HorstG

10 ms·

61.
by HorstG 7y ago
There should simply be a heavy tax on all presence-required jobs, payable by the company. Suddenly, as soon as there is monetary incentive, things will work quite fine remotely, "concerns" be damned
62.
by HorstG 7y ago
Certificate auth for http with TLS and Kerberos auth for http is specified, supported by all (major desktop) browsers. However: The UX on the browser side is shitty as hell. Certificates display weird nagscreens, without being able to speci
63.
by HorstG 7y ago
It isn't that nobody thought of busses or trams. Its just that they are always too sparse, slow, limited in times, capacity, safety and comfort. I believe the break-even is of being able to replace cars is somewhere around a 5min sched
64.
by HorstG 7y ago
Drug dealers in Berlin populate the parks and subway stations mostly. Easier to hide in the crowds or shrubbery, if they hide at all. Police usually never bother them.
65.
by HorstG 7y ago
This only works in bigger cities, where there is plenty of heavily subsidized public transport such as Berlin. Most smaller towns that went car free killed their businesses or made them move to shopping districts on the outskirts which are
66.
by HorstG 7y ago
"Whichever version you need" comes with the responsibility of providing security and bugfix upgrades in a timely fashion. Almost all developers fail spectacularly at this, with latencies in the order of months. This is clearly not
67.
by HorstG 7y ago
Agreed. Most vendors supply an unholy mess of weird setup.exe, shellscript installers, omnibus packets or appliances as well, containers are not alone here. Edit: To clarify, containers and VMs are somewhat special in that it is very easy t
68.
by HorstG 7y ago
Agreed, up to a point: Ever tried to security-update a vendor-provided container which you should never touch because of the vendor's support and warranty conditions? And even if allowed to touch it, the mess that it usually is: app ru
69.
by HorstG 7y ago
Installing multiple versions is possible, given proper semver and good arguments for it: There are quite a few libfoo5, libfoo6, libfoo7 packages. What isn't and shouldn't be possible is installing libfoo 6.6.5 and 6.6.6 at the sa
70.
by HorstG 7y ago
In Germany there is the Schoeffengericht aka jury trial for intermediate crime. Schoeffen are also called Laienrichter, layman judges, there just aren't that many of them and procedures are different. The decision of facts (as opposed
71.
by HorstG 7y ago
The EU will never close tax loopholes since there will always be a veto from the likes of Ireland, Netherlands, Luxembourgh or UK.
72.
by HorstG 7y ago
HP actually has a working firmware update mechanism for all their gear. Its a bootable Linux liveDVD that starts into a browser talking to a local Tomcat instance which applies necessary patches. For many cases its also possible to invoke p
73.
by HorstG 7y ago
Yes, its possible. However, prices go up with age.
74.
by HorstG 7y ago
The HP specific part is just to make sure that the HP disk vendor lockin works: HP controllers only talk to HP branded disks...
75.
by HorstG 7y ago
Different SSD vendors is impossible with HP servers and controllers, they only talk to their own expensive gear. So the disk diversity option is off the table for HP customers.
76.
by HorstG 7y ago
Readability and familiarity are not the same but closely related. There is nothing inherently more or less readable in the rust or haskell tree example. I think there is work on "readability", just in another context: Its called t
77.
by HorstG 7y ago
Calling it Box is confusing. unique_ptr would be an improvement for the name, or maybe HeapRef. The problem is exactly that rust chose a misleading name Box (boxed types are something entirely different in most languages) instead of the obv
78.
by HorstG 7y ago
There is a huge unreadability right there staring at me: What does that Box<> do, and why? Rust is borrowing more and more of the obscurities of C++, and thats not a good thing...
79.
by HorstG 7y ago
The article gives very dangerous advice, especially for networking code. Padding will not be overwritten and when transmitting the struct (provided there is no attribute packed or the compiler ignores it) information will leak. Yes, someone
80.
by HorstG 8y ago
The vendor tried to hide the vulnerability from the public, its customers and its future business partners and to delay disclosure until after a favourable business deal. What the hackers did wrong here is failing to recognize that immediat
81.
by HorstG 8y ago
I do consider HashKnownHosts harmful. Not only does it provide only the shallow appearance of security, as TFA shows. Also, as other commenters have argued, an attacker can often obtain the same info from syslog or shell history. But most p