domain:alakasa.substack.com
I just doubt that these particular requirements are that onerous.
Eh... they vary a lot, both on context and use case. Requiring secure storage for persistent storage of security parameters (5.4-1) makes sense and has trivial cost for applications like a network storage device, but it'd break a lot of assumptions on FRAM-heavy low-power devices, and that rule notably isn't conditional or a mere recommendation -- perhaps they didn't think about FRAM, or other persistent memory, but I wouldn't bet against UK compliance checks taking that as an excuse. Making security-focused unique IDs tamper-resistant (5.4-2) isn't too bad on a device with a real MAC (though not costless; there are benefits to software-changeable settings here), but for the more ultra-small or ultra-disposable equipment that's largely going to mandate more and more of program flash be devoted to encryption keys (unless you want to decrypt something on discrete flash every time you're doing an update check). Mandating a network update happen over a trusted relationship (5.3-10) and be timely (5.3-6) and be automatic (5.3-4) isn't too bad for a situation like deploying a bunch of wifi access points or phones, as much as I hate 99% of implementations work, but it's an absolute mess for wide deployment public LoRaWAN devices, and a mess for things like CAN- or LIN-networked embedded devices.
Others vary heavily on interpretation. Mandating that "For constrained devices that cannot have their software updated, the product should be isolable and the hardware replaceable" (5.3-15) could mean almost nothing, or it could require vendors to commit to support any optional part of a product until they retire an entire series. And these all definitely kill EPROM devices that it covers -- I'd expect this ends up with a ton of explicit or implicit exceptions, mostly around the "On devices with several microcontrollers (e.g. one for communication and one for the application) some of them might not be updateable", but it's not really obvious from the text.
That gets worse if they start dialing Mandatory-Conditional or Recommended rules into plain Mandatory ones down the road, and a lot of the text suggests that they're planning it:
As consumer IoT products become increasingly secure, it is envisioned that future revisions of the present document will mandate provisions that are currently recommendations in the present document.
In particular, SecureBoot (5.7-1), hardware memory access controls (5.6-8), and guaranteeing cryptographic updates for the life cycle of the product (5.5-3) mean throwing out a lot of existing microcontrollers, microprocessors, and often related code. It's clearly intended for big GHz+ microprocessors, but there's a lot of new (mmu'd!) chips that don't have this capabilities. SecureBoot there's some arguable conclusions for some of the bigger devices, like throwing a ATECC608 after a PIC, but a) I'm not sure if that actually complies with the recommendation, and b) no, god, no. Hardware memory access controls... maybe ESP32 memory protect would cover it (though they're software-settable, though the software settings are code-private?).
SteveKirk
14m ago
Respectability cascade was the one I thought he might be talking about, but I couldn't remember the name, thanks.
fishtwanger
16m ago
Given the timeframe you're looking at, it's probably not this ACX article, "Give Up Seventy Percent Of The Way Through The Hyperstitious Slur Cascade", but that has a link to "Respectability Cascades", which might be it?
anti_dan
49m ago
I'm pretty late seeing this but Haikyuu is a pretty well regarded anime based off a manga that was top 5 in sales in 2020 and top 10 a few other times.
Its also in the well worn Japanese sports genre where the artists and writers have really honed their craft as to how to make something as mundane as high school sports interesting.
RandomRanger
Just build nuclear plants!
1hr ago
In related UK news, the head of Cybersecurity for the treasury earns... 57K Pounds or 12% of comparable positions in business: https://twitter.com/jontafkasi/status/1641193954778697728?s=46
Just the other day the MoD was hacked: https://www.independent.co.uk/news/uk/home-news/china-mod-uk-hack-data-breach-b2540489.html
I don't think they're solving their cyber problems any time soon. Joke country.
Yes, I consider actual legislation passed to be more relevant than your vibes, simply because I never consider vibes relevant. A poll demonstrating that Republicans think virtual child pornography should be legal would certainly be even better.
Yes, the fact that I'm citing American legislation is off topic to what some@ was talking about, but it's perfectly on topic as a response to your comment, which discussed American audiences, an American film, and generic redditors, but never mentioned Australia.
netstack
Texas is freedom land
1hr ago
Growing up, my family was a good bit more suburban and less rural. Gardening for fun more than sustenance. Sewing to mend the odd item rather than maintain everything. Dad had a somewhat more technical job, and if we were ever desperate for money, they were able to hide it.
With that in mind, like you, I can't think of my mother as idle. Cooking for a family of six is the obvious time-sink. Cleaning, too, even once we were old enough to be useful. She managed most of the groceries, but also all of the clothes, furniture, Christmas presents, road trips, and other intermittent expenses. Not to mention the actual bills. Somehow she also juggled four kids' worth of extracurriculars and social groups while (apparently) managing to bond with her peers.
