Boulth

9 ms·

31.
by Boulth 7y ago
From the property name it sounds like your property is about trust roots (CAs) and parent's about client certificates (for mutual TLS authentication).
32.
by Boulth 7y ago
Actually it's even worse than that: signature creation time is added by the signer so it's totally under control of the attacker. IMHO all SHA-1 based signatures should be ignored.
33.
by Boulth 7y ago
Thank you for your detailed in depth response! For the record it seems this seems to do some basic processing: > The Inbox or Sent folder triggers another Lambda function that loads the raw email, converts it to a .html and .txt file, an
34.
by Boulth 7y ago
Wow, this is cool! JSON structures resemble JMAP. I wonder what'd be the effort to add JMAP endpoint to this?
35.
by Boulth 7y ago
Is there a technical spec somewhere? I guess they don't offer USB-A ports on 13 anymore. I'd also like to see it boot (cold power on). On my 9350 this takes 10 seconds or so (just to get to Dell firmware logo even without OS).
36.
by Boulth 7y ago
> Tell that to the people getting imprisoned due to Signal's metadata leaks Isn't this rather Twitter's metadata leaks in your source?
37.
by Boulth 7y ago
Yep, LSP does include semantic view of the code. That is anything you'd see at the end tools such as IDEs: types, members, functions, properties within context (e.g. this function is a member of this class).
38.
by Boulth 7y ago
Sounds like Language Server: https://langserver.org/
39.
by Boulth 7y ago
Thanks for the explanation Josh!
40.
by Boulth 7y ago
> Out of scope: > The web of trust, or key distribution really Is there anything in the tptacek suite of replacement tools for this? Like Keybase but fully open source and/or decentralized?
41.
by Boulth 7y ago
> forcing the kernel to introduce a work-around to hide "debug" from systemd. I thought the workaround patch was not merged?
42.
by Boulth 7y ago
> If it encounters midstream corruption it truncates the output, exits with a non-zero return and prints some error text std stderr: Do you mean it releases output even if the encrypted file is corrupt or tampered with? Isn't this o
43.
by Boulth 7y ago
This is not entirely correct. It's not Bazel but "build system very similar to Bazel" (from your source) and that's I guess their internal Blaze tool. I wonder what's the real usage of Bazel (not Blaze) in Google.
44.
by Boulth 7y ago
The same SGX that was on the front page a couple of days ago? https://news.ycombinator.com/item?id=21759683
45.
by Boulth 7y ago
Is this the same case as with HTML5 that W3C takes what WHATWG creates, stamps their "approval" and then it's the W3C that "brings new language to the Web"? Could someone in the know shed some light in this matter?
46.
by Boulth 7y ago
Funny thing that you mention it here as one of the authors of security.txt found this exact issue on several sites: https://edoverflow.com/2018/logic-flaws-in-wot-services/ section "Attack Vector Two – Namesp
47.
by Boulth 7y ago
How would a "gravatar of GPG fingerprints and keys" look like?
48.
by Boulth 7y ago
Not what I were asking about but definitely something that I need. Thanks a lot for the reference and wow, lucky timing!
49.
by Boulth 7y ago
That's what I was afraid of but still asked if there is Advanced ANSI SQL book. Thanks!
50.
by Boulth 7y ago
Looks nice and it's on discount because of Black Friday. Thanks!
51.
by Boulth 7y ago
Are there any good advanced SQL books out there?
52.
by Boulth 7y ago
It doesn't sound like it's ready (as of June): https://github.com/emersion/xdg-desktop-portal-wlr/issues/4#...
53.
by Boulth 7y ago
Excellent post. Thanks for your in depth insights! Are there any Wayland resources for even more technical information you'd recommend? For the record I use sway for months and can also report that the experience has been great (includ
54.
by Boulth 7y ago
Yes, that's pretty close. Windows one is directly executable (installer) but the MacOS is compressed too.
55.
by Boulth 7y ago
I never said anything like that about code signing (you may want to check out "in comments" section of the guidelines: https://news.ycombinator.com/newsguidelines.html ). Code signing allows software vendors to opt
56.
by Boulth 7y ago
Could you elaborate on the "different goals" here? As far as I understand this is about getting software from the vendor to the hands of users.
57.
by Boulth 7y ago
Compare this with the Windows/MacOS instructions: https://www.sublimemerge.com/download Just in case it's not clear: there are none. You just download the file and run it. That's the problem that Microsoft co
58.
by Boulth 7y ago
That's one way to look at it. On the other hand for consumers it's a vastly more convenient experience than something like this: https://www.sublimemerge.com/docs/linux_repositories
59.
by Boulth 7y ago
I guess that would be .tk
60.
by Boulth 7y ago
Wow, really beautiful! I wonder how do they do these graphs...

More ›