Forgot your password?
typodupeerror

Comment Re:Looks like LLM-assisted attacks become noticeab (Score 1) 10

Not yet. This would require some level of AI "agent" collaboration that is not really possible at this time without breaking basically everything. But model poisoning is already very feasible and probably done in practice, especially as the amount of poisoned training data needed does not seem to be large.

Comment Do not trust "quantum safe" encryption (Score 1) 30

It is not old enough and may still fail with catastrophic weaknesses. The way to go for new products is to use hybrid encryption, where a successful attack requires breaking both a quantum safe algorithm and a classical (good) one. Or, if you can, stay classical, since Quantum Computers are very, very, very, very far removed from being able to break any real encryption. In fact, after more than 50 years of research, these "machines" can factor 29 currently (well, one could and that was with moderate cheating as it was not with the general algorithm, but with one specifically adapted to factor 29). For reference, that is 5 bit. Current RSA recommendations are 2048 bit or longer and 4096 for long-term, security. If the keep doubling these bits every 50 years (which is a really big "if"), RSA 2048 will be within reach in about 400 years.

Comment Re: You know it kind of bugs me (Score 1) 91

Phones that run stock Android are usually pretty good at letting you uninstall/disable anything you don't want.

Disable, yes. Uninstall, no. If it's pre-installed it's part of the system image, which is mounted read-only and protected with fs-crypt. Actually modifying that would require root access to remount it rw and to disable fs-crypt.

That would also, of course, completely destroy the Android security architecture, leaving you wide open to all sorts of attacks. If you want to do that, get an Android device that has an unlockable bootloader (e.g. Google Pixel), unlock it, then do whatever you like. And be sure not to hire any evil maids.

Comment Re:For what? (Score 1) 58

Interesting, that explains a lot. Until now, I thought I might want to try Cursor, but I already have VS Code with Claude and GitHub Copilot, so why bother!

The integration is a little better in Cursor; the main difference being the in-line edit diffs. But I bounce back and forth between Claude Code and cursor, so I end up just using the git diff view to look at changes about 80% of the time, so it's not much better.

Honestly, my reason for using it is that I have separate Claude and Cursor token budgets -- though I set Cursor to use Claude so I'm using the same model both ways.

Comment Re:Well, let's face it (Score 1) 53

You don't need it on consumer hardware

Except for, you know, illegal immigrants, legal immigrants, naturalized Americans and even American born, and all the other people targeted by their governments.

If your government breaking into your house and applying hardware-level attacks to scrape your secrets out of the RAM of your running computer is seriously part of your threat model, it's almost certainly very, very far from your biggest concern.

Also, you should probably consider turning your computer off.

Slashdot Top Deals

A method of solution is perfect if we can forsee from the start, and even prove, that following that method we shall attain our aim. -- Leibnitz

Working...