yifanlu
Joined 14 years ago
Joined 14 years ago
^ This software
It installs two separate programs in the installer: H&R Block Premium + State 2025 and H&R Block Business 2025. The first one you can buy separately. The second can only be bought as part of a bundle like from Newegg. The only software I've tested to contain this issue is the Business version. The Premium + State one does NOT have it but I have not spent any time looking for other security issues so I cannot attest there is no other issue. I know it's confusing and that's why I've set up the website for people to easily test to see if they're vulnerable. (Also you can check the video to see both software get installed by the installer you download once you purchase the bundle.)
tl;dr: Used a burner email signing up for Comcast Xfinity and have been constantly receiving phishing emails on that address. (Last one was this morning.)
> To Whom It May Concern:
>
> My name is Tom Harris, and I am a resident of Sacramento, California. I have a few questions about your process for responding to General Data Protection Regulation (GDPR) data access requests:
>
> Would you process a GDPR data access request from me even though I am not a resident of the European Union?
> Do you process GDPR data access requests via email, a website, or telephone? If via a website, what is the URL I should go to?
> What personal information do I have to submit for you to verify and process a GDPR data access request?
> What information do you provide in response to a GDPR data access request?
> To be clear, I am not submitting a data access request at this time. My questions are about your process for when I do submit a request.
>
> Thank you in advance for your answers to these questions. If there is a better contact for processing GDPR requests regarding yifan.lu, I kindly ask that you forward my request to them.
>
> I look forward to your reply without undue delay and at most within one month of this email, as required by Article 12 of GDPR.
>
> Sincerely,
>
> Tom Harris
I honestly thought it was one of those legal trolls who sent the same email to everyone hoping to find someone to sue but I responded anyways explaining how statically generated sites worked and that I’m willing to provide the information, being that the information is that I have none…
The last paragraph in particular made it sound like a veiled legal threat (or that they’re hinting that they’re willing to go down that road). I felt that I had to respond just to establish some record.
I would be curious if librem will ever release data regarding failure rates of their American made phones versus non-American made ones. But considering how they’re branding this and the kind of person who will spend the premium to buy it, I doubt they will ever say anything.
Also after the Snowden revelations, I laugh at the idea that American made products are somehow more “secure”. Sure we (as in US intelligence community) think China puts back doors in things but from the Snowden revelations we KNOW that American companies like Cisco puts backdoor into things.
My guess is this is gonna turn out to be some research paper on viral marketing or something.
> But China, while increasingly mature economically, has not developed proper civil society, human rights, freedom of expression, democracy, and so on.
I don’t want to get into a whataboutism debate about all the human rights violations the USA has engaged in (yes Trump but Obama as well and W before him and etc). But really I’ll just focus on “proper civil society”. Jfc is the sinophobia getting overt around here.
Even if I take the good faith argument that “it’s commentary about CCP not Chinese people” as I often hear after racist remarks, I’ll just point out I’ve been hearing comments like this all my life in all sorts condescending ways. Most of the time in bad faith. So I don’t give a shit about how you “intend” it to be.
The result is more interesting with some context though. One of the biggest discoveries of the 21st century is that PSPACE=IP. That’s where a single all powerful prover can convince a weak verifier of any solution in PSPACE (an extension of P that we believe to be more powerful than P). Then more recently we found MIP=NEXP which is a bunch of classic all powerful provers (with no collusion) can convince a single weak verifier of any problem in NEXP (which is like NP but with much larger proof sizes, thought to be more powerful than NP). The surprising fact is that multiple all-powerful provers can convince a verifier of harder problems. Intuitively this doesn’t make sense because we know each provers are all powerful and are permitted to do anything, even physically impossible tasks, so the fact that a single prover cannot convince a verifier of any problems harder than PSPACE is surprising. More surprising is that multiple all powerful provers can somehow prove harder problems when it feels like we’re not adding any extra power (they’re already “all powerful”).
So in that context we find the also surprising fact that if we weaken the “no collusion” requirement to “only quantum entanglement” and suddenly they can solve the halting problem (but still no more!).
This line of proving both upper and lower bounds about complexity classes is exactly what we want to see in the P vs NP world (which is in many ways less “powerful” of classes but more “practical”). But we don’t even know if P ?= NEXP.
> Yet another reason to be excited about this result—one that somehow hadn’t occurred to me—is that, as far as I know, it’s the first-ever fully convincing example of a non-relativizing computability result.
This is one of the three known barriers any proof of P vs NP must overcome. Not saying any of this applies to P vs NP but the proof technique demonstrated is important for such a proof.
> However, it is not clear whether these reports are genuinely based on measures of instruction per cycle. Rather it appears that they are measures of the amount of work done per unit of time normalized by processor frequency.
That’s precisely why nobody really uses IPC as a way to compare processors. “How much work done per unit of time” is a much better measurement and I guess for historical reasons, people conflate it with IPC.
But real textbook IPC is useless for comparison.
There's been a lot of debate in the enthusiasts community, but reviewers believe that user benchmarks don't have much value. There's so much variation in software, cooling, RAM speed, GPU speed, etc. Even misconfigurations like different running background apps can skew the results.
However, for a processor that's been in the market for a while, I think userbenchmarks is a good site to look at the aggregate data. Their rankings were recently updated to disfavor AMD chips, so don't take those too seriously. But for head-to-head comparisons of processors with a lot of users, you can get a good idea of how much faster a processor is.
However, I disagree that review sites should consider "user data" because 1) these are new processors and people who read these reviews are usually early adopters who want to make a buying decision and 2) the testing setup and methodology is a time consuming and scientific process and shouldn't be discounted by just asking random people to run an app.
> Since we are focusing, in this article, on the banning of the individual from an event -- we are going to start with the initial (to my knowledge) and primary public complaint posted by Kim Crayton and directed to the organizers of the conference (KubeCon).
So as soon as I got to that point, I got suspicious. It seemed awfully convenient to start a story at that point.
> I am keeping my personal opinion out of this article. Just facts, so you can make up your own mind on what, if anything, all of this means.
Not sure if they think they’re getting away with it or if they legit don’t know how biased this reads to someone, who once again, has no stakes in the situation. I actually went ahead and googled and situation and I don’t claim to know the full story from 15 mins of reading different hot takes but boy...
Anyways, that’s enough Silicon Valley tmz for me for tonight.