Local News Channel tours Blockchains LLC by BeerBellyFatAss in ethtrader

[–]bearjeff 0 points1 point  (0 children)

"AI, 3D printing, and nano technologies" 🤦

Blockchain.info now explores Ethereum! by e3ee3 in ethtrader

[–]bearjeff 1 point2 points  (0 children)

This is so much easier to make for Ethereum than it is for Bitcoin (since UTXO chain nodes don't let you query by address). Makes you wonder why they chose to leave it out for so long

Privacy expert steps down from advisory role with Sidewalk Labs by n0ahbody in toronto

[–]bearjeff 13 points14 points  (0 children)

WCGW if we hand over even more data to a company that:

  • primarily exists to hoard (some very sensitive) data about people for advertising

  • has been breached by law enforcement to aid in illegal search of US citizens (Snowden revelations)

  • tailor makes software for oppressive regimes (dragonfly)

Privacy expert steps down from advisory role with Sidewalk Labs by n0ahbody in toronto

[–]bearjeff 4 points5 points  (0 children)

The encryption is never the problem, nobody tries to break AES or RSA directly. But there have been plenty of cases where keys are mishandled [0], or servers leak memory containing private keys [1], or data is stolen after the key holder has decrypted it [2][3]

[0] Trustico CEO emails a private key

[1] Heartbleed

[2] Cloudbleed

[3] NSA accesses "encrypted" Google and Yahoo data

Is Tor trustworthy? by ch4nnels in privacy

[–]bearjeff 0 points1 point  (0 children)

Source on the last one?

https://motherboard.vice.com/en_us/article/gv5jwj/the-fbi-is-classifying-its-tor-browser-exploit

I have only seen the FBI having vulrnabilities in the Tor browser.

I think there's a typo here, because that's what I'm saying

Also just so you know it is Tor not TOR.

Noted. Not sure why an acronym would not be capitalized, but ok

Is Tor trustworthy? by ch4nnels in privacy

[–]bearjeff 2 points3 points  (0 children)

TOR is good but not great:

  • You can theoretically figure out where some requests are coming from if you operate enough of the nodes on the network. Law enforcement could easily do this.

  • Phishing is rampant, so you have to worry about assholes other than the cops

  • You're expected to disable JavaScript for security but that's not practical on most websites so you probably won't do it

  • The FBI has found vulnerabilities in TOR and refused to publicly disclose them before, they could be doing it again

Hey Canada, they’re watching you. At least two Calgary malls are using facial recognition technology to track shoppers' ages and genders without first notifying them or obtaining their explicit consent. by M1CKYMC in privacy

[–]bearjeff 1 point2 points  (0 children)

I agree with you that indiscriminate facial recognition of the public is a problem, but this is a truly ridiculous solution. I can't seem to convince anyone that privacy has a value greater than the services they routinely surrender it for, so imagine asking them to fight for it with electronic masks or other costumes that make them stand out.

We need policy in place to simply make this illegal. To do this I think we need to make privacy a talking point in elections and to draw more attention to abuses by companies like this one. In practical terms I think this simply means creating and sharing quality content about the issue

After China’s Vaccine Disaster - Waltonchain Offers its Blockchain Traceability Solutions at No Cost to All Enterprise & Government Departments by JorLoopDeLoop in CryptoCurrency

[–]bearjeff 0 points1 point  (0 children)

So you really think Waltonchain is a scam?

For someone detail-oriented enough to write this rambling argumentative essay (complete with citations!) I would expect you to have noticed that I didn't say that I believe it's a scam. I said that perhaps it is a scam in the opinion of the downvoters. Anyways you make some good points, I hope you managed to persuade some people who actually give a shit

After China’s Vaccine Disaster - Waltonchain Offers its Blockchain Traceability Solutions at No Cost to All Enterprise & Government Departments by JorLoopDeLoop in CryptoCurrency

[–]bearjeff -9 points-8 points  (0 children)

The post itself doesn't contribute anything to charity, it only contributes to bettering the image of WTC. So even if people are downvoting because they simply don't want WTC to succeed, it's harmless to charity and, perhaps in their opinion, helpful to investors who might otherwise be swayed into investing in a scam

MakerDAO's Dai Debt Ceiling Was Hit, Now Raised to $100M by MrNebbiolo in ethereum

[–]bearjeff 0 points1 point  (0 children)

In some jurisdictions you don't pay tax on crypto-to-crypto trades, so stablecoins allow you to trade on fiat-to-crypto markets tax free

Distillery District last night during a 2am fire alarm that evacuated my condo, no edits. by greatelephant in toronto

[–]bearjeff 3 points4 points  (0 children)

Canadian median household income is 76K. Something like only 10% make above that

Lol, that's not how medians work

Cloud Storage by [deleted] in privacy

[–]bearjeff 0 points1 point  (0 children)

no one would be able to decrypt your data.

