winstonwinston

Different paths. If you’ve got a “dual stack” on your computer, give it a try.

tracert -4 google.com

tracert -6 google.com

I do get very different hops and latency.

However for “happy eyeballs” algo to fallback to IPv4, latency needs to be very bad on IPv6.

Can you tell some example please, because I see fellow balkans thrive wherever they go. It’s the opposite in my experience when you come to balkan from strict regulatory environment then there are problems.

My bet is on Windows Millennium Edition (Windows ME). That was broken version. Windows 2000 was good.

While WinMe was 98 successor and meant for home use, Win2k was business oriented.

Uh oh, TIL exploder was a thing on a mac. I moved to macintosh when first macbook air was released, so that’s os x leopard or snow leopard.

When you roam phone “leaks” mobile number and identifiers. So receiving a Text (SMS or iMessage) spam would make sense, but email does not.

> Be the change in the world you want to see. Turn javascript off. Use real native applications that cannot change underneath you.

But they can change (underneath). Native app is one bug away from arbitrary code execution. When remote content triggers this bug, it becomes RCE. In this case it was javascript engine bug, in any other it could be your photo viewer or whatever native code you are running with untrusted content. The untrusted content being an image you are viewing.

> This is hyperbolic; the agents were only able to access the internet by finding a zero-day in the internal Artifactory instance that was providing package access for the agents. The sandbox could and should have been better, but it was not as weak as it could have been.

Like we all forgot how sandboxing is done for decades. This brokered thing they call sandbox is not it.

I guess that’s the point. Initial incident reports from all sides were so vague and didn’t disclose anything technical. If it did, it would show a bruteforcing bot let loose to spend millions in infrastructure costs and there’s no ‘intelligence’ in that.

My suspicions for ai all along was that bruteforce approach even if useful will be unsustainable due to high cost in the long run.

General desktop replacement is not easy to pull of (successfully). It seems weird to start with replacing windows or macos rather than SaaS and IaaS, which they are concerned about the most. In the end they still going to use phones with software from Google and Apple.

> I've accidentally set up passkeys just by clicking an okay button a few times in the past and had to go back and figure out how to undo it after being blocked from login on another computer (which computer was I on again?).

No doubt there exist services that do not offer recovery method for passkey or mfa enabled account. But this is entirely on them (the service), to blame for, not the passkeys or the users. It’s bad implementation.

Imo copying (like carbon copy) makes it fair compared to taking it (without attribution) and claiming it yours.

For example, for software I usually use MIT license, which is a permissive license with attribution.

Why makes no sense at all unless you are very naive trusting they would not jump straight to the endgame if it was possible with the technology available.

The sane way for encryption keys stored in hardware (secure enclave or tpm like) is to onboard user when the key is not derived from user password. Just like they do for FDE to export a recovery key and then you can adjust your expectations when you know (been told) whats going on.

But that’s not backup restore? I’m thinking Time Machine restore on a new Mac when old one is no longer working. Or when the old one had to be wiped and restored.

Maybe but this is unexpected if you need to restore from a backup..