LeonM

39 ms·

181.
by LeonM 3y ago
Just to be clear: Gmail is displaying ads for free use of Gmail. If you pay for Gmail (Google Workspaces, previously known as G-Suite) then they do not serve ads.
182.
by LeonM 3y ago
Too bad that TJ Miller (Elrich Bachman) probably won't be associated with it.
183.
by LeonM 3y ago
Anyone can implement DMARC, even spammers. DMARC does not reduce spam in any meaningful way, but it does prevent impersonation.
184.
by LeonM 3y ago
Because the CA needs to do a lot of checks that cannot be automated (mostly over the phone). And they also need to maintain business relationships with every single trademark office to verify your mark (logo). Honestly I am amazed that they
185.
by LeonM 3y ago
See also: https://news.ycombinator.com/item?id=35804599 I'll post my comment from the other thread here as wel: For BIMI to work, you need a Verified Mark Certificate (VMC). This is a x.509 certificate, but with additi
186.
by LeonM 3y ago
Before everybody rushes to all sorts of conclusions, some background info on BIMI: For BIMI to work, you need a Verified Mark Certificate (VMC). This is a x.509 certificate, but with additional extensions enabled. Most notably the 'pe-
187.
by LeonM 3y ago
I wasn't talking about the Macbook Air, but rather the 12" Retina Macbook [0]. Also known as the A1534 Macbook8,1 (yes, Apple's naming is always confusing). https://support.apple.com/kb/SP757?locale=en_US
188.
by LeonM 3y ago
I have recently been looking into getting a 12" Apple Macbook for on the road. The 12" Macbooks were small 12" Intel laptops produced between 2015 and 2017. They can boot Linux, but many devices are not functioning. They are
189.
by LeonM 3y ago
I don't understand why you are being downvoted, you raise a good point. Based on some HN comment from a while ago I invested in a CO2 meter (they are still quite expensive for some reason). And I share the same experience, CO2 levels c
190.
by LeonM 3y ago
Also first thing that came to my mind. Also, I can recommend playing the remaster (Second Contact).
191.
by LeonM 3y ago
How would you pay cash for an online service?
192.
by LeonM 3y ago
Not known, as SpaceX is a private company, and the rocket is still being developed. But I'd say a whole lot less than $2B per launch ;-)
193.
by LeonM 3y ago
It was planned to leave the tower with 3 engines turned off. During flight two more engines appear to have flamed out (shut down). Starship is unique in that it has so many engines, which add redundancy. They can (re)start engines mid-fligh
194.
by LeonM 3y ago
To add to the other (good) answers: it is also because this makes (re)starting the engines in zero gravity easier. Liquids behave very weird in 0g, trying to suck fuel from a nearly empty tank in 0g can be challenging. Leaving more fuel in
195.
by LeonM 3y ago
> Can you not use [complex technical sultion] > No need to make more work for yourself. Recommending somebody to 'just use' some complex technical solution is a very typical and dare I say naive HN response. Properly running
196.
by LeonM 4y ago
> Carburetors and point ignition systems have their issues. One of which is that if you apply 12V to the coil, you can bump-start the car and it will run. Theft of such cars is truly trivial. Modern cars are in fact very hard to steal. J
197.
by LeonM 4y ago
I can't believe nobody mentioned iWoz here. To me, it's the perfect blend between a biography and hacker story. I read it when I was younger (must have been 16, I think?) and it definitely influenced me into the engineer I became
198.
by LeonM 4y ago
Interestingly enough: on Page 27 the title is 'Chevy and GMC', on all following pages (and the index page) it's 'Chevrolet and GMC'. Looks like someone accidentally used some slang, and nobody caught it. I guess &#x
199.
by LeonM 4y ago
For those who missed the context of this joke: https://news.ycombinator.com/item?id=35285390
200.
by LeonM 4y ago
> Using TXT would be ridiculously insecure as it cannot force the DNSSEC verification step that SSHFP as a unique record gives. I don't believe that that is true. DNSSEC RRSIG records are created over the entire result set. So even
201.
by LeonM 4y ago
> How can openssh documentation be vendor-specific? I isn't, because the cryptography is (in case of HSM) not handled by OpenSSH itself. So OpenSSH's configuration has nothing to do with the HSM. Usually, the actual cryptograph
202.
by LeonM 4y ago
> You shouldn’t rely on ISO/IEC 27001:2013 as attestation for technical implementation details here. Thanks for the insight, good advice. But also from the same GH article [0]: The ISO 27001 certification is the latest addition to
203.
by LeonM 4y ago
> I have never knew a single person put ssh host key into HSM. You probably also never met a single person where the SSH interface sees millions of sessions as day with valuable assets (code) being transported over said sessions. > I
204.
by LeonM 4y ago
> state level actors having the ability to do this Not just nation state actors, but basically anyone in a position to MITM. Also, you don't have to be a nation state actor to extort a GH employee. Any bad guy can do a "give me
205.
by LeonM 4y ago
Auditors require a license/accreditation to do certain certifications.
206.
by LeonM 4y ago
The fact that this key was apparently not stored in an HSM, and that GH employees had access to this private key (allowing them to accidentally push it) means that effectively all communication with GH since the founding of the company has
207.
by LeonM 4y ago
AFAIK openssh does not use SSHFP (VerifyHostKeyDNS) by default, for good reason. Also, SSHFP requires DNSSEC, which Github of course does not support. (amongst other shiny new technologies, such as IPv6... /r). And even if GH would dep
208.
by LeonM 4y ago
You can do verbatim formatting on HN by placing 4 spaces. See https://news.ycombinator.com/formatdoc Thanks for the gist though, seems helpful!
209.
by LeonM 4y ago
AFAIK, that is music made by Marcan (Lina) him/her self. Amongst other talents, Marcan also appears to be musician. There are a few interviews with Marcan where you can see pianos in the background, for example here: https:/&#x2F
210.
by LeonM 4y ago
> Why does this break the elevator? It doesn't > Why would a built-in button crashing the elevator not be considered a fault? The manufacturer was trying to get out of a warranty claim, hoping the customer was naive enough to bel

More ›