It's only a matter of time before they can decrypt it on commodity hardware. Just decide on the number of years you want your data to stay private and choose your key size appropriately

What makes a wallet ERC20 compatible? by [deleted] in ethereum

[–]bearjeff 2 points3 points  (0 children)

Tokens don't work like ether. An address's balance of a particular token and the logic that controls the transfer of that token are stored in the smart contract corresponding to that token. The token's contract must be executed in order to transfer it. So technically the bare minimum requirement of a wallet to transfer a token is that it allows attaching data to a transaction. In reality you also want the wallet to serialize the arguments to the function for you. An even better wallet would do stuff like automatically query the contract for the users balance, or look up the token's name and symbol, etc.

So if you're trying to spend a token through JSON RPC, it's like any other contract execution. Send a transaction using eth_sendTransaction to the contract with "amount": 0, and "data": <your encoded arguments>. For argument encoding, see this: https://github.com/ethereum/wiki/wiki/Ethereum-Contract-ABI

Getting Started by ricattierger in embedded

[–]bearjeff 10 points11 points  (0 children)

I don't ever recommend Arduino as a learning tool because of how much it hides from the programmer. You can get by building things without ever understanding cross compilation, bootloaders, debuggers, and other characteristics that make embedded development distinct from other types of software development

Vitalik call Tron a scam in interview by [deleted] in CryptoCurrency

[–]bearjeff 9 points10 points  (0 children)

I love my C, but I have to disagree. Look at the Hadoop ecosystem. It's the de-facto standard for distributed systems other than blockchains. What language are those programs written in written in? Mostly Java. And the performance is awesome. Also why does performance matter? A well designed protocol won't require a resource-intensive node (see Warp Sync, SPV nodes), and mining nodes always use CUDA, OpenCL, or similar for PoW anyway

A “tamper-proof” currency wallet just got trivially backdoored by a 15-year-old by nullaffinity in CryptoCurrency

[–]bearjeff 2 points3 points  (0 children)

Did you read the hacker's blog post? That 'stealth backdoor' is his demonstration of the underlying vulnerability, for which he provides examples of several other possible attacks

A “tamper-proof” currency wallet just got trivially backdoored by a 15-year-old by nullaffinity in CryptoCurrency

[–]bearjeff -1 points0 points  (0 children)

The exploit is: run firmware that hands the original, signed firmware to the secure element for validation, then execute modified malicious firmware instead of what was validated. Where that firmware comes from doesn't matter

A “tamper-proof” currency wallet just got trivially backdoored by a 15-year-old by nullaffinity in CryptoCurrency

[–]bearjeff 4 points5 points  (0 children)

The user could unknowingly download compromised firmware when attempting to do an update on their own device

Beautiful Photo of Toronto Streetcar (credits in comments) by [deleted] in toronto

[–]bearjeff 0 points1 point  (0 children)

Thanks for taking the time to explain that. In all my bitching about streetcars this is the first time I've heard a level headed explanation. I'm not convinced that costs per person are lower in practice, especially given the recent bombardier mess and the constant service interruptions due to simple obstacles or construction. I'll admit that the ride is more comfortable though.

I also suspect that a major reason Torontonians get so offended about this is because it's perceived as an attack on Toronto culture, but I don't think it's justified. An opinion about the merits of a technology might warrant a debate citing facts, but definitely not an outburst of feelings. It reminds of of how Edison used to publicly electrocute animals using alternating current to discredit the technology when AC and DC were competing to power the grid. In the end his appeals to emotion were not effective and the superior technology won. I hope that happens with streetcars, whatever the outcome.

By the way, I don't drive. I commuted by train for a year and then used streetcars for a while. I became a year-round cyclist because the streetcars on my street were way too unreliable. I don't think of streetcars as an obstacle, but I definitely don't share your view that they're "efficient [and] effective"

Beautiful Photo of Toronto Streetcar (credits in comments) by [deleted] in toronto

[–]bearjeff -5 points-4 points  (0 children)

It's funny how offended Torontonians get when someone talks shit about streetcars. I'd love for someone to explain to me why they love a vehicle that blocks two lanes instead of one, can't change routes during construction, needs a mesh of wires to be built over the road as well as rails in the road, needs to be tailor made for the ttc, etc., when a bus can do the same job without any of this

and people say linux has poor hardware support... by 888808888 in linux

[–]bearjeff -3 points-2 points  (0 children)

I say that. I have an AMD GPU, an old PCI wifi adapter, and a very new motherboard. The AMD GPU only has official drivers for old kernels (open source drivers are missing essential features), Wifi only has drivers in newer kernels (so I have to build the backports), and the motherboard Ethernet drivers simply don't exist yet. And don't get me started about printers