seanieb

> I don't think you've thought about the problem space enough. God grant me the self confidence of this fella. I’ve been working as infosec engineer and been arguing with frontend enginee…

Hopefully the reviewers that failed to do proper reviews of those patches get relived of their privileges too. And the process gets throughly reviewed to prevent reviews being a glorified rubber stamp…

After the code was accepted and in mainline… the horse was well out of the barn.

Regardless of their methods, I think they just proved the kernel security review process is non-existent. Either in the form of static analysis or human review. Whats being done to address those issue…

I’ll take that risk over no default e2ee on Telegram any day.

E2EE is in Telegram is disabled by default. Also, look at the jurisdictions Telegram operates from. Sketchy would be an understatement.

Telegram is LESS secure than WhatsApp. https://www.wired.com/story/telegram-encryption-whatsapp-set... …

Citation needed.

Trevor Perin created both protocols. Noise isn’t an asynchronous messaging protocol. So it won’t replace Signal. WhatsApp use Noise and Signal together.

Is there a specific fact, letters etc. from the time you’re arguing against? From what I recall his barbarism was seen to stand out at the time in England and Ireland. He used it as a type of shock an…

Murdering women and children, even at that time, was considered bad. Shocking eh.

>” the anonymous editor peppered the text with political, personal, and sexual slander aimed at tarnishing the Cromwell legacy.” Stopped reading at this point. If the author doesn’t understand that…

That’s only part of the API gateway pricing, but it is still much much cheaper.

Very proud of Ireland today!

Rather than link to their whitepaper etc, I’ll just offer my endorsement as a security engineer of 1Password as being the most secure and best password manager. LastPass has been a clown show for yea…

Not to mention that the labels might read different depending in the user or context. For example Google Apps Gmail vs free consumer email.

This seems like a difficult position for Google. Take Gmail for example. For GSuite users vs free personal users, the privacy handling and the information needed to be disclosed will be far different …

They also lead the “But her emails” charge against Clinton .

The NYTimes has amazing journalists doing great journalism... however their editorial team, executives and publisher are the worst. Out of touch, insane and convinced of their own intellect and righte…

How does it handle updates? Can the non-expert user just click a button? Mediawiki strikes me as a service that would absolutely need command line access to upgrade?

I never said you could log all DoH. You’re not following what I’ve said. If you’re relying on DNS for your security posture in anyway right now you’re in a really bad place. Having those non malicious…

I'm a security engineer. It's pretty much my thing. I'm taking about logging it on the machine, that's not owned...and yes you too can do it... I'm doing right now. Even on my…

Really, you can’t detect that if you’re on the machine?... and if you’re not on the machine or its acting differently to what the logs show. Isolate it until you can investigate.

If you’ve got 3000 nodes on your network without inventory, logging and configuration control on each of those devices you’ve already lost. You don’t have a secure network, at best you’ve got a guest …

They need to upgrade the camera too. The current cameras on the Air and Pro aren’t good enough for the COVID era video calls.

I’ve some friends that works there, so I’m hesitant to say this, because I’m sorry for them, but Plaid is a terrible company. Their main product scrapes financial data from unsuspecting users that sim…

Will this be end-to-end-encrypted?

IIRC it was the developer of lulu that first reported those exceptions.

The comparison is to its neighbors who have similar demographics, economics, density, etc.