mike_d

You must have missed the part where he did poach all the top talent from Google and OpenAI, and then they all quit because they couldn't stand working for him.

He is a Utah senator. It is a job title.

The message to every Cloudflare employee is clear: you'll be there for the company when times are hard. But the company will not be there for you when times are hard.

It does not matter if the way we work has changed, or AI adoption has increased, or aliens show up. This is a demonstrated lack of loyalty that would result in immediate termination of the situation were reversed.

The important take away for everyone else is do you trust Matthew Prince to always take the high road and do what is right, combined with the fact that they man-in-the-middle all of your websites encrypted traffic? What happens when revenues are down and the shareholders demand blood again?

Why not? There has already been a working exploit floating around, at least now it comes from an authoritative source.

Remember that Cloudflare does a MITM on every connection to every website they front.

CF not only protects them... they have real time intelligence on who is getting attacked, who is paying for it, and all the parameters of the attack (type, volume, duration, etc).

What would your sales team give for leads this hot?

Don't think of it as a materials simulation engineer being recruited and trained on how to write complex malware.

Rather this was developed by a team of 6-8 people. Maybe two or three of them working on the implant, another engineer handling the exploits and propagation, and yet another building the LP and communications channels. They are supported by a scientist with deep knowledge of the process they are messing around with (say developing nuclear weapons), and a mathematician that knows how to introduce subtle and undetectable errors.

I own a domain registrar.

Personally (not our official position), I would never try to bring a trademark into this type of dispute. Once you make a trademark claim the domain gets locked to prevent any further changes and you get directed to file a UDRP. We will then act based on the ruling, which could take months.

Same for trying to send "intimidating lawyer letters" (or having your attorney contact us at all). Outside of a few narrow cases, nothing obligates us to spend money on legal resources to respond. But once you demand specific treatment under the law, we have to direct you to a court holding jurisdiction over us to rule in your favor.

OP has already solved one side of the market without even realizing it.

Assuming this isn't just trolling what is the value? Atlassian's codebase is full of security and performance bugs, and I don't think anyone could make the argument with a straight face that JIRA is a source of high quality training data.

The only thing I could think of is getting a sales foothold into Fortune 500 companies. "We see you have 1,744 man-years of outstanding bugs, want us to just boil a small lake and replace your dev team?"

The "Take Action" section is missing the most obvious solution. Everyone just goes and takes down a camera. We as a society do not consent to this use of public space and simply have a national "Take out the trash day."

There is no way Flock could practically ramp up production or manpower to replace the entire fleet before failing to meet contractual requirements with their customers that keep money flowing in.

Just FYI you might want to reconsider your branding. Using the term "Coast Guard" in pretty much any capacity without written authorization is a felony.

You don't think that the idea could work based on our current understandings. I do not believe that there is anything magical about humans that prevents us from eventually reverse engineering ourselves. To think otherwise is to acknowledge some sort of higher power that holds a special non-organic ingredient in the mix.

To be clear I think this type of work crosses a lot of ethical boundaries. But entire fields like gynecological surgery were the result of a person with no ethics doing horrific things to people without consent. Most early vaccine testing was done on orphans and the mentally handicapped.

This is ultimately what happens when the people who were cheered for "move fast and break things" start to get older and come face to face with the one thing money can't buy.

In the BBS days persistent storage was expensive. Backups were at best saving something to two different floppy disks. If you got lucky you could rebuild most stuff from files you had shared with friends.

No they should not. They should donate that money to non-profit public utility operators instead.

You seem to be missing the point that they should be public utilities.

Tech companies are exceedingly good at giving things away for free to get all the "market share" and then monetizing.

Well I can tell there are at least 2 other people crawling every number incrementally... Numberwang!

Sometimes when doing offensive security work you end up in the strangest environments with limited tools, odd quirks, broken shells, and god knows what else. But you know what is almost always available and just works? PHP.

TLDR: A weight loss diet centered around a big breakfast yields weight loss results. That breakfast loaded with protein made you feel fuller and suppressed your appetite (which helps you follow a diet), where a fiber loaded diet produced more beneficial gut bacteria.

The study has a pretty small sample size, but it seems well designed and matches what you'd expect.

