Slapshot_gd's comments

On: Linux for Playstation 2

[Slapshot_gd]

I absolutely loved playing around with that kit, I remember porting our IPTV middleware to it as a PoC a long time ago, was fun for demos :)

On: 23andMe tells victims it's their fault that their data was breached

[Slapshot_gd]

> “Therefore, the incident was not a result of 23andMe’s alleged failure to maintain reasonable security measures”

In all honesty, you can hardly make this claim unless they properly communicated and mandated (at least in writing, since I can't imagine how it could be actually enforced) that users chose/pick passwords different from other platforms. Or at the least enforce an aggressive password change schedule, etc...

[ziddoap → Slapshot_gd]

>at least in writing, since I can't imagine how it could be actually enforced

You can check passwords against known-compromised lists and then tell the user "sorry, please use a different password". This is something that is a recommended best practice, and has been for at least a few years.

>Or at the least enforce an aggressive password change schedule

This has been explicitly not recommended since at least 2016 by NIST. Research has shown this leads to password fatigue, which results in weaker passwords that are just iterated on (password1 -> password2 -> password3).

[programjames → ziddoap]

Or, users can check their passwords against known-compromised lists. It's not on them to hold users' hands and check for their mistakes.

[Beldin → programjames]

Let's not fall for 23andMe's attempts at victim blaming. They offered the service, and they failed to implement to reasonable security practices. Their process allowed users to pick "obviously" flawed passwords. Well, those passwords weren't obviously flawed enough to bar their use, but obvious enough to blame users afterwards.... yeah that's BS.

[ziddoap → programjames]

Yes, users can (and should) be doing that as well.

On: Mptcp: An overlooked new feature in Go 1.21

[Slapshot_gd]

And even commercial broadband services.... In full disclosure I worked as a supplier to implement MPTCP on the CPE for BT at the launch of their service (time marker 1:48 starting point) : https://youtu.be/eMKAFWy6940

On: Mptcp: An overlooked new feature in Go 1.21

[Slapshot_gd]

Anyone who uses SIRI is probably a great example.

On: Bilingualism affords no general cognitive advantages: Study

[Slapshot_gd]

For those experts in the field, curious how this study relates to this one : https://psycnet.apa.org/record/2011-17952-001 , I'm absolutely no expert in any of this, but I am bilingual and did encourage my kids to explore and learn new language(s).

On: CATL has announced a new “condensed” battery with 500 Wh/kg

[Slapshot_gd]

That was exactly my thinking actually..... I own an equestrian property as a hobby, I need a big diesel truck (1 ton) to haul horses, hay, tractor, etc... Sometimes for very long distances (>1000kms) for shows, etc... There are no viable options today, or in the near (10-15 years) future that offer viable alternatives in the form of an EV... at least not from traditional HD truck vendors.....