108 karma · joined August 15, 2017
As it happens, IIRC, circa 2000, US schools and universities had to change their databases and systems to not use SSN's as student IDs because of identity theft problems extending from this very core problem.
The US through law must deleverage SSNs and make them public-safe, and promote/mandate a real PKI non-profit system for authentication and authorization for the greater good.
Unassociated Wi-Fi chips constantly broadcast their MAC addresses allowing customer targeting and broadcast their previously associated SSIDs, allowing tracking of people when combined with SSID location databases like SkyHook.
Unassociated Bluetooth is also a privacy and security attack surface.
Finally, it's going to drain the already undersized iPhone batteries even more by not putting chips into powersave modes.
Apple smh fail, fail and fail... they really jumped the shark on this one. I hope this changes but I'll be skipping iOS updates for now and will skip future iPhones if this doesn't change, in addition to already skipping future MacBook Pros because of their horrendous unrepairability and unupgradability.
It looks like this Si are the mostly combinational logic for a stage and Pi are the pipeline registers between stages (nearly all signals between stages should be buffered by pipeline regs). IO is omitted but it's the same overall architecture.
Clk --------+---------------+---... ....
| |
\ \
+-> S0 --> |P0| --> S1 --> |P1| --> .... --+
| |
+------------------------------------------+State actors can easily afford ASIC AES and SHA2 brute-force farms, and that's a concern, especially with monocultural recommendations to "always use AES/SHA2." Now that Keccak's been chosen as the basis for SHA3 in-lieu of more hw expensive alternatives like ECHO, the cost of cracking has been reduced for future scenarios. Do we really want to slash the security margin for a modest bump in runtime performance?
Breaking changes is very uncool.
whatever < file.txt
not cat file.txt | whatever
Also, there is no need for - or z on GNU tar in t or x modes: tar tf whatever.tgz
tar tf whatever.tar.bz2
tar tf whatever.txz
...
tar xf whatever.tar.gz
tar xf whatever.tar.Z
...
all work just fine(Malthus was partially ;) mistaken.)
Source: an enterprise Cingular sales rep whom later worked for Motion Computing.
There also used to be a spot on I-80 between SF and Sacramento where AT&T phones routinely dropped calls.
Also, Apple needs more third-party integrations like replacing the browser, email and so on.
Finally, there needs to be more ways for third-parties to add jailbroken-like changes to the system in a nuanced, safe, trusted manner.
0. Trusting any bit of silicon isn't backdoored or buggy.
1. Trusting any opaque binary firmware isn't backdoored or buddy.
2. Having "firewall" level of control of bus device lifecycle not in control of the user action and/or system policies.
We need more peripheral firewalls, external firmware imaging IDS/IPS like this project and depotting open-source chips that can be functionally OCR'ed under xray/microscope.
Equifax Announces Cybersecurity Incident Involving Consumer Information
[Equifax CEO statement] https://youtu.be/bh1gzJFVFLc
No Evidence of Unauthorized Access to Core Consumer or Commercial Credit Reporting Databases
Company to Offer Free Identity Theft Protection and Credit File Monitoring to All U.S. Consumers
September 7, 2017 — Equifax Inc. (NYSE: EFX) today announced a cybersecurity incident potentially impacting approximately 143 million U.S. consumers. Criminals exploited a U.S. website application vulnerability to gain access to certain files. Based on the company’s investigation, the unauthorized access occurred from mid-May through July 2017. The company has found no evidence of unauthorized activity on Equifax’s core consumer or commercial credit reporting databases.
The information accessed primarily includes names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers. In addition, credit card numbers for approximately 209,000 U.S. consumers, and certain dispute documents with personal identifying information for approximately 182,000 U.S. consumers, were accessed. As part of its investigation of this application vulnerability, Equifax also identified unauthorized access to limited personal information for certain UK and Canadian residents. Equifax will work with UK and Canadian regulators to determine appropriate next steps. The company has found no evidence that personal information of consumers in any other country has been impacted.
Read More