They market themselves as a part time thing so that they can claim that they are a "ride sharing service" rather than a taxi company. That way they can avoid all the costs of being a taxi company, like having to vet drivers, pay them minimum wage and benefits, obtain operating licences etc.
You can buy a device that unlocks the supposedly super secure iPhone. Every time they update the iPhone software and hardware, the device gets updated very quickly. That strongly suggests that he is right, Apple just fix each bug as they find it and don't fix the underlying flaws.
On the other hand, no such box exists for Google Pixel phones, for example.
Someone creates an AI system that writes Wikipedia articles about people, regardless of gender.
They note that one potential use would be for groups interested in getting more notable women from the sciences on to Wikipedia to use these articles are the basis for one. One of the issues with Wikipedia is the lack of contributors, especially to less well known people's articles.
Somehow in your mind this makes the whole thing sexist and politically motivated. Most people would see it as an attempt to help improve Wikipedia, to get better coverage of an under-represented class of noteworthy scientists. But for you, it's just a bad-faith effort by misandrists or something.
Subjects generally don't get a say in if there is a Wikipedia article about them. There are stricter rules for biographies of living persons, but the existence of an article is governed by the rules on notability rather than the desires of the subject.
Otherwise people whose articles say unflattering things about them, particularly politicians, would get them removed.
Also, if someone were to ask someone else to write an article about them, that would contravene the rules too.
There are a few different theories. The sensory mis-match one does seem to be related to motion sickness, but that seems to be a bit different to VR sickness. With travel sickness it goes away with exposure. People who get sick on ships tend to be okay after living/working on a ship for a while. Not so with VR.
The other clue is that you get the same thing with games on a normal 2D monitor. It's been happening since the 90s with Doom. It's why a lot of games choose to lock themselves at a lower frame rate than they are capable of most of the time.
I would be extremely reluctant to accept a milestone based contract. If problem come up that are not my fault but which delay the milestones then I'm going to be paying for that.
As a company I'd be worried that the contractor is only interested in hitting the milestones as quickly as possible, rather than delivering good code or a robust system.
That's not the threat that port knocking defends against. If someone can observe connections to your server then port knocking won't help you.
If you have a port accepting incoming connections from the internet it will get hammered. People are scanning all the time, they will find it and throw every protocol and exploit imaginable at it.
Port knocking allows you to simply drop all packets until you see the knock, which makes it look like your host is offline or at least properly firewalled. At the very least it offers protection against zero-day exploits from botnets and port scanning script kiddies.
It may not need to be memorized, but it does need to be typed into every Wifi device you own, sometimes through a clunky on screen or "scroll through the letters" LCD interface.
If the device's UI is that bad you have to wonder if their security is any better. Best to keep them off the network, or create a severely restricted second SSID just for them.
Most Uber drivers are not doing it in their spare time. It's not worth it, the set-up costs like maintaining a decent car, keeping it clean, insurance etc. are too high. I don't know about NYC but many places require them to be licenced or get background checks done too.
Years ago I stopped listening to voicemail and nothing bad happened. It was mostly spam anyway, and the few genuine people I actually wanted to talk to would send an email anyway.
It's a great filter. People you want to talk to know to arrange a time to call first. Everyone else just hangs on the line for ages waiting for the voicemail that never comes. I get the impression that alone is often enough to get you off their spamming lists.
So it's basically a cat. Quickly learns how to manipulate it's subjects into worshipping it as a demigod but don't actually experience the emotions itself.
So the joke is that software engineers and computer scientists think that everyone else in their field is terrible at it?
Voting with blockchain for verification sounds like a good idea. When we look at other blockchain systems they do get compromised sometimes, but the key thing is that the compromise is always publicly verifiable and easy to detect. The public nature of the blockchain and established cryptographic rules governing its behaviour mean that even if it is "hacked" in some way people will notice and be able to prove it.
That seems better than the current paper ballot system where there are all sorts of difficult to detect attacks.
Voting is one of the few times that a blockchain could actually make things better.
You vote on the computer and get a receipt with a secret transaction ID on it. You can then verify your vote against the public blockchain any time you like using that transaction ID (which is anonymous), and anyone can verify the overall count and integrity of the chain too.
Some care will be required to make sure the votes remain anonymous. The most obvious risk is correlating people's visits to the polling station with transactions on the blockchain, but there are ways to prevent that.
I tired room scale about 20 years ago, and it was still possible to make you feel sick. I imagine it's harder than it is with VR, but even room scale holodeck style can make you want to throw up.
The thing that makes you feel nausea is a kind of vertigo brought on by changing in the frame rate. If the rate suddenly dips the image goes from looking 3D with depth to looking 2D and back again, and your brain feels the mismatch between what the eyes are seeing and what the rest of your senses are telling it.
