MaKey

12 ms·

211.
by MaKey 2y ago
The product page of the FIPS series shows firmware 5.4. However, it doesn't say that this is a firmware with a known vulnerability.
212.
by MaKey 2y ago
The report can be verified by visiting the product page of the YubiKey 5 NFC FIPS: https://www.yubico.com/us/product/yubikey-5-fips-series/yubi... It is listed with the vulnerable firmware 5.4.
213.
by MaKey 2y ago
They're still selling the FIPS series with firmware 5.4: https://www.yubico.com/us/product/yubikey-5-fips-series/yubi...
214.
by MaKey 2y ago
The FIPS Series shows firmware 5.4: https://www.yubico.com/us/product/yubikey-5-fips-series/yubi... Instead of stopping the sale of them, they're dumping old stock on unsuspecting customers.
215.
YubiKey still selling old stock with vulnerable firmware
288 points by MaKey 2y ago|109 comments
216.
by MaKey 2y ago
What exactly are you calling out?
217.
by MaKey 2y ago
Non-paywalled link: https://archive.is/QRAyX
218.
by MaKey 2y ago
A router that supports IPv6 but has no firewall for it? Sounds weird to me. Which one do you use?
219.
by MaKey 2y ago
It's because there aren't any additional people, the ones who managed the cloud resources now manage the on-prem resources: > "We've been out for just over a year now, and the team managing everything is still the sam
220.
by MaKey 2y ago
Spaceflight is arguably one of the better uses of public funds, so I'm curious why you picked exactly this topic.
221.
by MaKey 2y ago
What do you mean exactly with "this"? The upstream unzip doesn't support AES_WG. How should a general solution look like?
222.
by MaKey 2y ago
> I guess if there's a general trend of $35 per privacy violation companies might take a bit more serious. So far I received a payout of 210€ for one privacy violation. THAT is a more adequate sum!
223.
by MaKey 2y ago
He also says: > Your best bet is to yry 7z to uncompress the zip file with AES encrypted entries. So why not just do that and call it a day?
224.
by MaKey 2y ago
> I to this day still can't find a way to update `unzip` to a version that supports AES on my Debian VPS. Maybe because there is none? I quickly googled and found this bug: https://bugs.launchpad.net/ubuntu/+sou
225.
by MaKey 2y ago
> I meant to say when you can't find the software you want in package manager, it's easier to download it manually and install it on Windows than (again, unfair comparison) a terminal-only Linux server. In that case you would j
226.
by MaKey 2y ago
> Doing similar for my Linux VPS with only a terminal is much more complicated. sudo apt-get install p7zip-full
227.
by MaKey 2y ago
Somehow the headline made me think of a parent with a TikTok account.
228.
by MaKey 2y ago
It was from the roof of my own mouth. Except for a bit of bleeding I had no complications whatsoever as it's just connective tissue that's taken. It regrows quite fast.
229.
by MaKey 2y ago
I had a transplant for my recessed gum and the results are great. Maybe that could be an option for you too.
230.
by MaKey 2y ago
Suspending Tim Peters for 3 months on bogus claims of misbehavior was harmful for the whole Python community. He's the guy who wrote the Zen of Python. If nothing is changed I fear that the Python community will continue to suffer. Thi
231.
by MaKey 2y ago
You could go with https://mailcow.email , it's pretty easy to setup and keep up to date.
232.
by MaKey 2y ago
They have a Terraform provider: https://registry.terraform.io/providers/stackitcloud/stackit...
233.
by MaKey 2y ago
Maybe @dang can help with the title
234.
by MaKey 2y ago
I have yet to personally see an application where distribution of its parts was beneficial. For most applications a boring monolith works totally fine.
235.
by MaKey 2y ago
It is not fixed as Intel hasn't published their microcode update, which is lowering the voltages, yet.
236.
by MaKey 2y ago
That's interesting! I wouldn't feel comfortable using a non memory safe programming language without any experience in it though. Claude could introduce memory handling bugs and I might not be able to spot them.
237.
by MaKey 2y ago
What programming language are you using and in which ways are LLMs helping you? How do you deal with subtle mistakes?
238.
by MaKey 2y ago
I guess you're correct. Still, I think that LLMs are overhyped and have yet to see any real life productivity gains because of them.
239.
by MaKey 2y ago
I wouldn't worry too much. I'm not using any LLMs for my work and don't feel that I'm falling behind in any way.
240.
by MaKey 2y ago
I heard a podcast with people working at Wendelstein 7-X and they estimated that building a fusion power plant would cost 20 billion €. Far more money is spent on less important things.

More ›