philprx

Years ago I stumbled upon something related: it was a piece of transparent polymer or polycarbonate that would glow when exposed to infrared light.

I tried to find it again repeatedly, but never managed to find it. Anyone knows this?

Q: Do you have enough domain knowledge to be judging the incentives ?

Well... I don't know. Does anyone have to be a domain expert to say that security reporting that affects tens or hundreds of million of people should be compensated better than 1k USD?

I dislike a bit the "justified" argument, as very often it dismisses important weak signal warnings. Our work in Security is often about being sensitive and not dismissal. But here you go:

I'm infosec since 1987 (34 years) and never left it, so I'll let you decide ;-) even if i'm a dinosaur in Internet times ;-)

Q: What do you think would be a fair amount ?

IMHO, the fair amount is definitely in the tens of thousands.

But we could attempt a quantified approach, always debatable (Risk = Likelihood * Consequence), eg. Likelihood based on fishing campaign success per country or global, and then mean / average cost of theft when leveraging the full exploit chain (IPC included), i.e. cookies -> auth -> leveraged identity theft impact. And then give percentage of cost as an bounty-based "insurance" mechanism. Not easy but attempt could be done. Surely that would result in way higher compensation.

Google VRP is giving the wrong incentives here, as such a small (insulting?) reward will surely orient some researchers to exploit market rather than responsible disclosure.

Google, shame on you.

Analogy is not about a home but a factory:

The infrastructure can be a danger to others, to employees, etc.

So yes, it's a mandatory duty for organization owners to secure their infrastructure.

There's a problem with the reaction to security issues in most of the countries.

Cisco too actually.

Huawei did sell plenty of pure Ethernet / IP switches and firewalls in the US.

Cisco does have plenty of Carrier-grade, Telco-grade and ISP-grade equipment that are used by operators (4G core, Network Functions, BRAS, GGSN/PGW...).

What a name for a company:

https://en.wikipedia.org/wiki/Excision

Excision may refer to:

* ...

* Type II female genital mutilation

https://en.wikipedia.org/wiki/Female_genital_mutilation

Thanks a lot, TIL this about zig:

https://scattered-thoughts.net/writing/how-safe-is-zig/

GPT3 for the win ;-)

I would say Yes in terms of size: usually most of RANs are nationwide.

But No in term of type: RAN is a functional part of operator operational network and therefore not as function and traffic neutral as a WAN is.

Good refs, recommend.

Soft delete villain hit again

ahaha, good one!

NB: Hard to call the service desk to complain... when there's no PBX to route the call ;-) just joking, yes it was restored :-)

Ok, maybe I'm super wrong here, if so just indicate it (kindly ;-) it seems to be hot in these threads ;-) ).

Here it is:

It seems to me the root cause has nothing to do with openness and FLOSS and licensing:

It seems to me it has to do with NixOS has a technology architectural choice of "fixing" dependencies in a way that's more costly (fox NixOS package maintainers) to maintain to the latest version of each package, that the dependency package author doesn't like that because NixOS therefore keeps older packages, and therefore will create problem down the line.

Am I wrong?

PS: I usually take the analogy with noisy neighbours and the architect. Some neighbours end up in fight because of noises in another neighbour's flat. In the end, nobody goes to the architect and building company complaining that the walls are too thin. Yet they fight on the downstream problems. Good thing: In software we can fix things more easily than in hardware ;-) Here it seems it's a fight on a downstream fight on a tech architecture choice.

Wear management and prevention?

just like in SSD ;-)

Taking down a system to reflash it with backups can take significant time that translates often in big companies to 10x-100x the ransom cost.

That's also why there are tensions between big companies / victims and law enforcement agencies because they have divergent interests: keeping the business running vs prosecuting and blocking criminals

Did you give data protection job a go? They're heavily recruiting people who can really make a difference. But it looks often easier than it is ;-)

Yeah sounds a bit like it, at least scion would be a superset as it embeds many other concepts.

IMHO, source routing concept is not abandoned as Segment Routing seems to be used in specialized / large networks:

https://en.wikipedia.org/wiki/Segment_routing

On this case, one way is to make a past_ or deleted_$tablename where you insert the deleted row before deleting it from production table.

This way you can watch post mortem, restore etc...

AND it's not soft delete since the data is really gone from the production table, therefore no query tweaking

Only thing: you need to really delete when GDPR related deletion is requested.

Fast track in covid-19 times:

1. Start a chat channel upfront and announce it here (discord, matrix riot element, signal, etc...) With dedicated and announced times for project e-meetup

2. See which hacker space are active if any

3. Maybe plan physical meet up in outdoor setting, easy for HI as it's hot weather. Don't become the next covid-19 cluster

It's always random how some communities work and some other don't. So start one and see if it works

Part true, but to be precise:

Public, notably 4G infrastructures, have been used as underlying networks for day to day military and security activity. The overlay network itself is still encrypted and resilient by using other networks if public network is not available.

With 5G, it even accelerates. Therefore it justifies part of the ban of Huawei and the security needed for 5G networks.

So this program does not look so astonishing.

For context, since YP leads to many different meaning, it's the Yellow Pages service(s) that (Sun) RPCs were enabling.

Indeed these were famously abused in these early having days.

Well it kills some living organism. These don't develop. It has a result on environnement including soil. Now it's it measurable everywhere? No.

There are a couple research papers and video documentaries that compare on the same area, sometime same hill, the difference in soil: one was marking as the only difference was treatment or zero treatment. Difference was around 5 inches / 15 cm higher soil in non treated parcel...

Now this is exactly the kind of question where everyone is going to find examples that suit their personal view, even with studies backing their point. It so much depends on region and soil, treatment, measurability of molecule effects etc...

I’ve used eurotechni a lot for many various steel: from super cheap ultra common XC75 to my most loved one: VG10 (and lots of them in between).

It’s great to be able so easily to forge or material removal shaping of many blades. A lot of thanks to all these merchants.

Nahh... it was really hard work^W fun to get them ;-)

Point 10. Cancer

“We replaced all damaged wood with treated timber and soaked it in creosote for good measure.”

Please, don’t do that. It’s a high suspect for cancer. Already some paints and most of the wood agglomerate glues are bad for health, but this!

Good luck still with your house, it’s vital to have a livable place for balance and creativity.

Answered:

https://dbader.org/blog/python-mobile-development-kivy-vs-be...

Excerpt:

The key difference between Kivy and BeeWare is that BeeWare programs use the native UI toolkit of the platform they run on, whereas Kivy apps use a custom UI toolkit that uses the same controls across all platforms.

How does this compare to kivy ?

Yes, this will work with 99% proba

Yes, these were pretty rare and l33t ;-)

There were a couple, a university AIX, a CDC NOS/VE with IP connectivity, etc...

Basically, free international comms back in the 90s!

Lutz, althh, tchh, Lina, Pegasus, ... many people thought some of these were sting operations.

My hand still remembers some NUA by heart even if I didn’t connect to these for 30 years.

Yes, QSD was hosted on a Minitel serving node/system but was mainly used for international chats. So we can say that QSD “abused” the x25 interconnection of a Minitel server in order to provide chats mainly to hackers.

Common people there: BayernPower, Gandalf, ... long time ago.

It was 0208057... something iirc.