It's not like Dad was checked out. He loved us and took on his fair share. But the minutiae of raising kids was always Mom's full-time job.
Go back a generation, and both my parents had extremely rural upbringings. I can't imagine their day was any less full.
Trump got rid of the worst excesses of Title IX, which Biden just made even worse with a (literal) vengeance. Did you pay attention to that one?
This "trump never did anything so don't support him" thing bothers me coming from liberals because it's transparently dishonest. Just say "I'd rather have Biden's "misgendering-is-a-crime" Title IX policy" than try to trick people into thinking there's no difference.
curious_straight_ca
1hr ago
I don't think there's anything wrong with an email as a source, if you email MIT's comms office and they respond with a clear claim? They could be wrong, or lying, but they could lie to the NYT too.
This came up during "the voice" referendum too, which proved to Australian reddit that they live in an irredeemably white supremacist dystopia. It's actually more off the deep end than most of the US city subs.
plural
1hr ago
You're arguing about something that nobody was even asking about. The people that care about "underage" character in videogames have nothing to do with court cases. I honestly don't even understand how you even make that connection with what I said and someone talking about Australian games that are classified "poorly" or refused classification and court cases/laws from the United States. I'll trust my vibes over your info that is not about anything either I or the above comment were talking about.
Mewis
1hr ago
Who are 'artists'? Can you speak plainly and say what you actually mean instead of sneering and generalising like this?
Mewis
1hr ago
Since we are talking about the UK, shale fracking is illegal there. Hardly a revolution.
Mewis
1hr ago
In the specific case of the UK, most industries are not doing well, I believe in part due to a regulatory environment that makes it very hard for anyone to do anything.
magic9mushroom
If you're going to downvote me, and nobody's already voiced your objection, please reply and tell me
1hr ago
· Edited 11m ago
No, it's not what I'm looking for. As I said to KingOfTheBailey, I'm not looking for "lots of people were already pro-X, but were hiding until it became cool". I'm looking for "people actually became pro-X when it became cool".
Of course, it is easy to mistake one for the other, in either direction, and this may become emotionally charged because most people don't want to admit (even to themselves) that they're part of the latter.
Thanks for trying, though.
netstack
Texas is freedom land
1hr ago
I wonder if they've managed to find a better source than "an email."
RandomRanger
Just build nuclear plants!
1hr ago
Melbourne is rather leftist and conformist by Australian standards, it's reasonable that they're more feminist than US feminists.
Quantumfreakonomics
1hr ago
Much like the SAT requirement rollback, I suspect what happened was that internal metrics/vibes were so laughably bad that everyone started to hate it. Nobody actually wants to read that drivel anyways.
RandomRanger
Just build nuclear plants!
1hr ago
The Australian govt is great at doing things with Indigenous issues, there's no shortage of activity! Only results fail. We shuffle the welfare system around from time to time. Cashless to non-cashless benefits and back again, trying to lower the drunkenness and violence. Every so often we put down a youth curfew in horrible places like Alice Springs and the Northern Territory. When the Right was feeling brave they tried a big crackdown. When Left were feeling brave, they tried for a referendum to enshrine indigenous legal bodies in the constitution. Nothing worked, though I'm sure many public sector jobs were created.
https://en.wikipedia.org/wiki/Northern_Territory_National_Emergency_Response
https://en.wikipedia.org/wiki/2023_Australian_Indigenous_Voice_referendum
Quantumfreakonomics
1hr ago
Thoughts? Yeah, the birth of one's first child is a big moment, but this is also the biggest moment of the last 20 years for his team (who gave up quite a lot to get him I might add). Apparently, he was expected to just make it back in time for tip-off, but weather delays pushed his flight back. I'd be pretty pissed if I was a Timberwolves fan tbh.
Tits_Mcgruff
2hr ago
a western visual novel about underage siblings engaging in incest and cannibalism
If you’re talking about ‘ The Coffin of Andy and Leyley’, then the two title characters aren’t minors. They’re both in their twenties.
I was vaguely assuming that the Red tribe didn't want to paint targets on themselves, that this particular clan of the Blue tribe is addicted to their word-salad obfuscatory approach, and that the Grey tribe is genuinely upset about the corruption of the process. (For versions of R/B/G that are closer to conservative/leftist/liberal.)
For whatever reason, most of them seemed to feel it in their interests to frame the conflict as about moderation policies and formal structure. The quote about hypocrisy being "the tribute that vice pays to virtue" came to mind when forcing my way through some of the tortured language used by the mod team and their supporters. Also something Tolkien said about evil not being able to create, only twist.
More options
Context Copy link