Hey man, I once had an engineering exec (who didn’t last very long) who decided engineers would be stack ranked by SLOC. You can imagine how easy that metric was to cheese, and you can also imagine exactly how that policy turned out.
Give an engineer a stupid metric to meet, and they’ll find a stupid way to meet it for you, if only out of malicious compliance.
RISC V is what you’re looking for
I know but that isn’t a snappy one-liner
lol but MS just recalled Recall
In point of fact, the alphabet agencies have for years now adopted a “capture now/read later” approach to encrypted traffic they consider to be suspect. “Later” is code for “after we’ve got cost-effective and scalable quantum compute that can break traditional encryption”. So if you haven’t been keeping up with bleeding-edge quantum-resistant cryptography when generating and using your own keys, you’re probably going to have your traffic read by an NSA analyst (or more likely, some sort of NN-based “terrorist detector”) at some point.
I don’t think it’s feasible to blacklist posts about Intel in computer science related communities, to be perfectly blunt.
I gotta be honest: it’s deeply frustrating and dismaying that Intel is tied up with Israel, but the fact remains that, as technical professionals, it is literally impossible to avoid Intel, because enterprise customers don’t really care about that BDS list. Ignoring technical innovations from Intel - one of the leading CPU manufacturers since CPUs became a thing - is only going to kneecap your own knowledge and expertise.
Two things:
Neat!
Also, the full disclosure of association/potential bias is absolutely appreciated. 🍻
Eng: so we were discussing this concept, and it’s something we might be able to put together in 6-8 months. Would th-
Sales: HEY JIM LETS GO SELL THIS FUCKIN THING
Eng: …what.
well you can cross-fuck off.
It’s entirely a nonstarter for entire fucking industries. That’s not hyperbole. I work in one of them.
Edit: scratch that - If any infosec team, anywhere, in any industry, at any corporation or organization, doesn’t categorically refuse to certify for use any system that is running MS Recall, they should be summarily fired and blackballed from the industry. It’s that bad. For real: this is how secrets (as in, cryptographic) get leaked. The exposure and liability inherent to this service is comical in the extreme. This may actually kill the product.
E2: to the title’s implication that such trust can be earned: it kinda can’t. That’s basically the point of really good passwords and secrets (private keys, basically): nobody else knows them. To try to dance around that is fundamentally futile. Also: who am I kidding, this shit will sell like hotcakes. Everyone’s on fucking Facebook, and look how horrifically they exploit everyone’s data for goddamn everything. This isn’t much worse than that to the average mostly-tech-illiterate consumer.
Hell yeah. I got a mega and a small one. Still use it from time to time. Little fuckers just won’t die. I do my best to take care of them, but still, at this age, they’ve seen some wear. They’ve got the patina.
Man… kinda jealous.
Look up the equifax breach - basically all us Americans got from that was “lol sorry”
…
The only thing in the above parameter that was valid was the device serial number. If this request worked, it meant that I could use an “encryptedValue” parameter in the API that didn’t have to have a matching account ID.
I sent the request and saw the exact same HTTP response as above! This confirmed that we didn’t need any extra parameters, we could just query any hardware device arbitrarily by just knowing the MAC address (something that we could retrieve by querying a customer by name, fetching their account UUID, then fetching all of their connected devices via their UUID). We now had essentially a full kill chain.
…
And then he proceeds to make arbitrary changes to his own modem via this exploit as a final proof. Jesus tapdancing christ.
People have checked; they definitely did, per the docs.
Love,
Uncle “Proportional Response” Sam
If Trump gets elected again, there is no version of this situation that ends well for Zelenskyy and Ukraine. Nothing was lost by saying this.
Tbh it actually sounds a lot more like Boeing these days. F9/F9H is bulletproof reliable these days, and starship is making HUGE developmental strides, while Boeing is still failing to discover and iron out system integration bugs and hardware faults years after they had “completed the project”.