Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)MO
Posts
7
Comments
358
Joined
2 yr. ago

  • The law requires them to block certain IP ranges. IP addresses are a fundamental part of routing internet traffic, and unless you are connecting over a nested tunnel, are sent entirely in the clear.

    This would be like a law requiring the post office decline to deliver any mail addressed to Iran, and then worrying that the Postal Service is going to “spy” on you by looking at the destination address you write on the envelope. They already do, as it is an intrinsic part of providing the service you’re requesting, which is delivering mail to the address you wrote.

  • 5.15.122 was released with the zen bleed mitigation

    But Ubuntu users (for example) won’t get that automatically. Canonical still has to pull the upstream release, run validation, and roll out a patch. It will probably be speedy, but still on the order of several weeks before people see it by default.

  • when the new kernel comes out Linux users will be safe

    It’s going to take a lot longer than that for most distros to move to latest upstream. This specific fix might be pulled in as a hotfix if you’re lucky, but it still takes time. The latest Ubuntu LTS is on 5.15, for example, which was released in October 2021. Debian Bookworm, which just released last month, uses 6.1 from December 2022.

  • social security is still a SELF-FUNDING program

    It’s also had negative cash flow for the last decade despite exponentially growing future obligations, and is currently trending towards insolvency by 2033. That’s what happens when you detach expenditures from taxes. So while boomers are simultaneously enjoying low taxes and reaping the benefits of social security, the fund will run out of money before it can have any chance of paying out for millennials. It’s not like the social security taxes I’m paying now are being “set aside” for me - they’re going directly into the welfare checks for my parents.

  • how they want to make those attesters trustworthy

    It’s all derived from hardware security modules like TPM. It’s not impossible to exfiltrate private keys from these devices, but it’s difficult and expensive, involving de-lidding the chip and carefully reading electric charge values from individual flash gates. Not out of reach for a sophisticated state-sponsored targeted attack, but certainly puts Evil Maid and other opportunistic attacks out of reach.

    As for how original integrity is established, that’s done by saving the public key or equivalent while the device is in the possession of the trusted entity.

  • London is an extremely old city. In the US, the older areas with older buildings like New York often have brick, but almost everywhere else, where most structures are less than a century old, they use alternatives. Most commonly this is lumber framing with exterior siding (either wood or plastic), interior sheet rock (“drywall”), with fiberglass insulation in between.

  • I’m guessing you have a periodic background task that runs every 70 minutes or so. This briefly increases the system power draw, eventually leading to the system heating up and the fan kicking on. It’s probably just a coincidence that the task ends (reducing the power draw) around the same time the fan kicks on.

  • I’m guessing it’s supposed to be “parts get hard to get”, which is accurate. It doesn’t matter if you have the schematic that shows your SB00C793FGX64 rev3 needs replacing if the part isn’t manufactured anymore.

  • A lot of the rebuttals in this thread are non-sensical. Why would I let someone use my phone for no reason?

    When people say they don’t care about privacy, they don’t really mean it. What they mean is they are willing to sacrifice some of it for the sake of convenience, safety, or something else they find valuable. That’s certainly a valid trade-off to make. If you’re trying to convince someone they should care more about privacy, that entirely depends on the person.