Notices by Mathaetaes (mathaetaes@infosec.exchange)

@northernlights @tinker @jerry TBH, I’m not sure I see a problem with this precedent.

Banning all billionaire-controlled, algorithm-defined social media would probably be a net positive for society.

@inthehands my theory is that the press just regurgitates what the candidates say.

They don’t run a story saying “Biden is old”, they run “‘Biden is old’, Trump says”.

Trump can’t run on his positive qualities; he has no good ideas, no qualifications, and no historical record to point to. All he can do is try to make his opponent look worse than him.

Harris, on the other hand, has plenty of positives. Lots of policy, lots of qualifications, lots of history. Harris doesn’t need to spend her time levying insults at Trump. Since she’s not talking about how old he is, the newspapers aren’t writing articles about her talking about how old he is.

I don’t know if it’ll be a winning strategy, and it seems like some democratic politician somewhere should be making coments go generate those headlines… but clearly they’ve decided not to.

@GossiTheDog I get that question a ton too, and the best answer I have is that I was the one willing to do the stuff nobody else wanted to do.

It doesn’t work anymore because everyone wants to be a “cybersecurity” professional, mostly because someone told them we get paid a ton.

I’d love to meet that someone and see where they’re getting their info, because from what I can see, we get paid the same as senior devs to do stuff that makes everyone’s job harder, and if we do it right nothing happens.

@inthehands If it was literally anyone other than a police officer, we'd be calling it a mass shooting, reporters would be digging up dirt on the the disturbed shooter/shooters, someone would inevitably call them 'crazy' and try to blame poor mental health, people would be pointing fingers at who gave them the gun.

But because the guy managed to complete 6 months of community college-level education, we give them a gun and a free pass.

@mattmay Is anyone checking him, or are they just letting him run rampant?

Sometimes, it's better to make the environment such that the uncle cannot wait to get away from the party, rather than make the party feel uncomfortable with the uncle.

I understand polite company and all that, so maybe it's not the right time/place. I've got an uncle like that, though, and he just won't talk anymore if I'm in the room. I've checked him enough, in front of everyone (except grandpa... polite company and all) that he's just given up.

Family gatherings are far more tolerable in this state.

@mekkaokereke wait, what?? Is this a real thing people believe, or is this just absurd hyperbole set to illustrate the ridiculousness of the white right’s propaganda in general?

I don’t know if I should be proud that my timeline curation doesn’t even let these rumors reach me, or ashamed that my social media bubble is too small to even pick up people talking about this.

@inthehands @homelessjun @MisuseCase @mekkaokereke it’s not much of a question when you realize that any change to the law gets turned into a police labor issue, and the union will just stop working… much like they did after the Floyd protests. When cops stop showing up to white folks’ calls, and local news orgs (who need police favor if they want to get statements on breaking news) run articles about how crime is in the rise (regardless of reality), citing statements from police, white donors stop donating or switch to whatever “law and order” candidate is the most oppressive. Sometimes it’s a retired cop.

The whole system of civic violence is broken, but so entrenched it will require a substantial, determined force to dislodge it.

@ryanc we do this. We just call them misuse cases, and we have a team of assholes we call offensive engineers to come up with them.

@feld @RandomDamage weak ciphers do not necessarily mean computationally cheap ciphers… but that’s less relevant.

Way back when I used to work at an ISP, we’d have people with colo servers running on single-core pentium chips. Most connections were high-latency, low bandwidth 56K dualup. If a normal page took 3-10 seconds to load due to slow bandwidth, the same page over SSL might take 15-20 due to the number of extra round trips required to negotiate the session over a 100-300ms connection. Add a 333 mhz clock on the server (and a 100-200mhz clock on the client) and you did get a noticeable performance hit.

It was enough that people who needed ssl would buy dedicated SSL-offload hardware just to handle the compute, and hope the rtt was low enough that they didn’t lose customers.

So yeah, certificate costs were also stupid high, but the compute and bandwidth impact of SSL back in the day was not trivial, and hindered adoption on its own.