Kadin

59 ms·

481.
by Kadin 10y ago
"We pay more than Uber" isn't really, or at least not purely, a negative ad. It's making a comparison, one that Gett comes away looking good in; and it's really pointing out something that Gett does better than U
482.
by Kadin 10y ago
> Among many other problems, DNSSEC+DANE permanently concedes .COM, .NET, .ORG, .CO.UK, and .IO to the FVEY Intelligence Community That's not new; it just makes plain what has always been the case. Better to have it out in the open
483.
by Kadin 10y ago
Unless your mother knows not to go to a site without an EV certificate, it doesn't really matter that much. The certificate pinning is valuable in terms of preventing MITMs by rogue CAs, but the EV itself doesn't seem to really ad
484.
by Kadin 10y ago
Except all those credentials are public anyway, so it has to be assumed that anyone who wants them, already downloaded them. Unless HIBP is getting its dumps from nonpublic sources..?
485.
by Kadin 10y ago
You can get computers with smartcard readers from virtually every major manufacturer (except Apple, because Apple). The most frequent use case is government users who need to support the DOD Common Access Card (CAC) standard. The card read
486.
by Kadin 10y ago
> you never know at signup whether this site is going to be "one you don't care about" 2 or 5 years later. Yeah, I mean, my friends talked me into signing up for some stupid site back in 2005, "Face"-something?
487.
by Kadin 10y ago
Most major (non-embedded, I suppose) OSes have some framework for periodically updating the certificate store. It's not necessarily a full redeployment of the OS. Mac OS and Windows both are capable of receiving new root certs via the
488.
by Kadin 10y ago
That's a chicken-and-egg problem, but it would be solved when there's suddenly a lot of site operators with a vested interest in knowing which CAs are likely to fail and which aren't. Right now there's not a ton of inte
489.
by Kadin 10y ago
It's been a very long time since humans haven't been dependent on machines. There's a legitimate question to how complex the supply chains are that produce those machines, and whether as a result it makes society and civiliz
490.
by Kadin 10y ago
That wouldn't have helped you in this case -- WoSign doesn't even show up in the OS X or Windows root keystores. Its certificates are (apparently) signed by StartCom. I just blacklisted StartCom's root certs. IMO for signin
491.
by Kadin 10y ago
I think we should just pull the rug out. Site operators need to be more aware of which CAs they're using, and need to feel some of the pain from the failure if they're going to shop for CAs based on anything except price. The beh
492.
by Kadin 10y ago
California would probably like to ban all of the for-profits, but can't. ITT, however, stepped so far beyond the pale that it gave regulators an opportunity to punish them. California is basing its move on a US Department of Educati
493.
by Kadin 10y ago
You're already at the mercy of every CA whose certificates are trusted by default by browsers. You can request additional verification, but that's not going to stop someone from turning the screws on a CA on the other side of the
494.
by Kadin 10y ago
This may fall into the category of "downsides of indexing in general", but even VTSMX, which is based on the CRSP index, isn't necessarily getting you the entire stock market in the U.S., which is something to be aware of,
495.
by Kadin 10y ago
For those who are interested (probably not necessary on a Mac as they may be preinstalled), the DOD CA certs can be freely downloaded from DISA: http://iase.disa.mil/pki-pke/Documents/unclass-installroot_v... Ther
496.
by Kadin 10y ago
Neat idea. As a general aside, when publishing documents that start off as LaTeX, putting them on Github (or some other Git hosting service) would potentially allow others to contribute corrections. There are a bunch of typos in the paper
497.
by Kadin 10y ago
I don't know who Tesla expects to sell to, but I agree that utilities could be very interested. They benefit from smoother demand more than just about anyone. In many places, the utilities aren't allowed to charge different rates
498.
by Kadin 10y ago
I suspect there's probably high stakes involved for somebody, at some point in the fastener supply chain, based on whether their product is classified as a "screw" or a "bolt". E.g. there could be different import
499.
by Kadin 10y ago
Well, I wouldn't go that far. If you run your business on Google Services, you definitely need to have a contingency plan for what you're going to do the day that Google decides to arbitrarily cut you off, though. But in some ins
500.
by Kadin 10y ago
There are "pari-mutual" betting systems, for instance the system used for horse racing in New York State, which are very market-like by design. Instead of an oddsmaker as in the European or Vegas systems, the odds on a particular
501.
by Kadin 10y ago
It reads like Ivan "Rifle is Fine" Chesnokov without the caps lock.
502.
by Kadin 10y ago
Sure, but there's no incentive to hold anything back. Let's say you break into a server and steal 10 vulnerabilities, from an organization (e.g. the NSA) who are never going to acknowledge how many vulnerabilities they had or were
503.
by Kadin 10y ago
While their emails may well be getting intercepted, I find it somewhat implausible that a nation-state-level actor would go to all the work of intercepting their messages, but do so in such a way that they disappeared in transmission. That
504.
by Kadin 10y ago
You can do this, and I do this (although not for my personal email, currently, although I have in the past -- I do it for a club though and it works fine). If you are not being blacklisted (check the common ones plus AOL, they run their own
505.
by Kadin 10y ago
More analog pins, is the only compelling reason I can come up with. In general I think the ESP is a better choice for most "turn the LEDs on and off" type of project though.
506.
by Kadin 10y ago
It's not "the next big thing", as much as it's a lot of little things. There's always been a gap between software and the physical world; the Arduino lets people easily bridge that gap. Though the typical projects
507.
by Kadin 10y ago
> The researchers went on to speculate that the project was funded by a nation-state, but they stopped short of saying which one. So ... does anyone, perhaps who doesn't have Kaspersky's business interests to protect, care to a
508.
by Kadin 10y ago
Not sure why that seems so bizarre; that's consistent with US posture since WWII, particularly strategic posture. Defense through force projection and construction of retaliatory capability. "The best defense is a good offense&q
509.
by Kadin 10y ago
It's sort of like being a Lloyds of London "name" ... only without any of the benefits.
510.
by Kadin 10y ago
One well-known designer still producing text-based games is "Porpentine". Her work is mostly built using the Twine engine/platform/backend, which runs in a browser. (There is a seemingly active community around Twine;

More ›