Pharmaceutical companies don't just fund research without having a model of the expected costs to bring something to market, the expected market size, and the viability and cost effectiveness of other potential treatments.

They have entire teams of people who figure out the viability and pricing of therapeutics before the first dollar is spent, with estimates getting refined the further you get along in the cycle.

That is exactly how clinical research works. My mother worked running clinical trials for two decades.

When she was diagnosed with leukemia she was able to get into a research study herself that gave us 10 more years together.

One of the horrible but necessary parts of trials is the control group, who receives placebo. This is only done in a few of the trial phases but is essential in measuring efficacy. If someone wants to throw their brainpower and a little bit of AI/tech at the problem, you could end up eliminating a lot of suffering.

ADSBX used to be volunteer ran until JETNET paid the guy who controlled the domain name $20 million dollars to "sell" it to them and steal everyone else's source code and data. They now do selective filtering to appease their commercial clients.

Everyone has moved to https://globe.airplanes.live/ and https://app.airframes.io/flights now.

Here is the lawsuit from one former group of contributors: https://www.documentcloud.org/documents/23963235-golden-hamm...

> Everyone predicted twitter would crash and burn within months of the layoffs.

It did, just not obviously. Twitter used to be the store brand social network, vanilla and reliable but not overly obnoxious. It made good money from brand advertisers like Ford, General Mills, and Sony. City governments felt ok with using it to distribute community information. The platform tried its hardest to stay middle of the road and not let things sway too far one way or the other.

Today it is a real time bidding marketplace for changing public discourse. You simply buy blue checkmark accounts in bulk and spread your message free of any content moderation or safeguards. So the Chinese, Russians, and Saudis can get into a bidding war over what rural whites believe to be fact.

With the ad revenue sharing program you don't even need to write the content anymore (one of the biggest things foreign influence campaigns struggle with). Just find someone who is saying the "right" thing already and promote them. Twitter in turn underscores the authenticity of these voices by adding "transparency" features that list where someone is from - because your average person does not know a damn thing about proxies.

I have no doubt that that rank and file engineers were not aware of the underlying functionality that allowed for plain text content to be read.

Nobody would ever create a SendPlainTextToZuck() function that had to be called on every message.

It would be as simple as using a built in PRNG for client side key generation and then surreptitiously leaking the initial state (dozens of bytes) once in a nonce signing or something when authenticating with the server.

This is a tired trope. Depending exclusively on obfuscation (security by obscurity) is not safe. Maintaining confidentiality of things that could aid in attacks is absolutely a defensive layer and improves your overall security stance.

I love the Rob Joyce quote that explained why TAO was so successful: "In many cases we know networks better than the people who designed and run them."

Looking over the code it does not appear to actually do anything.

If you want something like this check out https://pterodactyl.io/

It has pre-built support for like 100 games: https://github.com/pterodactyl/game-eggs

Shameless self promotion: preview.ninja is a site I built that does this and supports 300+ file formats. I'm currently weekend coding version 2.0 which will support 500+ formats and allow direct data extraction in addition to safe viewing.

It is a passion project and will always be free because commercial CDR[1] solutions are insanely expensive and everyone should have access to the tools to compute securely.

1. https://en.wikipedia.org/wiki/Content_Disarm_%26_Reconstruct...

I'm gonna let you in on a secret... 99% of Mac users don't know what the Dock is called.

That only addresses half the problem and is just a suggestion vs something clients can't ignore.

I have always been a bit puzzled by this. By issuing fixed length certificates you practically guarantee oscillation. If you have a massive traffic spike from, say, a CDN mass reissuing after a data breach - you are guaranteed to have the same spike [160 - $renewal_buffer] hours later.

Fuzzing the lifetime of certificates would smooth out traffic, encourage no hardcoded values, and most importantly statistical analysis from CT logs could add confidence that these validity windows are not carefully selected to further a cryptographic or practical attack.

A https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number if you will.

You mean the same Germany that uses its domestic access to the bargain basement cloud providers like Hetzner and Contabo to de-anonymize Tor users for international law enforcement?

Or the Germany that bought Crypto AG along with the CIA to backdoor encryption hardware?