It's particularly bad with VR but also affects normal games. Some people are more sensitive than others. For VR you really need a rock solid 90 FPS as an absolute minimum, and very low latency between positional tracking and display updates.
Flight sims tend to be a lot less bad for a variety of reasons. Lower frame rate to start with and a large fixed cockpit image, with much slower movement than a typical first person game.
I posted this comment on the firehose submission. TL;DR with a good password it's still impractical to crack via brute force, all this does is make dictionary/rainbow table attacks a bit more practical by easing the gathering of the necessary data.
I had a look at this and it's interesting, but I wouldn't say that WPA2 is "cracked".
Previously you had to capture the handshake from a real user and then crack the crypto. The crypto wasn't bad but was vulnerable to dictionary attacks, rainbow tables and the like. But if you used a good key you were, and still are, quite secure.
This new attack means that the attacker doesn't have to wait for an authenticated user to connect any more. It fixes a lot of the problems that made cracking even weak passwords difficult, like the potentially large amount of time needed and the possibility of necessary packets failing to capture due to interference or poor signal. But crucially it doesn't affect the crypto, so you still need to do that very expensive offline attack on the key.
I'd give it a few weeks before jumping on this update.
I made the mistake of trying out Kicad V5.0 on release day. The Windows build was simply broken. A day later they released a new V5.0 that supposedly fixed a lot of the issues, but without any notifications or real explanation.
It wouldn't be so bad if you could install V5.0 along side older versions like you can with most CAD software. Like IDEs, many people like to keep old versions around to avoid having to upgrade and potentially break old projects.
An app could actually help you here. It could have a "duress mode" where it casts a fake ballot and records video with the camera, so when you boss is checking to make sure you voted the way they want it's also gathering evidence of their crime.
Of course the real app won't have that, but certainly will be riddled with security flaws. Place your bets now, I'll put five bucks on using HTTP to submit votes.
Slashdot Mirror
They market themselves as a part time thing so that they can claim that they are a "ride sharing service" rather than a taxi company. That way they can avoid all the costs of being a taxi company, like having to vet drivers, pay them minimum wage and benefits, obtain operating licences etc.
You can buy a device that unlocks the supposedly super secure iPhone. Every time they update the iPhone software and hardware, the device gets updated very quickly. That strongly suggests that he is right, Apple just fix each bug as they find it and don't fix the underlying flaws.
On the other hand, no such box exists for Google Pixel phones, for example.
Someone creates an AI system that writes Wikipedia articles about people, regardless of gender.
They note that one potential use would be for groups interested in getting more notable women from the sciences on to Wikipedia to use these articles are the basis for one. One of the issues with Wikipedia is the lack of contributors, especially to less well known people's articles.
Somehow in your mind this makes the whole thing sexist and politically motivated. Most people would see it as an attempt to help improve Wikipedia, to get better coverage of an under-represented class of noteworthy scientists. But for you, it's just a bad-faith effort by misandrists or something.
Subjects generally don't get a say in if there is a Wikipedia article about them. There are stricter rules for biographies of living persons, but the existence of an article is governed by the rules on notability rather than the desires of the subject.
Otherwise people whose articles say unflattering things about them, particularly politicians, would get them removed.
Also, if someone were to ask someone else to write an article about them, that would contravene the rules too.
There are a few different theories. The sensory mis-match one does seem to be related to motion sickness, but that seems to be a bit different to VR sickness. With travel sickness it goes away with exposure. People who get sick on ships tend to be okay after living/working on a ship for a while. Not so with VR.
The other clue is that you get the same thing with games on a normal 2D monitor. It's been happening since the 90s with Doom. It's why a lot of games choose to lock themselves at a lower frame rate than they are capable of most of the time.
I would be extremely reluctant to accept a milestone based contract. If problem come up that are not my fault but which delay the milestones then I'm going to be paying for that.
As a company I'd be worried that the contractor is only interested in hitting the milestones as quickly as possible, rather than delivering good code or a robust system.
But just downloading -- if that's all you're doing -- is NOT piracy, and is not a crime.
That's why they sue people for distribution. P2P platforms rely on you not only downloading but redistributing the content.
That's not the threat that port knocking defends against. If someone can observe connections to your server then port knocking won't help you.
If you have a port accepting incoming connections from the internet it will get hammered. People are scanning all the time, they will find it and throw every protocol and exploit imaginable at it.
Port knocking allows you to simply drop all packets until you see the knock, which makes it look like your host is offline or at least properly firewalled. At the very least it offers protection against zero-day exploits from botnets and port scanning script kiddies.
