graylights's comments

graylights | 6 years ago | on: Amazon let a fraudster keep my Sony A74 IV and refunded him

Would that service be indemnifying the seller from fraud? Or is your assumption that the platform would just make the right call?

Probably it's because the platforms don't want to make services to root out fraud because then they become more responsible for owning it. Outside services can't break in because the platforms aren't going to put trust in them. Those services would have to own the cost of fraud.

graylights | 6 years ago | on: Amazon is now delivering half its own packages, rivaling FedEx and UPS

It shouldn't be on the customer to investigate every company they deal with. The public will only know when it becomes so bad that these kind of news stories start coming out. If public opinion is that bad, it should be regulated. Or the drivers need to unionize. I think it's only a matter of time before the drivers join the teamsters.

graylights | 6 years ago | on: Cybersecurity Pros Name Their Price as Hacker Attacks Swell

Software is only one part. Do you trust your hardware, your people, your supply chain, your physical security. "Truly motivated" can mean extreme resources and willingness to cross all boundaries.

Are you secure if your admin's child is kidnapped and the ransom demand is for network access? Are you secure from the Secret Police wanting to hijack your service for their purposes?

Once you accept you CAN'T stop truly all attacks you can be comfortable with acceptable risk and work to mitigate realistic risks.

graylights | 7 years ago | on: Why the world should adopt a basic income

UBI is stuck in extremes.

Libertarians want to cancel social programs and replace with UBI so individuals determine how to spend their benefits. Socialists want to guarantee everyone a living wage but also want the safety nets.

Policy needs to be in middle. You need to enable people to self-manage. Must be ready to help them when there is a bad turn events. But you also need to have a humane way to deal with people that are incapable of taking care of themselves, for example mental illness. The way to handle that is guardianship, not other government programs that can also be individually mismanaged. Guardianship will surely be more expensive then UBI but it is the humane thing to do.

graylights | 7 years ago | on: Why the world should adopt a basic income

If a person can't take care of themself then a social worker should be the safety net. Adult protective services should step in and emergency assistance could be granted. But people with patterns of mismanagement should have a guardianship assigned.

With guardianship that UBI could be directed to an organization to provide that budget management. They can issue a food stamp card, housing assistance, etc. That management could be a government agency or privatized. If privatized it would have to be regulated as a fidicuary.

graylights | 8 years ago | on: Why is it hard to make friends over 30? (2012)

As someone who regularly is late, I disagree. It's all a matter of consequences. I'm never late for a flight because I know it will cost me money. But I run late to work often because I know it the worse I'll get is some jokes. Unless I miss an important meeting, and then I make effort to be on time for.

Fashionably late only makes sense if the others can continue without you.

* 2 hours late to happy hour? glad you can make it, get a drink. (But don't expect me to stay another 2 hours)

* An hour late for D&D game? I guess we can start now. grumble-grumble wasted an hour of everyone elses time.

* 15 minutes late to carpool? You better have a good reason.

graylights | 8 years ago | on: I gave Amazon a key to my house and regretted it

This makes no sense as a cost reduction. Amazon drivers in my area don't even come to my door. Let alone knock. With this they want their drivers to: 1. Come to door 2. Knock 3. Wait a moment for response 4. Unlock door with app 5. Open Door 6. Drop package 7. Close and lock door

Delivery has turned into minimizing every excess second. I wager within a few months most of these amazon keys will be ignored as they leave packages on the driveway. I wouldn't buy this unless it comes with a guarantee it will be used.

graylights | 11 years ago | on: Did a Human or a Computer Write This?

It could report on small events that are normally not covered to. Further it could customize articles based on readers interests. Have a favorite player? He is now highlighted in your articles.

It could also do vanity articles. Go back to your college days and write about your games, making you the highlight.

Worse it could be influenced to do personalized advertisements in the middle of the article.

graylights | 11 years ago | on: More Data on Attributing the Sony Attack

The bigger issue is that even if you accept the USB2 transfer, you can't make any real conclusions. Was the USB transfer from victim machine to external storage or from attacker machine to external storage.

graylights | 11 years ago | on: More Data on Attributing the Sony Attack

"Do note that file creation time in unix requires kernel level access and quite a bit of low level filesystem knowledge to truly forge."

Timestamps are a mess on unix. POSIX doesn't support creation time but instead has ctime (change time). Newer filesystems add crtime but common utilities don't ever display crtime. Also partitions sometimes are mounted to not update atime for performance reasons.

crtime (and ctime) can be modified with root privileges without kernel access with debugfs.

Or you can go the ugly hackish way: date -s $forgedate && touch tmp && date -s $realdate && cat original >> tmp && mv tmp original

Neither are elegant, but certainly not hard.

What's really hard to forensically cover up is the order of inodes on a filesystem. That file with forged timestamps to 2012 will still have an inode that looks much more recent.

page 1