HackerTrans
TopNewTrendsCommentsPastAskShowJobs

sharkbot

no profile record

Submissions

Veles, Google's open source secret scanner

opensource.googleblog.com
2 points·by sharkbot·há 12 meses·0 comments

A method to assess 'forgivable' vs. 'unforgivable' vulnerabilities

ncsc.gov.uk
2 points·by sharkbot·ano passado·0 comments

comments

sharkbot
·ano passado·discuss
Agree. Purely opining, but I assume that it's because of the emotional connection that artistic media has on people, despite the flaws.

People remember the emotions the artwork engendered, and thus the whole work is associated with the feelings, flaws and all. If the work is particularly widely known, the flaws can become a stand-in for the work itself.

I see this in video games - I'm fond of the NES-era "flaws" and limitations (palette limits, sprite limits, sound channel limits), but less connected to the Atari 2600 or SNES/PS1/NDS/etc flaws. Shovel Knight is charming; A Short Hike, while great, doesn't resonate on a style level.
sharkbot
·ano passado·discuss
There are parallels to the “rapid application development” push of the 90’s. Visual Basic, Tcl/Tk, Python with Tkinter, HyperCard; all of them promised shortening the development cycle and democratizing computing. Code was interpreted rather than compiled, dynamically typed rather than statically, and a lot of batteries were included.

It sorta worked, and sorta didn’t. I’m seeing no evidence that this round is different. LLMs allow coding via natural language and assuming a lot of context that is typical to human conversation, but a lot of coding is delving into nuance, which is going to be work, no matter the tool.
sharkbot
·há 2 anos·discuss
There is no formal “next in line”. The closest potential successor would have been the deputy prime minister; Chrystia Freeland held that role until a few weeks ago when she dramatically resigned and sparked this chain of events.

Currently, this is “Working as Intended” in Canada’s political system.
sharkbot
·há 2 anos·discuss
Now for the most important question: can you run DOOM on it? :)
sharkbot
·há 2 anos·discuss
I’ve been thinking about this topic thru the lens of moral philosophy lately.

A lot of the “big lists of controls” security approaches correspond to duty ethics: following and upholding rules is the path to ethical behaviour. IT applies this control, manages exceptions, tracks compliance, and enforces adherence. Why? It’s the rule.

Contrast with consequentialism (the outcome is key) or virtue ethics (exercising and aligning with virtuous characteristics), where rule following isn’t the main focus. I’ve been part of (heck, I’ve started) lots of debates about the value of some arbitrary control that seemed out of touch with reality, but framed my perspective on virtues (efficiency, convenience) or outcomes (faster launch, lower overhead). That disconnect in ethical perspectives made most of those discussions a waste of time.

A lot of security debates are specific instances of general ethical situations; threat models instead of trolley problems.
sharkbot
·há 2 anos·discuss
I’m thinking of the metaphor between Newtonian and general relativity. At low energies, masses and velocities the two theories correspond in predictions with little discrepancy. If the velocity/mass/energies increase dramatically, then Newtonian physics will fail to give accurate predictions.

Same with “hire smart people and let them work”. When salaries are relatively low, consequences are limited and incentives are well aligned, that approach works. As soon as any of those things change, then the “manager mode” fails dramatically.

As someone who ascribes to “manager mode” most of the time, I’m going to start looking more at places where the assumptions break and (carefully) try out “founder mode”.
sharkbot
·há 2 anos·discuss
I think that’s an oversimplification. If you have a Windows system handy, look for a file named “errata.inf” [0]. It’s a giant configuration file that is full of tweaks to make dodgy hardware work reliably.

Hardware, software and firmware are all prone to mistakes, errors and corner cases that are surprising. Security issues generally live in the intersection of systems with different metaphors. Hardware is not immune from issues, and software can help reduce that impedance mismatch.

[0] Found an instance here, no claim to its veracity or safety: https://www.gherush92.com/documents/744E.asp?type=2&file=C%3...