It may not need to be memorized, but it does need to be typed into every Wifi device you own, sometimes through a clunky on screen or "scroll through the letters" LCD interface.
If the device's UI is that bad you have to wonder if their security is any better. Best to keep them off the network, or create a severely restricted second SSID just for them.
Unless they have an iPhone, where the NFC can only be used for Apple Pay and nothing else.
For lowly iPhone users a primitive QR code works, but of course you have to print a new one every time you change your wifi password.
Most Uber drivers are not doing it in their spare time. It's not worth it, the set-up costs like maintaining a decent car, keeping it clean, insurance etc. are too high. I don't know about NYC but many places require them to be licenced or get background checks done too.
Try disabling your voicemail.
Years ago I stopped listening to voicemail and nothing bad happened. It was mostly spam anyway, and the few genuine people I actually wanted to talk to would send an email anyway.
It's a great filter. People you want to talk to know to arrange a time to call first. Everyone else just hangs on the line for ages waiting for the voicemail that never comes. I get the impression that alone is often enough to get you off their spamming lists.
1. Serve the public trust
2. Protect the innocent
3. Uphold the law
4. [Classified]
So it's basically a cat. Quickly learns how to manipulate it's subjects into worshipping it as a demigod but don't actually experience the emotions itself.
So the joke is that software engineers and computer scientists think that everyone else in their field is terrible at it?
Voting with blockchain for verification sounds like a good idea. When we look at other blockchain systems they do get compromised sometimes, but the key thing is that the compromise is always publicly verifiable and easy to detect. The public nature of the blockchain and established cryptographic rules governing its behaviour mean that even if it is "hacked" in some way people will notice and be able to prove it.
That seems better than the current paper ballot system where there are all sorts of difficult to detect attacks.
Voting is one of the few times that a blockchain could actually make things better.
You vote on the computer and get a receipt with a secret transaction ID on it. You can then verify your vote against the public blockchain any time you like using that transaction ID (which is anonymous), and anyone can verify the overall count and integrity of the chain too.
Some care will be required to make sure the votes remain anonymous. The most obvious risk is correlating people's visits to the polling station with transactions on the blockchain, but there are ways to prevent that.
I tired room scale about 20 years ago, and it was still possible to make you feel sick. I imagine it's harder than it is with VR, but even room scale holodeck style can make you want to throw up.
It's probably due to an unstable frame rate.
The thing that makes you feel nausea is a kind of vertigo brought on by changing in the frame rate. If the rate suddenly dips the image goes from looking 3D with depth to looking 2D and back again, and your brain feels the mismatch between what the eyes are seeing and what the rest of your senses are telling it.
It's particularly bad with VR but also affects normal games. Some people are more sensitive than others. For VR you really need a rock solid 90 FPS as an absolute minimum, and very low latency between positional tracking and display updates.
Flight sims tend to be a lot less bad for a variety of reasons. Lower frame rate to start with and a large fixed cockpit image, with much slower movement than a typical first person game.
I posted this comment on the firehose submission. TL;DR with a good password it's still impractical to crack via brute force, all this does is make dictionary/rainbow table attacks a bit more practical by easing the gathering of the necessary data.
I had a look at this and it's interesting, but I wouldn't say that WPA2 is "cracked".
Previously you had to capture the handshake from a real user and then crack the crypto. The crypto wasn't bad but was vulnerable to dictionary attacks, rainbow tables and the like. But if you used a good key you were, and still are, quite secure.
This new attack means that the attacker doesn't have to wait for an authenticated user to connect any more. It fixes a lot of the problems that made cracking even weak passwords difficult, like the potentially large amount of time needed and the possibility of necessary packets failing to capture due to interference or poor signal. But crucially it doesn't affect the crypto, so you still need to do that very expensive offline attack on the key.
Wait, some poor snowflake was triggered by my pointing out that the paper in question contains certain information? To them that's "flamebait"?
No, the stuff about hydro power.
I'd give it a few weeks before jumping on this update.
I made the mistake of trying out Kicad V5.0 on release day. The Windows build was simply broken. A day later they released a new V5.0 that supposedly fixed a lot of the issues, but without any notifications or real explanation.
It wouldn't be so bad if you could install V5.0 along side older versions like you can with most CAD software. Like IDEs, many people like to keep old versions around to avoid having to upgrade and potentially break old projects.
An app could actually help you here. It could have a "duress mode" where it casts a fake ballot and records video with the camera, so when you boss is checking to make sure you voted the way they want it's also gathering evidence of their crime.
Of course the real app won't have that, but certainly will be riddled with security flaws. Place your bets now, I'll put five bucks on using HTTP to submit votes.
It's in the conclusion section of TFP.
Scroll down to the conclusions in the report, they tell you why.