• 0 Posts
  • 181 Comments
Joined 1 year ago
cake
Cake day: August 25th, 2023

help-circle
  • AFAIK if you spend at least 2 years studying here you automatically qualify for a 3 year work permit. I think rolling that into permanent residency is a lot easier than just applying for a work visa or PR out of the gate

    International student tuition is way more expensive here in Canada than it is for citizens, but I’m not sure how it stacks up against normal US tuition.

    Grain of salt, everything I’ve said is based on anecdotes from people I know who went through it


  • Glass will absorb and retain more heat for longer;steel will absorb energy and heat up more quickly, and dump it just as fast.

    Which was my point - 400g of room temperature ceramic is going to absorb way more heat from 250ml of boiling water than would be lost from the glass-air (or even steel-air) interface during the 2 minutes it takes to do a pourover.

    If both cones are preheated thoroughly, yes, the steel cone will shed heat faster, however I feel like this is also negligible compared to evaporative heat loss and subsequent transfer to a cup





  • Abolishing the monarchy would involve rewriting the constitution - if that was happening every province would want to slip in their own terms - Quebec would want specific French language rights and autonomy and if Quebec got their way Alberta would want something similar. We successfully altered the constitution back in 1982 - it took 2 years and the country almost blew up over it.

    Basically it would be a total shit show. Considering the impact the monarchy has on our day to day life (basically zero) it’s easier to just let sleeping dogs lie




  • That assumes that an adversary has control of the browser

    No it doesn’t, if they intercept an encrypted password over HTTPS they can resend the request from their own browser to get access to your account

    The big reason you don’t want to send passwords over https is that some organizations have custom certs setup

    What is the problem with that? The password is secure and only shared between you and the site you are intending to communicate with. Even if you sent an encrypted password, they wrote the client side code used to generate it, so they can revert it back to its plaintext state server side anyways

    It is better to just not send the password at all.

    How would you verify it then?

    If not sending plaintext passwords was best practice then why do no sites follow this? You are literally posting to a site (Lemmy) that sends plaintext passwords in its request bodies to log-in




  • The word ‘decipher’ is doing a lot of heavy lifting. I’m wondering if they socially engineered or just found it written somewhere in the house?

    You can plausibly brute force up to 4, maybe 5 words of a seed phrase. It takes longer than a normal password because every seed phrase is technically valid, so the only way to know if your brute force is successful is to generate thousands of addresses at each of the different derivation paths you may expect funds to exist at.

    The same seed phrase is used for Bitcoin, Ethereum, Monero, etc, but each currency uses the seed phrase to generate addresses in a slightly different standard. Additionally, each wallet uses a slightly different variation of that. Within each wallet is a notion of accounts, and within each account you could have dozens of addresses. You need to generate each of those addresses, and scan each cryptocurrencies blockchain to see if those addresses have ever been used.

    Realistically one of three things happened: his seed phrase was written down and they found it, it was password protected or on a drive with weak AES encryption and they cracked THAT instead, or finally, he used a hardware wallet and they exploited a firmware vulnerability to lift the PIN and transfer out funds and/or read the seed from the device




  • That’s not really machine learning though. If you wanted to go way back, AI research goes back to implementations of hebbian learning in computer science back in the 1950s as a way of emulating human neurons. I was merely pointing out that AI was a computer science “dead end” until restricted Boltzmann machines were revisited by Hinton et al back in 2008 or so, and that 99% of the growth in the field has happened since the early 2010s when we reached a turning point where deep learning models could actually outperform classical statistical models like regression and random forests