith%27s_attack?useskin... Very much like an airline checklist in a way :-)

Another nugget in the talk: how RSA embedded a public key in their products and bootstrapped VeriSign! Can't recommend it highly enough.

Hetzner has a reputation for locking accounts for "identity verification" (Google "hetzner kyc" or "hetzner identity verification"). Might be worthwhile to go through a reseller just to avoid downtime like that.

At least in the past some SAT solvers were vastly better on certain kinds of problems. E.g. cryptominisat had native handling of XOR clauses which no other solver did. By referencing pertinent details of your experimental setup you could save others who want to build upon your work a lot of time.

That says less about crypto and more about default permissions for new accounts. E.g. if your CI let you open connections to tcp/25, got abused by spammers, and then added extra registration steps, would you blame existence of email?

Somewhat off-topic but does anyone have a bookmarklet that would remove annoying scrolling behavior on sites like Quanta? I.e. pressing space bar should immediately scroll down a page, not do it slowly with awkward mechanics.

In exchange I'm happy to share a bookmarklet that "unsticks" sticky elements of the page (e.g. an ever-visible header like on WaPo, though they are not the worst offender): https://pastebin.com/Vh594168

Another place where non-transitive comparison frequently results in correctness errors/crashes is balanced tree-based STL containers like std::set or std::map. It's interesting to know whether those are similarly exploitable.

CDL != regular driver's license. Does an average driver know how to operate air brakes or prevent jack-knifing or what to do with a runaway engine? Trucking is a highly specialized job and requires more aptitude than ordinary driving.

WebKit does not support blocking Web Request, which is what uBlock Origin uses (See compatibility matrix at the bottom of https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...) In fact, it is all about blocking Web Request, not say, Manifest V2 vs Manifest V3 (Firefox supports MV3 but adds blocking Web Request support.)

I think OP is referring to Sundar's time as a CEO which started in October 2015. Crome's rise had already flattened out by then: https://www.statista.com/statistics/545520/market-share-of-i...

And prime minister of Singapore was a senior wrangler at Cambridge: https://en.wikipedia.org/wiki/Lee_Hsien_Loong : "His college tutor, Denis Marrian, later described Lee as "the brightest mathematician he had admitted to the college". Béla Bollobás said that Lee "would have been a world-class research mathematician", but his father did not realise this and persuaded Lee to leave the field."