rthille

Well, sort of: http://hackaday.com/2016/01/11/introducing-the-beaglebone-bl... It's been kicking around for more than a year...

But if you have root, then why would any software you don't want to know you have root, know you have root? That is, if you control the device, have it lie about the control you have to things that care...

Also Moto 88110 RISC processors (though those NeXT products never saw the light of day...)

It doesn't need six-sigma, just to be significantly better than humans, and for the manufacturer to take on the liability.

I'd love something like a Yubikey Neo (NFC) with a fitness band type form factor (that I can shower/swim with), and an intention indicator (button of some sort) before the NFC would respond.

Mine found easier to use my desktop pc to order cat food from Amazon...

/me does not (any longer) own a cat.

BeOS/BeBox was demoed at a MacWorld. There was a cool display of the utilization of each CPU and you could disable each CPU by unchecking a checkbox. The demo app didn't prevent you from disabling the last CPU. The booth-guy wasn't very happy with me.

"Nice hat"

It uses FB Messenger for the non-voice API. How is that NOT cloud-based?

I think a display in my bathroom (smart mirror style) which would alert me if the night's low would be low enough to bring the birds in would work best for me. Plus maybe a push alert to my phone if the temp got low and I hadn't ack'd the alert on the smart mirror. But then I tend to brush my teeth before getting undressed :-)

Even in Sebastopol (about an hour north of SF), (some) people never lock their front door.

Heh, I still use RCS on a semi-regular basis...

Sure, but if the people who own the oil can sell it outside the country for more they will. So the price/demand outside still matters. Unless you're planning on making it illegal to export?

Might as well do the "pay people to bury money in coal mines and let people dig it up" then.

Yeah, Google provides that service and many manufacturers sell the products which make use of it. (chromebooks)

You don't need TLS for that, you could simply use an HMAC and a shared secret, assuming you're not worried about people with physical access (and ability to get the secret) being able to create updates. Of course if you've got multiple instances of the device (not some hobby thing where they are all owned by you), then the secret for each device should be different so someone can't buy the device, determine the secret and then push updates to other people's devices.

I hope you can require a password in addition to the fingerprint for protection against physical compulsion by law enforcement.

The thing sent to their service shouldn't be known by anyone but the user, then it can't be stolen from the website.

I'm in the same boat wrt hardware, but I've got lots of interesting ideas about things to do with all the devices, just epsilon time to do it in...

She's confused about what 'dark fiber' is. Dark fiber is fiber that's be laid/strung, but currently doesn't have lasers connected at the ends. That is, someone speculatively ran the fiber but currently isn't using it. Dark fiber is useless until it's lit with (somewhat) expensive transceivers.

As I understand it: If memory is coherent then all cores see the same values when they read the same location at the same time. Stated another way, the result of a write to a location by one core is available in the next instant to all other cores, or they block waiting for the new value.

At that point, you probably just want to go with the subscribe and save program...

Governments can only force inflation of the currency, not of all assets. That helps to keep value in investments that pay a return and increase real value to society over holding currency which doesn't.

Really? By my reading RFC-5321 & RFC-5322 leaves interpretation of the local-part up to the software running on the host where the mail is delivered, but since that interpretation is up to those servers, intermediate servers must treat them as case sensitive and not make modifications to the local-part.

My use for an air-gapped machine is for a personal CA (certificate authority). I'm using a RPi2 for this (no wifi). Proceedure: 1. Download all the software needed for the CA (possibly getting compromised packages). 2. Disconnect from the network, setup the CA. 3. Setup an intermediate CA on a YubiKey. 4. Turn off RPi2 and store micro-SD card with CA secrets in a safe. 5. If CA needed in the future, only plug in "CA" micro-SD when RPi is not connected to the network. 6. Since the CA is never in a machine connected to a network, even if the RPi2 is compromised (assuming it's not the secret generation) the secrets aren't leaked.

However, with this attack, or a similar one, maybe my laptop is also compromised and the RPi2 can exfiltrate to the laptop (which is nearby and connected to the network). Perhaps via toggling the caps-lock LED on the keyboard (at a high rate with low duty cycle so it's invisible to the eye) or via the monitor cable. Security is "fun"

http://www.padlette.com/ is awesome for one handed reading.

"Adobe had Display PostScript, but that never took off." Well, except for it's use in NeXTStep. Though I think they threw it out in favor of PDF/Quartz for OS-X.

Could be actual random data is used, rather than a PRNG