Readit News logoReadit News
kurikuri commented on Computer fraud laws used to prosecute leaking air crash footage to CNN   techdirt.com/2025/08/22/i... · Posted by u/BallsInIt
Aurornis · 8 days ago
Note that CNN isn’t in trouble for reporting this, the person who exfiltrated the footage is.

Stealing security camera footage and giving (or possibly selling) it is a problem. This article tries to make a case that the law applied wasn’t correct on somewhat pedantic terms, but I don’t know enough about the law to know if they have a point or not.

I do know, however, that if you take private data from your employer and leak it (or sell it) you’re not going to be on the right side of the law. I have a hard time buying this article’s point that it was just “violating company policy”

kurikuri · 8 days ago
> I do know, however, that if you take private data from your employer and leak it (or sell it) you’re not going to be on the right side of the law. I have a hard time buying this article’s point that it was just “violating company policy”

If I were to copy the files on my work device and distribute them, I would be in violation of NDAs which could be pursued as civil offenses. If I didn’t have those NDAs, my employer could try and pursue something in court, along with firing me, but it wouldn’t be a straightforward suit.

None of these are (or at least, should be) criminal situations.

kurikuri commented on Never write your own date parsing library   zachleat.com/web/adventur... · Posted by u/ulrischa
quelsolaar · a month ago
When ever i see "never implement your own...", i know i want to implement it myself. People say that about hard things, and I only want to do hard things. Nobody wants people who can do easy things, people want people who can do hard things. The only way to learn how to do hard things, is to do hard things, so do the hardest things.

So go ahead, write your own date library, your own Unicode font rendering, compiler, OS, game engine or what ever else people tell you to never do because its hard.

kurikuri · a month ago
> When ever i see "never implement your own...", i know i want to implement it myself.

Doing stuff for learning is useful, and the intent behind this general phrase is to not ‘implement your own’ something which is both hard and critical in a production environment. I work in cryptography (for security purposes) and have implemented quite a few things myself to learn, but I still use stable, field tested, and scrutinized crypto for any actual use.

> People say that about hard things, and I only want to do hard things. Nobody wants people who can do easy things, people want people who can do hard things.

Only wanting to do hard things limits yourself quite a bit: what about things which seem easy but could be improved? I worked in a non-tech related medical manufacturing job for a bit and took time to learn the process and tools. Afterward, I implemented a few tools (using what my coworkers (who have no programming or IT experience) have available to them: Excel and the VBA on the lab computers) to help them prep inventory lists which they have been doing by hand. Doing it by hand took them 3 hours as a group (and the first shift had to do this every morning), which my tool did in 5 seconds with a single button click. They still use it to this day, about a decade later.

This wasn’t something ‘hard:’ I glued a few files together, grouped a list by a filter, sorted the groups by a column, and made a printout which was easy to read and mark on as they went about their day. However, my coworkers didn’t even know this was possible until someone came in with a different skill set, learned what they did (by doing the job well for months) and then made a solution.

You must be careful with doing only ‘hard’ things. It requires other people to identify what is hard! In addition: crackpots do only hard things and believe they find better solutions than what exists so far (without consulting or learning about what has been done). Interesting people learn about things as they are (with the humility of knowing that they are not experts in most things) and tries to improve them using the knowledge they already have.

Don’t waste your time rolling your own crypto when you could do the _actual_ hard thing and identify unaddressed space to make careful and considered improvements.

kurikuri commented on How to prove false statements: Practical attacks on Fiat-Shamir   quantamagazine.org/comput... · Posted by u/nsoonhui
baby · 2 months ago
You realize all signatures in use today basically use hash functions as randomness
kurikuri · 2 months ago
What? You’ve managed to mangle so many terms in so few words… Signatures can refer to two things: integrity checks on a file or authentication checks for a recieved file. In the integrity check situation a hash function (e.g., SHA) is often used. In the authentication check situation, we usually use a public/private keypair for asymmetric encryption; the hash function is only part of the process. The key material used to make this keypair (should) comes from some random number generator…

The ‘hash’ function is a deterministic transform, not a source of randomness.

kurikuri commented on More on Apple's Trust-Eroding 'F1 the Movie' Wallet Ad   daringfireball.net/2025/0... · Posted by u/haunter
etempleton · 2 months ago
I assume it was just Apple blasting the ad to everyone because they have a big investment in the film, but it is in poor taste. Reminds me a bit of the U2 album showing up in everyone’s music library, though perhaps a bit less intrusive in a way.

