sten @sten@scholar.social
In security since 1992. Teaching about it since 2014.
Nightmare apt-get upgrade today. Nvidia drivers wouldn't compile. Tried backports, but couldn't uninstall old install. Then tried installing new driver, but that now claimed I'd been using another install method and shut down in a huff. Finally uninstalled everything that had nvidia in its name and reinstalled from download.
This stuff really isn't working right, and it's a shame. I'm this -><- close to ditching my NVIDIA graphics card just to avoid these stupid issues. Any recommendations?
Excerpt from Go documentation on SHA1: "SHA-1 is cryptographically broken and should not be used for secure applications." https://golang.org/pkg/crypto/sha1
Like, say, making a HMAC from it?
I really like that Go's documentation is more terse than that of other languages, but this is not factually accurate.
I showed https://plus.google.com/+KristianK%C3%B6hntopp/posts/SyjBAPF696c to my security class today and no one had an idea what was going on.
Reality vs. social constructs. Gotta be aware.
https://freethoughtblogs.com/pharyngula/2018/04/09/its-all-just-a-social-construct-man/
wanted: work
I am a copywriter, although I could do a lot of different kinds of writing. I bet I could do technical writing, if it came up. I know about marketing but honestly I don't like doing it very much.
I'm also an editor! And a regular writer! And a lot of other things!
If you know someone who needs me, or what I can do, please suggest me. I'm good at what I do and unemployed!
BOOSTBOOSTBOOSTBOOSTBOOSTBOOST
Yay #introductions!
I'm a data scientist and author. I think a lot about what we can and can't learn from data.
Some questions I'm interested in:
1) How do our definitions (of customers, of behaviors, of citizens) shape the kinds of decisions we make?
2) How does data analysis mediate power as the world becomes more digitized?
3) How do statistical techniques shape the bounds of rationality? What can we understand that we couldn't understand before?
The more I use Python, the more I dislike it. Then why do I continue using it? Because every time I'm thinking well, this is going to be just a small script. Until, of course, it isn't any more. I think I'll be rewriting my latest script in a proper language, like Go.
Okay so if you haven't read this Harry Potter chapter written by bots, holy cow it's good
Swiss convicted criminal removes electronic tracker, rapes and kills 19-yo. It turns out that removing the electronic tracker raises an alarm, but that alarm will only be looked into during office hours. Bloody hell. https://www.tagesanzeiger.ch/schweiz/standard/Nur-zu-Buerozeiten-ueberwacht--Luecken-bei-Fussfesseln/story/29344004
Sarah Lamb on memorising a difficult scene in a dance: “It’s like neutrinos scattering, it doesn’t seem to have any real logic.” Um, it might not seem that way, but it has real logic, it really does! https://www.theguardian.com/stage/2017/dec/08/total-recall-performers-on-the-art-of-learning-your-part-tanya-moodie-sarah-lamb
No, I guess I'll have to take everything back. Of course a modern song is (probably) not a rondo or gavotte, but musical structures will be apparent to everyone with a musical ear. There is horizontal and vertical structure, and these will always be apparent. The only thing that one can miss out on is idioms, and insisting on these is stupid.
Well, I guess I'll have to take that back, at least partially. He describes one of Barbara Streisand's records very well, but to be fair, that is quite close to what he knows. He could perhaps describe The Beatles, but probably not, say, something by Chroma Key.
I've been reading a lot of Glenn Gould's writings lately, and now I'm wondering how he would describe some of the stuff that I like to listen to. Just imagine him listening to some of your own favourites. His classical training leaves him with very little vocabulary and very few concepts to describe what he's hearing. His descriptions would read like a parody.
Trust is much on my mind.
What it is, what benefits it provides, how it is established, how it is lost.
It's fundamental to our knowledge and media systems. It's fundamental to our institutions and interactions. It's fundamental to how we respond to those we know, and to strangers, near, and far.
I'm looking for interesting observations and discussions concerning it.
I still think about this
sometimes I wish I had had a terrifying, A Christmas Carol-like encounter with "the Ghost of Research Yet to Come" about the importance of good filename hygiene
From a product review: "this projector gives you vertical lens shift and an optical zoom with good sound quality". Now I'm wondering what an optical zoom sounds like.
Linus says: "Some security people have scoffed at me when I say that security problems are primarily "just bugs".
Those security people are f*cking morons."
Well, I do scoff at the idea that security problems are "just bugs". And if that means that Mr Torvalds thinks that I'm a "f*cking moron", then I'll wear that label with pride.
Google admits to tracking users' positions even when location services are turned off. Now they say they won't do it again. Maybe. (via #fefe) https://qz.com/1131515/google-collects-android-users-locations-even-when-location-services-are-disabled/
Intel had vulnerabilities in (among others) their Trusted Execution Engine(!) that would allow a "successful attacker [to]:
* Impersonate the ME/SPS/TXE, thereby impacting local security feature attestation validity.
* Load and execute arbitrary code outside the visibility of the user and operating system."
I'm not even blaming Intel for not being able to write a bug-free Trusted Execution Engine. But it ought to be optional, in case I don't want it (which I don't).
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
