JW_00000 · HackerTrans

letzten Monatdiscuss

This is what Word is to most people. They just use the default styles, or their company's template. No special formatting, styling etc.

Also if you do want to add a table or a figure, for most people Word will be much easier than doing the same in Markdown.

JW_00000

vor 7 Monatendiscuss

falcor's point is that we will see this in 5 to 10 years.

JW_00000

vor 8 Monatendiscuss

To be honest I don't really read insults either in this e-mail or in the thread you linked. If I'm seeing it right, there's only one comment by the guy in that thread, right? That comment is direct and uses language that may be considered unprofessional ("crap"/"crappy"), but it's not insulting the users (they are not referred to as crappy). Same for the e-mail.

Unnecessary drama as usual...

JW_00000

vor 9 Monatendiscuss

They answer the second question quite clearly in my opinion:

    It requires only brief one-time physical access, which is realistic in cloud environments, considering, for instance:

    * Rogue cloud employees;
    * Datacenter technicians or cleaning personnel;
    * Coercive local law enforcement agencies;
    * Supply chain tampering during shipping or manufacturing of the memory modules.

This reads as "yes". (You may disagree, but _their_ answer is "yes.")

Consider also "Room 641A" [1]: the NSA has asked big companies to install special hardware on their premises for wiretapping. This work is at least proof that a similar request could be made to intercept confidential compute environments.

[1] https://en.wikipedia.org/wiki/Room_641A

JW_00000

vor 9 Monatendiscuss

You're twisting their words. For the second question, they clearly answer yes.

It depends on the threat model you have in mind. If you are a nation state that is hosting data in a US cloud, and you want to protect yourself from the NSA, I would say this is a realistic attack vector.

JW_00000

vor 9 Monatendiscuss

It's a bit more fundamental in my opinion. Cryptographic techniques are supported by strong mathematics; while I believe hardware-based techniques will always be vulnerable against a sufficiently advanced hardware-based attack. In theory, there exists an unbreakable version of OpenSSL ("under standard cryptographic assumptions"), but it is not evident that there even is a way to implement the kind of guarantees confidential computing is trying to offer using hardware-based protection only.

JW_00000

vor 10 Monatendiscuss

You must be joking. When I try to log in on Outlook I get redirected to 'microsoftonline.com' (suspicious), when I log in on Wikipedia it sends me to something called 'wikimedia.org' (typo squatter?). How the hell am I supposed to know whether npmjs.help or rustfoundation.dev are _not_ the official domains of those projects?

JW_00000

vor 12 Monatendiscuss

To give a concrete example, matrix multiplication is not commutative in general (AB ≠ BA), but e.g. multiplication with the identity matrix is (AI = IA). So AIB = ABI ≠ BAI.

Or applied to the programming example, the statements:

    1. Server.accept
    2. Client.connect
    3. File.write  # write to completely unrelated file

123 = 312 ≠ 321.

JW_00000

vor 3 Jahrendiscuss

Are the Android app store and GCP loss leaders? I assumed those two would be profitable at least.

JW_00000

vor 3 Jahrendiscuss

You don't need to show a "cookie warning" to store a cookie. You only need to show a warning if you're tracking a user, regardless of the technology used (cookie, local storage...) But if you want to store someone's language choice, username, or credentials in a cookie, no banner is needed. In fact, this website is the perfect example.

JW_00000

vor 4 Jahrendiscuss

If the DAO isn't implemented in software using smart contracts, then what is the difference with a "traditional" foundation like e.g. Debian or Python have?

comments