Boulth

40 ms·

361.
by Boulth 8y ago
> Sometimes I get blank pages. I got them very frequently (as a user). This coupled with the inability to turn off AMP finally pushed me to use DDG as the default search engine.
362.
by Boulth 8y ago
Interesting as I use Google Provider plugin and both calendar and contacts work very well. Although I doubt that the plugin uses *DAV underneath.
363.
by Boulth 8y ago
It reminds me of the old "protection" in Settlers: when using an illegal game everything would work as normal except the iron smith would produce pigs instead of iron bars. That'd be surely missed by early crackers but defini
364.
by Boulth 8y ago
> I like that concatenation works with space instead of more verbose operators like for example Elixir's |> Then you'd probably also like Rebol/Red with its minimal syntax. Check this list of small examples: http:&#x2F
365.
by Boulth 8y ago
As far as I have heard you can't copyright UX (but don't quote me). I think the issue is something else: GitLab thinks more features is what will give them competitive advantage over Github in the long term, not clean UX.
366.
by Boulth 8y ago
I'd also be interested in contact info... Just in case...
367.
by Boulth 8y ago
Only if it redirects you to your local business insider, that's pretty bad I would say.
368.
by Boulth 8y ago
What's the difference between SAML+U2F vs smartcard stored SSH key? Both cannot be easily stolen or abused. Additionally Yubikey have touch-to-use policy that further protects the key usage.
369.
by Boulth 8y ago
It reminded me of this interesting behavior of keyservers, that is by design but still surprising - anyone can add UIDs to any key: https://bitbucket.org/skskeyserver/sks-keyserver/issues/41/w...
370.
by Boulth 8y ago
Too bad as verifiable identities can already be implemented in pure OpenPGP, see Linked Identities ( https://tools.ietf.org/html/draft-vb-openpgp-linked-ids-01 ) as implemented in e.g. OpenKeychain.
371.
by Boulth 8y ago
If you don't trust upstream why are you running their code? I don't think it's reasonable for such a small group of people as Debian developers (or any other maintainers) to review each change looking for potentially maliciou
372.
by Boulth 8y ago
There is one assigned property (trust) one relations table (signing key, signed key) and one computed property (validity, the output) and one condition. I'd be very happy to see a simpler solution to the problem of decentralized authen
373.
by Boulth 8y ago
And upstream issues such as this one should be fixed in upstream not patched endlessly with every other distro. That's the approach promoted by Arch Linux.
374.
by Boulth 8y ago
Does it? For a key to be considered valid it must be either ultimately trusted, signed by ultimately trusted key or one fully trusted valid key or 3 marginally trusted valid keys. It seems to me there are only two properties to track and qu
375.
by Boulth 8y ago
> A professor of mine once said to me that all teaching was a process of lying, and then of replacing the lies with successively better approximations of the truth. Well put! I'm in the process of explaining my 3yo daughter differen
376.
by Boulth 8y ago
New GnuPG can use TOFU trust model that simplifies this flow (an example here: https://www.kernel.org/category/signatures.html#using-the-we... ). > Of course imported keys default to the lowest (most useless) level
377.
by Boulth 8y ago
> This is why Mozilla can add spyware to Firefox. Mozilla has some interesting technical solutions to this problem: https://wiki.mozilla.org/Security/Binary_Transparency
378.
by Boulth 8y ago
https://conversations.im the same security primitives as in Signal, but open and decentralized.
379.
by Boulth 8y ago
Besides the license think about registering a trademark. That way Docker, Linux or git manage not to dilute the name (see e.g. https://www.git-scm.com/about/trademark ). As for the code, if it's open source anyone
380.
by Boulth 8y ago
> Also I read a lot of bad experiences here on HN with the XPS line every time it comes up. Personally I know at least two people who had a bad experience with it and ended up replacing the machine with something else. Is Dell improving
381.
by Boulth 8y ago
Once you add it to index it's in .git/objects. You can find it using `find` with modification date parameter. The name will be a hash but you can look at the contents. (there will also be a tree object with file names).
382.
by Boulth 8y ago
> As long as code has ever made it into that tree (by being in any commit at any time), it's recoverable, and reflog lets you trace your steps back to any point in the past on that tree. Actually it's enough for the file to hit
383.
by Boulth 8y ago
Usually having your own domain and letting someone else run the mail server is enough. In case your provider (Fastmail, Google, etc.) starts acting strange you can just update your DNS records.
384.
by Boulth 8y ago
Got it, thanks for the reply and for considering modern features!
385.
by Boulth 8y ago
It's nice to see their own keyserver. I wonder though if it wouldn't be more practical to support the Web Key Directory protocol [0]. WKD is both more secure than HKP (as it's always over HTTPS and authenticates user's d
386.
by Boulth 8y ago
Actually U2F can be used to devise several different schemes, either token+password, or token alone, even just token without username. Of course each of these has various advantages and disadvantages.
387.
by Boulth 8y ago
Yes, but with OpenPGP you can just rotate your subkeys. For encryption subkeys it's advised to back them up somewhere either way. It maybe you're talking about U2F applet of Yubikey? Then it's not affected by the bug you post
388.
by Boulth 8y ago
I wish there were some screenshot. I'm on a weak airport wifi and cannot really check this out now :(
389.
by Boulth 8y ago
> They were deliberately murdered under direct orders from Lenin, Unfortunately, according to the Wikipedia article you posted, it's not that easy to verify: > The written record taking the chain of command and the ultimate respo
390.
by Boulth 8y ago
> I've given up on using any sort of branded app for notetaking. At best it's open source and the maintainers will lose interest in a few years. When you write things down, you're investing in your future. It's silly

More ›