Apple seems to lack focus right now. They keep distracting themselves with things that they shouldn’t bother with (the Apple car) and releasing products in half finished states. I am a bit worried about Liquid Glass. It feels half baked in a way I am not sure I have seen such shoddy design work from Apple before, even in a beta.

kurikuri · 2 months ago
The U2 album was odd, but not bad in the same league. Apple didn’t advertise for you to purchase U2’s music. As an end user, what made it annoying was how the U2 album was part of your library (thus, would show up in shuffle, etc.) and removing it was a whole ordeal.

This wallet notification was silly. Prior to this, I believed that their wallet app would give notifications much like how settings app would: rarely and without commercial intent.

kurikuri commented on US Supreme Court limits federal judges' power to block Trump orders   theguardian.com/us-news/2... · Posted by u/leotravis10
yieldcrv · 2 months ago
Judges were using injunctions to avoid putting their name behind a ruling.

They can absolutely still strike down a law or executive branch policy.

This forces judges to actually do their job., instead of a nationwide injunction while they decide if they want to do their job later.

It doesn’t actually alter some fabric of our democracy or checks and balances, because the judges had already gone beyond what the constitution and congress prescribed.

Every issue that any partisan has with this country is because one branch isn’t doing their job.

The disruptive aspect of this - with concern to the birthright case that hasnt been ruled on yet - is just another example of this. Judges not doing their job.

kurikuri · 2 months ago
> Judges were using injunctions to avoid putting their name behind a ruling.

What? That makes no sense. You can lookup which court and judge (or panel of judges) issued the injunctions. I do not understand why this non-existent anonymity would motivate a judge to issue an injunction.

> They can still strike down a law or executive branch policy.

Federal courts will only look at cases if there is a party with standing who engages in a lawsuit. If someone is being deported without due process, it will be hard for them to bring suit.

> This forces judges to actually do their job., instead of a nationwide injunction while they decide if they want to do their job later.

In general there are two reasons why these temporary restraining orders which have been issued. The first being that not doing so would cause irrevocable (or ridiculously difficult to revoke) harm (e.g., deporting people to a foreign jail). The second is that the TRO is used to stop something which seems illegal on its face (e.g. deporting people to countries from which they have never been).

> It doesn’t actually alter some fabric of our democracy or checks and balances, because the judges had already gone beyond what the constitution and congress prescribed.

It does alter the power dynamic of our democracy. Now, the executive branch can repeatedly perform illegal acts and only needs to stop its behavior in cases which have been decided. This checks and balances isn’t about stopping each other branch in a vacuum, the intent is to stop the government from overreaching on its citizenry. By crippling all of the lower courts, the Supreme Court has created a bureaucratic bottleneck for itself, allowing the executive branch to effectively DDoS the judicial system with case after case.

> The disruptive aspect of this - with concern to the birthright case that hasnt been ruled on yet - is just another example of this. Judges not doing their job.

No, it was the judge telling the executive branch that the executive branch must recognize the citizenship of children born on US soil. Instead of actually appealing the TRO on grounds of the legality of their actions, the executive branch has decided to complain about the legality of a court telling the executive branch to stop.

Who is supposed to tell the executive branch to stop doing something illegal, congress? Part of the point of the executive branch was to allow for some expedience, congress is slow. A judge is in a perfect position to tell the executive branch to stop, they don’t need to wait on committee and are not beholden to the president. Without the ability, the executive branch can quite literally do whatever the president wants.

kurikuri commented on Getting ready to issue IP address certificates   community.letsencrypt.org... · Posted by u/Bogdanp
arccy · 2 months ago
Hell no. Email encryption should be left to rot.

https://www.latacora.com/blog/2020/02/19/stop-using-encrypte...

kurikuri · 2 months ago
Oof, I don’t like this article much at all.

The first two major points they pose against email can be summed up as ‘people don’t use security unless it is by default, and because it wasn’t built-in to email we shouldn’t try.’ To which I respond with: perfect is the enemy of progress. Clearly, email is sticky (many other things have tried to replace it), and it has grown to do more than just send plaintext messages. People use it for document transfer, agreements, as a way to send commands over the internet, etc. Email encryption and authentication is simply an attempt to add some cryptographic tooling to a tool we already use for so many things. Thus, these points feel vacuous to me.

