philprx

If I was NSA, that's exactly the kind of fud (fear, uncertainty and doubt) I'd try to propagate.

While I appreciate and respect the useful criticism, I would be careful with this kind of content:

Regardless wether you read this before or authored it, if you're right then go ahead and show to the world how we're wrong, if you're wrong you're helping quantum attackers.

Because new?

Because short / terse / expressive

Because C like

Using ChatGPT for a "neutral and expert question" is really broken: it gives the public the opinion that ChatGPT output could be trusted whereas it's so often wrong...

That's really dangerous (beyond the immediate stupidity of asking such question to a LLM) because it may give an impression that ChatGPT answers should be trusted and neutral... It's neither.

As I understand it, it's the result to a given search string that is cached.

Sure, If I search for "44 little poney street", then the result itself is cached at Mullvad, and someone needs to search himself/herself for "44 little poney street" by entering precisely this search string to access the cached page.

So I don't see a leak with caching... There are leaks anyway: the search term sent to Google, if someone compromises Mullvad, etc... But not one specific with caching and related to other users.

I'm looking for the paper called something like "TLDR Bourdieu Goffman Webber: How Social system of fame, status, reputation work?" ;-)

any reco? ;-))

btw, I found "The Prince" by Machiavelli very telling on social dynamics: basic you will say, but that kind of fits my TLDR needs ;-)

Who password protect they private SSH keys? Many. Who reads their own ~/.ssh/* before using command? Nobody. Lateral movement even with protected private keys.

"Google, the finest place where startups and products go to die" ;-)

Yes, it is a problem now because of SNDL: Store Now Decrypt Later programs running around the world.

Capture is performed and encrypted data is stored, waiting for quantum computers to be available and cheap to then break in the future what we exchanged securely today. It counts on having the half life of data greater than the average time for quantum computers to arrive.

Post quantum cryptography algorithms exist (PQC) and some open source implementations are there. Even for SSH. and NIST has an active crypto challenge on that.

Please add example for each section ;-) that would help the rust newbie in me :-)

(or links to such examples)

Deconstruction of anonymity is an academic and agencies proven success.

It can be called anonymous when it goes through TOR to be sent, etc… which is not even considered afaik.

If you rely on the receiving party to not store your IP and other sent details, then it’s not anonymous. Sadly, some companies get evil, get compromised or get internal threats…

And yeah, opt-in is minimum or the software is called a spyware. And yes, with this definition recent Windows is a spyware.

If you want an argument about privacy, watch the insightful talk by Halvar Flake on security vs. death squads… chilling but sadly true.

Well the problem is the privacy bait and switch isn't it?

When you install a compiler who's respecting your privacy, and without opt in it starts sending telemetry, you can't expect that to go well.

Now naming people like this isn't going to help either I think.

Can you post a reader friendly version of this, medium went from a great platform to painful dirty tricks platform in no time... Thanks

One can use also mermaid JS with its live editor.

Two things kill a lot/ most startups:

* Money problems

* Founders alignments

You at least have one of these problem, possibly two in the future.

Only way to fix this is to re align and make sure you don't run out of money.

Re align means discussion and demonstrating what works.

A good book on how to conduct these discussions and gather clear data on the company (that shows afterwards if an action was good or not): Traction

Good luck my friend, entrepreneurship is hard.

Tor users are often legitimate good internet citizens.

A lot of (lucky) us have the luxury to live in real democracies.

Some others live in countries that use every single aspect of their private lives (DPI, mass surveillance) to put pressure on them and bend them to the regime's will.

In my opinion, Tor and anonymity should not be killed as a result of silly bots.

I would tend to think that already this case would be considered as terrorism as it is an attack on national critical infrastructure.

Not speaking about what they need:

That's what they used.

And I guess they did use power tools to go faster for the two cuts required.

I think you underestimate the work needed, especially when doing black bag (IE illegal and covert) operations.

Now maybe some people with actual experience could give us better figures, ... But they tend to stay quiet

Multiple separate locations,

coordinated at the same time partly at night,

using power tools to cut fiber in ways that are hard to repair,

That does scream professional job.

Now I agree that many countries manage their physical network security in a weak/ lousy way.

Interestingly, poorer countries tend to do a better job because they know people will mess with infrastructure.

GitHub or it doesn't exist ;-)

SCIM: https://en.wikipedia.org/wiki/System_for_Cross-domain_Identi...

Well, it seems that the Google Chronicle was a semi-failure from all the signals that were coming out. I hope i'm wrong about Chronicle. Maybe this is a future replacement/iteration / improvement.

This could be a way to improve their offering and remove the "security argument" showstopper for cloud migrations.

Cost of new die > market size, probably

NPU was exactly that...

And given scarcity, it's probable that foundries prioritize higher paying processors.

For those who have the pleasure and luxury to go green field new dev, i started using the Quasar Framework, which builds on top of Vue. I really love it.

https://quasar.dev/

Congrats Intel, failure to play nice with community granted you a more up to date community fork.

Now let's play the internal discussion at Intel:

Developer: see !! I told you so, we had to integrate the patch. Community leadership is more important than these corporate plays.

Manager: err... Uhhh.... Now what do we do? How to regain community drive?

Developer: i don't know now.... Invest tons of time/money into hyperscan, have new chips that tap hyperscan natively, or re merge the fork?

...

Yes it is, very good book because it goes from the fundamentals to elaborate examples.

Now if you really want to be in research and current attack/defense then you need to do your homework.

But all the foundations in this book will help you have a comprehensive picture of the landscape you're playing in.

I think the intelligence work referred here is not within the scope of war as defined in war criminal.

But it could be collaborator to foreign intelligence, or agent for foreign intelligence, which already is punishable. Now the knowingly or unknowingly factor is important usually is qualifying these crimes.

Hydraulic claws will puncture into anything, including reinforced glass IIRC.

Now for sure it could slow down a rescue operation.

The simple specialized sledgehammer for firefighters (i forgot the name) might be hard to use on this glass. Also for non firefighters, rescuing someone trapped inside might be a challenge.

Fuzz for low hanging fruits.

Analyze code: peer review, bounty, ...

Harden through invariant checks and logic checks.

Make your system/code anti fragile by detecting wrong encoding, reporting it (uh-huh, yeah, think that any code even reporting/logging is an attack surface, hint hint log4j) and treating future traffic from source of attacks as a way to train your defense.

Create a culture of security: simple architecture, design workshops, threat modeling, thinking about what someone with attacker mindset would do, value experience (coming defense source) AND involve newbies (they will try again what didn't work in the past, and sometime it works)

Send them a cease and desist and tell them you're going to sue for attempted fraud (or better term):

They have no right to their claim and are using abusive language to make you do something under threat.

You can get quite some money out of it I believe.

IANAL and this is not a legal advice.

Do you have an URL or reference for this film?

Thanks.