Leace

17 ms·

121.
by Leace 8y ago
> I am saying that being able/forced to buy your way in privileges the most organized scammers This works both ways because legitimate software developers also don't have easy ways of pushing their signed software to end users.
122.
by Leace 8y ago
> You can use mimikatz to override the checks that the private key is isolated, you can even override 'no export' flag. "No export" flag is not the same. What I'm talking about is keys stored in hardware modules
123.
by Leace 8y ago
> EV certificates is probably for auto-trust for smartscreen. Yes, that's correct. EV just skips the reputation building phase. Source: https://blogs.msdn.microsoft.com/ie/2012/08/14/microsoft-sma
124.
by Leace 8y ago
The answer to your question: https://community.letsencrypt.org/t/do-you-support-code-sign...
125.
by Leace 8y ago
"are still warned" for ~ 2 weeks, then it is trusted: https://news.ycombinator.com/item?id=19330564
126.
by Leace 8y ago
Then I think you'll find this Poland-related story amusing too: http://news.bbc.co.uk/2/hi/uk_news/northern_ireland/7899171....
127.
by Leace 8y ago
> That problem can be solved with other tools, like PGP. You don't have to be blackmailed by a platform's certificate racket. It kind of works that way in Linux world where artifacts are PGP signed and to get your key into dist
128.
by Leace 8y ago
What does your daughter use to connect with friends? Just curious.
129.
by Leace 8y ago
Agreed but I'd rather they allow normal passwords where you can use the "password you can't remember" and U2F token like civilized people.
130.
by Leace 8y ago
ejabberd [0], XMPP server is written in erlang and powers chat in some of the biggest MMORPGs [1]. [0]: https://github.com/processone/ejabberd [1]: https://xmpp.org/uses/gaming.html
131.
by Leace 8y ago
Ah okay, thanks. From what I've seen XPS 9350 was the first thing to support Thunderbolt so maybe it's the teething problems of first gen hardware ;)
132.
by Leace 8y ago
I just checked and I do have the latest firmware for both the laptop and the dock. The issue still persists. What is your motherboard version? Mine is A03. I had the initial one replaced. (I also replaced TB15 that was a total failure)
133.
by Leace 8y ago
Thanks for sharing your setup & experience!
134.
by Leace 8y ago
QR codes are widely used in China for example for quick transactions: https://a16z.com/2017/08/11/qr-codes-in-china/
135.
by Leace 8y ago
> Doctor's office calling to confirm your appointment; restaurant confirming a seat reservation; delivery guy is outside and can't find your doorbell; Lyft/Uber/whatever is nearby and is looking for you; pharmacy call
136.
by Leace 8y ago
I've been using Thunderbolt 3 for years now (through Dell's TB16 dock station and XPS 9350) and have mixed feelings about it. It's definitely cool to connect only one wire and have everything plugged in but it leaves much to
137.
by Leace 8y ago
LUKS with TPM2-backed key: https://github.com/electrickite/luks-tpm2
138.
by Leace 8y ago
For modern setups that support UEFI, GRUB is unnecessary as you can boot Linux kernel directly as EFI executable. If one cares about SecureBoot then this package automates everything: https://github.com/andreyv/sbupdate
139.
by Leace 8y ago
I really enjoy this kind of articles even if I don't necessarily agree with all changes that the author made. Sometimes looking at the old/new comparison makes me consciously think about what makes it a good design for me and what
140.
by Leace 8y ago
A better idea would be to utilize U2F just like in browsers and use a hardware token like Yubikey. Yubico provides a Python and C library for this: https://developers.yubico.com/Software_Projects/FIDO_U2F/U2F...
141.
by Leace 8y ago
An interesting fact: free neutrons [0] are unstable and will decay into protons [1] with mean lifetime of ~15 minutes. That is one down quark will decay into an up quark (neutron is composed out of udd quarks, proton: uud) because down quar
142.
by Leace 8y ago
The article on Semi-empirical mass formula [0] is also interesting read, especially deconstructing the formula and seeing what impact each term has (e.g. asymmetry term and the difference between the relation of number of protons to the num
143.
by Leace 8y ago
I've used sr.ht for some time and it's not that hard to work with e-mail flow. It's still not as easy (the main problem is setting up SMTP settings but that's done once). From my perspective most of the issues with git t
144.
by Leace 8y ago
Delphi was my first exposure to a real programming language almost 20 years ago. I'm very glad that it was it as I look upon the landscape of software engineering nowadays and it's totally opaque to beginners. Delphi has right abs
145.
by Leace 8y ago
> On one-side: Wouldn't it be simpler and more effective to just have a link to a public key and email address for security reporting? Well, that's what in a security.txt file basically, contact address and encryption key. >
146.
by Leace 8y ago
New draft was released on January 12, 2019. The diff: https://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-...
147.
by Leace 8y ago
I agree with that strategy. I was using @gmail.com since 2007 and just setting up new e-mail on new domain and using it was enough to reduce old @gmail.com traffic to max 1 new e-mail per week.
148.
by Leace 8y ago
Chrome is dropping support for dynamic HPKP pins (pins that sites can add via headers) but not for static pins (Google domains etc.) Source: https://bugs.chromium.org/p/chromium/issues/detail?id=779166 > O
149.
by Leace 8y ago
> Switch from LibreSSL to OpenSSL Glad that this happened. OpenSSL looks a lot better than when the entire drama started and it was quite hard to even build OpenSSL from source on alpine.
150.
by Leace 8y ago
Firefox does highlight registered domain "looking.tk" in white font and the rest of the URL is colored gray ("google.com.auth.something.else.realistic.looking.tk" and path).

More ›