Hacker Newsnew | past | comments | ask | show | jobs | submit | timschmidt's commentslogin

I am not surprised at all, because instead of throwing their support behind the LibreSSL folks who audited the OpenSSL codebase after Heartbleed and found deep design and implementation issues, Linux Foundation and member orgs including most of Silicon Valley decided that OpenSSL just needed more funding.

Felt like good money after bad on day 1.


The problem with the OpenSSL 3 codebase isn't security; many organizations, including the OpenSSL team itself, have been responsible for pulling out of the security rut OpenSSL was in when Heartbleed happened. The OpenSSL 3 problem is something else.

so, incompetence of people writing it

If you don't have anything meaningful to say, you can just not comment.

And once you realize that Management + Finance + Marketing outnumber engineering at OpenSSL [1], you know the money is put to good use, too.

[1]: https://openssl-corporation.org/about/leadership/


If I were cynical, I'd think that the inscrutable code and resultant security issues were a feature desired by those management and finance types, not a bug. The purpose of a system being what it does, and all.

Seems plenty of the people occur multiple times, so there's more engineers... if only barely :|

If you value somebody so much you show them multiple times, I'm going to assume they're outsized weight in terms of influence and cost, too.

> programmers seem to have to argue it doesn't actually do anything for some reason.

It's not really hard to see... spend your whole life defining yourself around what you do that others can't or won't, then an algorithm comes along which can do a lot of the same. Directly threatens the ego, understandings around self-image and self-worth, as well as future financial prospects (perceived). Along with a heavy dose of change scary, change bad.

Personally, I think the solution is to avoid building your self-image around material things, and to welcome and embrace new tools which always bring new opportunities, but I can see why the polar opposite is a natural reaction for many.



The Universe (which others call the Golden Gate Bridge), is composed of an indefinite and perhaps infinite series of spans.

Linux gets WAY better battery life on SteamDeck than Windows: https://www.howtogeek.com/ive-tried-steamos-and-windows-on-m...

> If the interfaces that controlled all the laptop goodies were exposed as normal hardware (and documented) instead of gatekept behind ACPI methods that have to be written by firmware vendors that can often barely spell the menu options correct in the setup screens, then this issue would not exist.

> UEFI is ACPI's successor and carries on this legacy. It's disappointing that it's seeping into the ARM world.

Arm (and Risc-V and other arches) Linux has https://en.wikipedia.org/wiki/Devicetree instead of ACPI, which is better in that it declaratively documents the hardware in a system and how to access it. However, the hardware support which can be found in the Arm ecosystem is in no way better than that for x86 laptops. Many SoC manufacturers still don't put any effort into upstreaming drivers or device trees, many devices are still only supported by tossing a single release of a heavily patched kernel over the corporate wall and then forgetting about them.


Good ol' Oven Standard Time (OST).


Routing signals through PCB vias requires greater voltage and has lower available bandwidth than silicon-to-silicon bridges. AMD's first generation of cache dies bonded to the top of the CPU, but their second generation bonded to the CPU's bottom which improved cooling for the fast logic on top. Similarly, HBM under logic would be ideal.


The Epstein debacle seems to indicate that child sexual exploitation is a preferred method of entrapping, blackmailing, and controlling world political and science leaders and the wealthy. And implicates the same intelligence agencies calling for mass surveillance.


Similarly, the 4th amendment to the US Constitution reads in full:

"The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized."

"papers, and effects" seems to cover internet communications to me (the closest analog available to the authors being courier mail of messages written on paper), but the secret courts so far seem to have disagreed: https://en.wikipedia.org/wiki/United_States_Foreign_Intellig...


SCOTUS will simply say that since the constitution didn't explicitly state that electronic data and communications was protected, then it isn't.

Even if it did explicitly say that this information is protected, SCOTUS would just make up a new interpretation that would allow surveillance anyway. Same as they made up presidential immunity, even though all men being subject to the law was pretty explicit purpose of the founding of america. I mean, they had a whole revolution about it.


Text, phone calls and emails which are not encrypted are the equivalent of a postcard. They don't need to seize the effects, only observe them.

Encrypting, end to end, would be the equivalent of posting a letter. The contents are concealed and thus are protected.


Time to wiretap all of Congress and then have a bot post it all to mastodon...


Except, wiretapping was considered very illegal in the USA.


> all men being subject to the law was pretty explicit purpose of the founding of america. I mean, they had a whole revolution about it.

I don't think it is a feasible claim. Revolutionaries, by definition it seems to me, believe some men and the enacting of their principles are above the law. A revolutionary is someone who illegally revolts against the current law.

And formally recognising presidential immunity isn't really as novel as the anti-Trump crowd wants to believe. If presidents were personally subject to the law for their official acts, most of them wouldn't be in a position to take on the legal risk of, eg, issuing executive orders. If something is done as an official act then the lawsuits have to target the official position and not the person behind them. That is how it usually works for an official position.


I think it wouldn't be unreasonable to expect the law to distinguish between official acts taken in an honest attempt to benefit the nation, and those taken to corruptly and brazenly benefit oneself.


That'd be a massive break from tradition in the US. AFAIK the only formal mechanism they have to separate the official from the person behind the role is impeachment by Congress. Apart from that there isn't really a mechanism to handle brazen corruption.

And US presidents have a long history of corruptly and brazenly benefiting themselves. Sometimes you see those before-and-after charts showing how much money they make while in office in excess of the official salary. The typical modern US president makes at least 10 of million in office and it isn't from the salary. Nobody likes it, but there is an open question of what exactly can be done about it.


I want privacy too but I don't think the 4th amendment is enough. The 4th amendment effectively covers what's in your house. It does not cover people and business outside your house. If you interact with someone else, they also have a right to use/remember the fact that you interacted with them, whether that's your family, friends, or some random business. You call someone on the phone, 3 parties are involved, you, the person you're calling, the company(s) you paid to make the call possible.


Every tool can be misused. Hammers are as good for bashing heads as building houses. Restricting hammers would be silly and counterproductive.


Yes but if you are building an voice activated autonomous flying hammer then you either want it to be very good at differentiating heads from hammers OR you should restrict its use.


OR you respect individual liberty and agency, hold individuals responsible for their actions, instead of tools, and avoid becoming everyone's condescending nanny.

Your pre-judgement of acceptable hammer uses would rob hammer owners of responsible and justified self-defense and defense of others in situations in which there are no other options, as well as other legally and socially accepted uses which do not fit your pre-conceived ideas.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: