Boulth

35 ms·

331.
by Boulth 8y ago
> Given how long she has been doing this, I would simply not believe that she missed any of the issues I mentioned (the ambiguity, the AGPL/GPL/etc issues). Agreed on that, based on just reading one of her books. I wonder why d
332.
by Boulth 8y ago
Excellent suggestion, and with GPL for distributed products (installers, apks) and AGPL for cloud services.
333.
by Boulth 8y ago
Note that if you required CLAs that allowed license change you can change it later (e.g. OpenText did that). If you just accepted contributions you can't change the license without agreement from all contributors.
334.
by Boulth 8y ago
> The GPL exists for a reason. AGPL would be more appropriate for Redis IMHO as Redis as a service is not "distributed" to users so GPL alone wouldn't have desired effect. On top of that commercial license for people that
335.
by Boulth 8y ago
I've got the same setup with subkeys per Yubikey (though I had to rotate due to Infineon). What do you mean by "device keys"? Something like forward secrecy keys for initial session setup as used by e.g. Signal? This could be
336.
by Boulth 8y ago
> Verifying signatures was O(n*m) where n is the number of checksig ops and m the transaction size. This makes it possible to generate transaction that are absurdly expensive to validate. That's what sigops limits are for: https:&#
337.
by Boulth 8y ago
Glad to hear that, I was not aware of most of these. How about starting GitLab Engineering blog? :)
338.
by Boulth 8y ago
> GitLab is so much more - it encompasses the full DevOps Lifecycle in a single application That's what I meant by "integrated services already possible with Github". I guess you are familiar with Github Marketplace. I don
339.
by Boulth 8y ago
That's my main issue with GitLab, there is so much interesting innovation that they could do w.r.t. tooling but instead they play it safe by copying Github or providing integrated services that are already possible in Github.
340.
by Boulth 8y ago
Keybase already has git integration: https://keybase.io/blog/encrypted-git-for-everyone (now sure why would you want Keybase but okay).
341.
by Boulth 8y ago
There is also Distributed code review system for Git repos: https://github.com/google/git-appraise
342.
by Boulth 8y ago
Thanks for your input! Which distro did you end up using?
343.
by Boulth 8y ago
Just out of curiosity could you elaborate on the "not a fan of Arch" statement? Is this the rolling release model or just something else?
344.
by Boulth 8y ago
Arch wiki is extremely helpful if you know what you're looking for (for example I want to setup Secure Boot, it's easy to follow) but unfortunately there is no "best practices"/high level guides there (it takes a lo
345.
by Boulth 8y ago
I'm using Yubikey for that too and would also be interested in open source solution, especially if it included ed25519 and secure, tamper proof element. (Gnuk has the former but not latter).
346.
by Boulth 8y ago
There is also open source firmware used on old Yubikeys that could be reused: https://github.com/Yubico/ykneo-openpgp
347.
by Boulth 8y ago
Even though Gnuk supports them: https://debconf17.debconf.org/talks/162/ I wish the spec would be updated to include them...
348.
by Boulth 8y ago
This also means you can't use another computer or that your key is lost if you clear browser data. Unless you'd do backups but I doubt this is standard procedure of ProtonMail users.
349.
by Boulth 8y ago
> The problem is that Amazon Web Services and Google Cloud currently do not allow domain fronting. Only Microsoft Azure does. Is there an official word from Microsoft that they allow it or just "they didn't ban it yet"?
350.
by Boulth 8y ago
PureScript compiles to JS but it's quite readable JS: http://www.purescript.org/
351.
by Boulth 8y ago
The entire app can't be pure as we wouldn't observe any effects of its execution :) This post offers an interesting discussion on this subject: https://www.destroyallsoftware.com/screencasts/catalog/funct
352.
by Boulth 8y ago
I wonder if this is more wide spread. I was a very loyal customer of Dell but my last XPS (9350) is a disaster. Reading this kind of reviews makes me hesitant to buy a new laptop.
353.
by Boulth 8y ago
> (Making special cases for NullPointerException or OutOfBoundsException, like some languages do, is, IMHO, a bad idea, that spreads the confusion between programming mistakes (i.e coming from the source code) and invalid runtime conditi
354.
by Boulth 8y ago
Looks nice, though https://ksp.fosdem.org/files/ uses expired certificate.
355.
by Boulth 8y ago
> He makes some really cool high quality stuff. Couldn't agree more, all of his software is really nicely designed and implementated. Moreover I had a chance of exchanging emails with him and he's a really nice person.
356.
by Boulth 8y ago
> I like Linus' argument, if you don't work with a web of trust then you're doing it wrong I can't find the source for this, could you tell where did you take this from? (not saying it's not true, just curious to
357.
by Boulth 8y ago
> This is addressed in https://signal.org/blog/private-contact-discovery/ – using Intel SGX, it's possible for the clients to verify that the server is running the code it should be running Just the code i
358.
by Boulth 8y ago
Server and the contact directory service are two different things. The remote attestation is just for a small part of the code (SGX code have a lot of constraints, including size). Also, I don't know if it changed but the new contact d
359.
by Boulth 8y ago
Is this solution deployed in production? The source code says "beta".
360.
by Boulth 8y ago
Exactly. I made an account to post useful links but apparently posting a link flags the account as spammer unless you want to give them your phone number (I don't).

More ›