Avamander

4 ms·

31.
by Avamander 4mo ago
Yup. Looking back I wish I had location data on some of the photos I took. Can't share them but can't also remember where I took them. Unfortunate.
32.
by Avamander 4mo ago
There's nothing about a digital ID system that would inherently require the use of a pre-approved OS. Some countries went with SmartCards that you can use on any platform that can communicate with a card reader basically.
33.
by Avamander 4mo ago
You'd imagine they'd just reuse and verify the Authenticode signature the very least.
34.
by Avamander 4mo ago
Wacom does the same CRC-32 BS in their updater. I blocked HTTP connections from my local network years ago and you wouldn't believe how many driver installers and auto-updaters break. One should never trust a HW vendor's (auto-)up
35.
by Avamander 4mo ago
> [...] it seems likely they also have enough to maliciously chug the hardware sufficiently to degrade capacity over time and otherwise impact system integrity. I hate the thought of some random website writing and overwriting random byt
36.
by Avamander 4mo ago
It's really difficult to reliably separate temporary and persistent browser storage. I tried at some point to reduce HDD noise. But given how neither Firefox or Chrome properly follow the XDG spec, it did not yield the results I wanted
37.
by Avamander 4mo ago
I installed Syncthing on it to make syncing new books onto it much easier. That's the biggest and primary value I got from it.
38.
by Avamander 5mo ago
It also works with time domain video files like audio visualizers: https://www.youtube.com/watch?v=E3gf88rSzqo Nothing extremely surprising though.
39.
by Avamander 5mo ago
BeepBerry is awesome, my only issue is the relatively low resolution of the screen. But it is very readable in bright light. Tradeoffs, I guess.
40.
by Avamander 5mo ago
> As an online store you don't want to ask customers to manually input a payment reference into a SEPA transfer. It's all about ease of use (and safety). How? With a SEPA transfer I can actually see who I'm paying. With a
41.
by Avamander 5mo ago
Your comment reminds me of HP's obscure EFI OS called QuickLook. I would guess there are a lot of obscure OSs out there.
42.
by Avamander 5mo ago
> They literally reject your emails. There is also nothing you can do if ms/google black lists you. There are so many ESPs that do not get rejected. Neither is it true that there isn't anything you can do if you end up on a bla
43.
by Avamander 5mo ago
> Every major OS (Windows, Mac, iOS, android) ships with device level parental controls. Games consoles enforce these based on birth date. These are unfortunately rather half-baked and should be improved. Which is exactly what could be m
44.
by Avamander 5mo ago
LLMs managing the "coloring book" equivalent of something is not bullish for the "art" version of something. The intent for most CTFs is to provide a meaningful challenge that concerns a single topic without introducing
45.
by Avamander 5mo ago
The more you obfuscate a topic against LLMs the lower the educational value of a challenge. The only things that works is novelty and obscurity. LLMs still suck with things mentioned in the footnotes of datasheets and manuals, things that d
46.
by Avamander 5mo ago
No, the search space is much more vast and the feedback loop almost nonexistent. The reason LLMs can do CTFs so well is partially because the challenges are usually designed to avoid wasting time and to introduce a single concept without no
47.
by Avamander 5mo ago
It's all very proprietary and the tooling is ass, there's a lot of wasted effort creating and testing out the same stuff. Bluetooth is just as horrible for the same reasons.
48.
by Avamander 5mo ago
There aren't any usable chipsets with usable drivers for 802.11ah unfortunately.
49.
by Avamander 5mo ago
> Or maybe an employee has compromised the new key that is going to be rotated in, while the old key is securely rooted in an HSM? Also possible, but that'd be an active threat that has some probability of being caught. Never replac
50.
by Avamander 5mo ago
It is not fine. Keeping key material safe is not a boolean between "permanently safe" and "leaks immediately". Keeping key material secure for more than a decade while it's in active use is vastly more complex than
51.
by Avamander 5mo ago
ASN.1 is not used because of just bitpacking. There are other benefits to ASN.1 and it's probably one of the least problematic parts there. People who have thought they can do better have made things like PGP. It's one of the wors
52.
by Avamander 5mo ago
Kind-of. But there are worse things than outages when it's PKIs we're talking about. DNSSEC is also extremely opaque and unmonitored. Any compromise will not be noticed. Nor will anyone have any recourse against misbehaving roots.
53.
by Avamander 5mo ago
The "can't" comes from the fact that VLC is not going to rewrite their forum software or software forge. Software written in PHP is in most cases frankly still abysmally slow and inefficient. Wordpress runs like 70% of the we
54.
by Avamander 5mo ago
This is the effect of "every vulnerability is a bug" and "we can't rate the severity of any vulnerabilities". Which very clearly results in "bugfixes" (security patches) not making it everywhere in time be
55.
by Avamander 5mo ago
Can Livepatch mitigate this or is it already? I don't know where to look this up.
56.
by Avamander 5mo ago
These things were caught and basically all of them weren't covered by any test suite (not even GNU coreutils'). It's a bit bold to claim that it's actively worsening it when it's not an LTS.
57.
by Avamander 5mo ago
Yes, structured data between scripts and programs. No xargs , tee , awk , sed , grep mangling. No "argument list too long" errors. So many problems are avoided, but at the same time the Windows ecosystem is just so far from
58.
by Avamander 5mo ago
This is where I kind-of like the idea of PowerShell, it's just that I dislike almost all other aspects of it and around it.
59.
by Avamander 5mo ago
> but they'll still hold hostage of the vast swathes of average white collar workers with Office, people that don't care at all about technology as long as they have Word and Excel. I can't wait for the anti-trust lawsuits
60.
by Avamander 5mo ago
> See also: modern practices and sanitizers and tools and test frameworks to avoid writing memory errors in C, and the reality that we keep writing memory errors in C. I think there's a difference in how trivial some of these things

More ›