The last two points are less to do with email and more to do with encryption in general, and it is probably the most defeatist implication of the fact that there is no ‘permanent encryption.’ It is an argument against encryption as a whole, and paints the picture for me that the author would find other reasons to dislike email encryption because they already dislike encryption. These last two points are an extension of wanting an ideal solution and refusing to settle for anything less.

kurikuri commented on U.S. Chemical Safety Board could be eliminated   ishn.com/articles/114776-... · Posted by u/z991
rectang · 2 months ago
> Sure, we can say there is no objective source of truth and chastise the author for using that word

I regret my imprecise use of language which has taken us down this tiresome metaphysical subthread. I should have merely emphasized that the CSB presents an alternative point of view to that of the company. It was not essential to my point that the CSB be unassailable.

kurikuri · 2 months ago
Ah, I was being a bit sarcastic in my response to monkeyelite, I believe I understood what you wrote and was trying to get at the vacuity of their response to you.

I derailed this conversation to make a meta point, and it wasn’t your fault at all.

kurikuri commented on U.S. Chemical Safety Board could be eliminated   ishn.com/articles/114776-... · Posted by u/z991
monkeyelite · 2 months ago
> there is some overtly unbiased information source, in opposition to the information sourced from the company which has obvious incentives.

Yes I don’t believe in unbiased sources. I believe in multiple perspectives revealing aspects of the truth.

> you are (possibly inadvertently) claiming that the company is also providing a different source of truth

Correct. And I don’t buy the dichotomy you are framing of biased companies vs unbiased government.

> Don’t be the person who adds nuance for the sake of nuance.

The term “objective truth” was just thrown around. Might as well just say it’s an “absolutely good”. The level of discourse in these threads is science = good, agency with science in name = science. Cuts against agency = bad.

What are the costs and benefits to this organization? It appears some sub threads have identified a possible overlap with other agency’s responsibility. It would be interesting to know the extent that is true.

kurikuri · 2 months ago
> Yes I don’t believe in unbiased sources. I believe in multiple perspectives revealing aspects of the truth.

Sure, I agree with what you’ve stated here.

> Correct. And I don’t buy the dichotomy you are framing of biased companies vs unbiased government.

I reread what I wrote and still don’t see that I framed the conversation in this way. What I did frame was the motivation of the company (which I implied to be profit) versus the motive of the government (that of public interest). These are both biased and the effect of the bias could be anticipated: companies would slant their published information with a focus on the effects of profits, whereas the government’s overt bias would slant its information output towards safety (in the case of the CSB) without much concern for profit.

> The term “objective truth” was just thrown around. Might as well just say it’s an “absolutely good”. The level of discourse in these threads is science = good, agency with science in name = science. Cuts against agency = bad.

Sure, we both agree the author is biased towards the government, but you’ve missed the thrust of what I wrote entirely: your nuance added absolutely no value to the discussion, it didn’t make a point or refute anything the author said.

kurikuri commented on U.S. Chemical Safety Board could be eliminated   ishn.com/articles/114776-... · Posted by u/z991
monkeyelite · 2 months ago
> an objective source of truth

An alternative source with different incentives and culture, not an objective one.

kurikuri · 2 months ago
Nuance is not always a good thing. This type of nuance doesn’t forward the discussion in any way and, in this case, muddies the waters and leads to some odd implications. Sure, we can say there is no objective source of truth and chastise the author for using that word, but the term objective in this case has meaning that the author is trying to articulate… most likely that there is some overtly unbiased information source, in opposition to the information sourced from the company which has obvious incentives.

Additionally, by stating that the CSB provides an ‘alternative source’ of truth, as a correction to an originally described objective one, you are (possibly inadvertently) claiming that the company is also providing a different source of truth, rhetorically raising the value of the information the company provides while lowering the value of the CSB information.

Don’t be the person who adds nuance for the sake of nuance.

kurikuri commented on Working on databases from prison   turso.tech/blog/working-o... · Posted by u/dvektor
kurikuri · 2 months ago
They were likely in a homogeneous population when they committed the crime that got them there in the first place, so that confounder might not matter much at all.

u/kurikuri

KarmaCake day257March 25, 2020
About
[ my public key: https://keybase.io/cbellii; my proof: https://keybase.io/cbellii/sigs/4ane0tmWHiznmsXZ51SB-h_TRtHFdLSz8rcB3erF6fo ]
View Original