Ayesh

15 ms·

211.
by Ayesh 4y ago
It is a hit or miss, as some password fields don't get this. However, I personally fund it useful and use it about 100/% of the time in new signups/resets when available.
212.
by Ayesh 4y ago
As much as a footgun HTTP Public Key Pinning was, HPKP would have solved a lot of issues/caveats mentioned in the article. That said, I'm going to add this for my domains (all of which use Letsencrypt anyway).
213.
by Ayesh 4y ago
WordPress does not require mpm_prefork. It works just as well with mpm_event (with php-fpm). Arguably, mpm_event is the most widely used one nowadays.
214.
by Ayesh 4y ago
Unless you change it to something else, the ISP-set DNS servers get all of these data anyway. I use NextDNS an all my devices. The amount of data you can gather from them about a person is mind boggling, given the amount of telemetry most s
215.
by Ayesh 4y ago
I wonder if Git provides a pluggable hashing mechanism as part of SHA2 migration. I imagine stuff like this and SVN to Git mirroring to work nicely with identical hashes.
216.
by Ayesh 4y ago
.cz is certainly up there, at least under current nic.cz: https://en.m.wikipedia.org/wiki/CZ.NIC They strongly push for DNSSEC, supports a bunch of OS projects, etc.
217.
by Ayesh 4y ago
> transfer my wealth I don't think _anyone_ is against using cryptocurrencies as a way of transferring money. It doesn't make sense to transfer wealth via something that rapidly changes its value, right? Because means of transf
218.
by Ayesh 4y ago
We recently placed an order for custom-built LiFePo4 batteries with various voltage and Ah ratings, including custom branding. For an entire order of 200 batteries, they assembled, packed, and shipped within 4 days. A similar order would ha
219.
by Ayesh 4y ago
Three HN top posts about Twitter, Lyft, and Stripe laying off people, and looks like just a start. In Twitter's case though, the writing was in the wall ever since Elon fiasco began.
220.
by Ayesh 4y ago
I started to use Duplicati 2 for about a month now to try it out, and it was working flawlessly for me, except for occasional time-out of the web UI. I only backup local directories, and the destinations I tried out include an external driv
221.
by Ayesh 4y ago
Sounds like a great deal! I did try to game the EU roaming by using a Polish carrier SIM in the Netherlands, which in theory should work for a few months each.
222.
by Ayesh 4y ago
It is, and that's their catch. That number is only for 2FA SMSs, when I have deliveries, or when something requires a phone number verification. WiFi is plentiful everywhere nowadays, so I didn't have to activate this absurd plans
223.
by Ayesh 4y ago
Yeah the $10/GB price is the catch. In reality, I haven't activated any of these plans in months. The credits have unlimited shelf life (as long as I make a call/SMS every six months), and it has been working great.
224.
by Ayesh 4y ago
Mostly for incoming SMS 2FA, and to use as a phone number for deliveries, forms, etc.
225.
by Ayesh 4y ago
Use prepaid. I don't see why not many people see the appeal of prepaid SIM cards. Just buy an unlocked phone, and pop in a prepaid SIM card or install an eSIM profile. That's all it takes. I rarely make phone calls, and haven&#x27
226.
by Ayesh 4y ago
Composer (PHP) also does this. There is a package lock file that directly binds to a specific git commit, and all "composer install" builds are guaranteed to be identical for the same lock file (unless someone pushes something els
227.
by Ayesh 4y ago
Yeah, I recently started to use KDE Plasma with Fedora (after Gnome left a sour taste), and the amount of customizations it allows is mind-blowing. This may be common knowledge, but as a newcomer to KDE, these very precise controls are quit
228.
by Ayesh 4y ago
Just an speculation; for an x.509/web of trust related vulnerability, I expect the CAs to be a prominent target. There are hundreds of them, and I'm pretty sure there are at least a few of them that use OpenSSL somewhere in their
229.
by Ayesh 4y ago
Related: https://httpd.apache.org/docs/2.4/mod/mod_tls.html I will try this out next week to see I can get Apache to compile with mod_tls; should be interesting.
230.
by Ayesh 4y ago
In the linked article, Global sign says they don't know what exactly the vulnerability is. I imagine the public root CAs to be informed if this was an x.509 related bug. But again, Global Sign is a pretty shitty CA to begin with, so I
231.
by Ayesh 4y ago
I highly doubt it. I have done security releases before (not in OpenSSL), and the first line we have there is that don't push upstream in the flashiest text possible. In OpenSSL's case, they might share it with other major OSs bef
232.
by Ayesh 4y ago
Yeah most routers come with a fixed list of services, when they really mean is a list of protocols. I have a Huawei Fibre ONT, that only listed DynDNS, NoIP, and a few others. I could get away by using a NextDNS DNS override, and hosting my
233.
by Ayesh 4y ago
Right, these are awful I totally agree. There were even some incorrect type casting specially with numbers and "numeric strings", which were fixed recently. I use strict typing in every new piece of code I work on, which largely f
234.
by Ayesh 4y ago
Looks like you can't see the sheet without logging in?
235.
by Ayesh 4y ago
F3 is pretty good, I still run it in a few applications. It surprisingly held well with PHP 8 migration as well. However, the reason why I don't use F3 anymore is because of the god-object model. You are pretty much carrying around the
236.
by Ayesh 4y ago
Do you want to elaborate a bit more? Which features that you saw as footguns.
237.
by Ayesh 4y ago
You just keep adding types, it gets better by time. When you do add types, go with strict types (strict_types=1). Type errors pop early when there are many type enforcements. When you find parts that you can't easily type (open file ha
238.
by Ayesh 4y ago
It's too late for me in my time to pull my thoughts together, but this goes on the same lane as Nigerian prince scams, cryptocurrency/ICO scams, etc. It's like if your lie is so bad, and if you can still get a small amount of
239.
by Ayesh 4y ago
Yeah, we had an overwhelming majority of Dutch users using iDEAL to a point that we didn't see any decrease in sales when we had our credit card payment gateway down. I believe you need to sign up with a Dutch acquirer/CPSP to get
240.
by Ayesh 4y ago
Honest question, is there are Matrix client that has a decent amount of UX work gone into it? I recently started to use Fluffy, that looks pretty good with a nice clean design, but does not have the same level of polish as Telegram, at leas

More ›