5ilv3r

26 ms·

1. 241.▲
   by 5ilv3r 10y ago

   Is it arm or intel? If it's arm, please give us the model number. I wants.
2. 242.▲
   by 5ilv3r 10y ago

   That's actually all the "GNU" parts of gnu/linux that people mention here and there when being pedantic about linux distributions. No linux involved at all as long as you are on darwin.
3. 243.▲
   by 5ilv3r 10y ago

   As someone who remembers apt-get update taking only a couple seconds back in the debian etch days, That sounds horrible.
4. 244.▲
   by 5ilv3r 10y ago

   That's fine, and not in conflict. Repair information just needs to be available to prevent them from continuing to be in power over your devices at their end of your business relationship. How hard did we have to fight for unlocking 2
5. 245.▲
   by 5ilv3r 10y ago

   Thanks for the link. That was some really interesting stuff. The "getting the first four years of your life back" bit was pretty spot on.
6. 246.▲
   by 5ilv3r 10y ago

   Because of you I am reading the article. It's pretty good so far.
7. 247.▲
   by 5ilv3r 10y ago

   That's more of an open source problem than a free software problem. I recognize the concern as valid in business, but ideally it would not be relevant.
8. 248.▲
   by 5ilv3r 10y ago

   No code == no sale. I don't like the eventual promise of opensourceness. Just make it FOSS out the gate.
9. 249.▲
   by 5ilv3r 10y ago

   That criticism applies very well to javascript in 2016 as well, so I don't think it's a very big deal.
10. 250.▲
    by 5ilv3r 10y ago

    So is haiku.
11. 251.▲
    by 5ilv3r 10y ago

    What would you say?
12. 252.▲
    by 5ilv3r 10y ago

    You are a responsible administrator, and should be rewarded with system stability and job satisfaction. Good work.
13. 253.▲
    by 5ilv3r 10y ago

    Users don't buy a windows license with an expiration date.
14. 254.▲
    by 5ilv3r 10y ago

    Fun fact: The web sucks a LOT less if you spoof IE6 in your user agent. Almost every evil that can be given to you will be spared. No pop-overs, no javascript lazy loaders, basically anything with a framework behind it will treat you like a
15. 255.▲
    by 5ilv3r 10y ago

    Nailed it, but my concerns about manipulation extend farther than criminal abuse. It's more about privacy to me.
16. 256.▲
    by 5ilv3r 10y ago

    Libretto 50ct. If 301s from http:// to https:// didn't exist, then I wouldn't have anything to complain about.
17. 257.▲
    by 5ilv3r 10y ago

    IP addresses are not in certificates. Only hostnames. Not a rule, but I've set up hundreds and seen thousands, and never seen a single purchased cert that contained an IP.
18. 258.▲
    by 5ilv3r 10y ago

    I would argue strongly that such users do not have those abilities even with https. A valid cert is a valid cert. My supporting point would be the major browser vendors recent backpedal on throwing mixed-content errors, demonstrating that a
19. 259.▲
    by 5ilv3r 10y ago

    I take cash, and always let folks try before they buy. :) I do have solid means of establishing trust. None of it has anything to do with technology security. Old school, baby! That said, I am actually trying to move to a rather isolated pl
20. 260.▲
    by 5ilv3r 10y ago

    This looks like it still uses https. Currently I am giving openkeychain on android a try. It's trust establishment process is very interesting. Sadly I understand https much better than alternatives, due to web hosting experience. I am
21. 261.▲
    by 5ilv3r 10y ago

    How would it be identified as anything other than a routine cert rotation? You would have to have proof that you were being served different certs for the same endpoint from different devices or locations, AND find someone who cares and is
22. 262.▲
    by 5ilv3r 10y ago

    Well, they would be as technically valid as any other updated cert, and they would not violate any laws since a judge somewhere would have rubber stamped it, so I just don't think that word fraudulent could apply in any actionable sens
23. 263.▲
    by 5ilv3r 10y ago

    Why should you trust me if you have never met me? If you like what I do, trust me, and please give me money. :) Cert companies only do a phone call check for the very expensive EV certs. There is no minimal to extensive checking. That is a
24. 264.▲
    by 5ilv3r 10y ago

    Have you notice the quality has gone down DRAMATICALLY over the last few years, with most front page posts being from major media companies?
25. 265.▲
    by 5ilv3r 10y ago

    ^^ I believe this may be a real world example. The irony hurts.
26. 266.▲
    by 5ilv3r 10y ago

    The same mechanism in cert generation provides that functionality. Hostnames are hostnames. SAN certs just take a list of them.
27. 267.▲
    by 5ilv3r 10y ago

    I don't think they would be considered fraudulent at all, and in fact I'm pretty sure that's the "safety valve" built into the system and why public encryption is now being encouraged. I share your tinfoil hatted fe
28. 268.▲
    by 5ilv3r 10y ago

    I'm still bitter about this chain of trust model. The fact that I have to get some other party to tell my users that they can trust me just seems wrong. They trust me because of personal history, not because some banner says they shoul
29. 269.▲
    by 5ilv3r 10y ago

    I doubt most products on aliexpress pay royalties, or really give a damn at all about licensing.
30. 270.▲
    by 5ilv3r 10y ago

    I thought they joined the linux foundation?