NoahZuniga

5 ms·

61.
by NoahZuniga 8mo ago
DNS queries are still part of the critical path, as let's encrypt needs to check that the username is still allowed to receive a cert before each issuance.
62.
by NoahZuniga 8mo ago
This is not true. You can in fact block specific channels. From YouTube support[1]: > On certain pages, such as your Home and Watch Next pages, find a video from a channel that you don’t want recommended to you. > Click More next to t
63.
by NoahZuniga 8mo ago
Another example is that in the Netherlands, there's a crime called "valsheid in geschriften" which exists to make it easy to prosecute fraud. It states that if you create a document with false information with the intent to u
64.
by NoahZuniga 8mo ago
The thing is, Laws do not forsee in all cases, and language is not completely objective, so you cannot avoid judgement calls. One example is computer hacking, which in many jurisdictions is specified in very vague terms.
65.
by NoahZuniga 9mo ago
Well, more than just that. For the published key transparency information to be trusted it has to not just be signed by WhatsApp, but also by an independent witness. In this case Cloudflare. So for wa to do a man in the middle attack they w
66.
by NoahZuniga 9mo ago
> They can also tell your client it has the correct key. No they can't. Key transparency cryptographically makes sure everyone gets the same result.
67.
by NoahZuniga 9mo ago
Well, surely your client knows what its own key is, and would notice that the listed key is wrong when it checks it.
68.
by NoahZuniga 9mo ago
No. Whatsapp uses key transparency. Anyone can check what the current published keys for a user are, and be sure they get the same value as any other user. Specifically, your wa client checks that these keys are the right key. Whatsapp has
69.
by NoahZuniga 9mo ago
That's protected cryptographically with key transparency. Anyone can check what the current published keys for a user are, and be sure they get the same value as any other user. Specifically, your wa client checks that these keys are t
70.
by NoahZuniga 9mo ago
Just wanted to chime in to say Antenna Pod is really good.
71.
by NoahZuniga 9mo ago
It still does for me! This is a feature that can be turned on or off on Google maps web, under the layers menu.
72.
by NoahZuniga 9mo ago
well, not mentioned in this specific article. But JPEG-XL support is something they're working on [1]. [1]: https://pdfa.org/wp-content/uploads/2025/10/PDFDays2025-Brea...
73.
by NoahZuniga 9mo ago
Bonaire is a special municipality of the Netherlands, so I think they could give that away.
74.
by NoahZuniga 9mo ago
Note: legally, the Netherlands can't give Aruba or Curaçao to the US as in the constitutional framework of the dutch kingdom they are seen as sovereign entities.
75.
by NoahZuniga 9mo ago
> broken by some government agency or hacker group Probably not. For browsers to accept this certificate it has to be logged in a certificate transparency log for anyone to see, and no such certificates have been seen to be logged.
76.
by NoahZuniga 9mo ago
Not for long, seemingly.
77.
by NoahZuniga 10mo ago
Depends, I remember some llm providers including this information in the post training. though gemini-3-flash-preview and gpt-5.2 both don't know what model they are.
78.
by NoahZuniga 10mo ago
Reinvested money isn't a cost, so the amount of reinvesting doesn't impact the profit number in their report.
79.
by NoahZuniga 10mo ago
Thanks for this great comment! > He also uses Rice’s theorem (old) to show that there is no uniform measure over the set of "possible universes." I assume a finite uniform measure? Presumably |set| is a uniform measure over the
80.
by NoahZuniga 10mo ago
Pretty sure this was a thing in the past, but that currently it has to be a court order.
81.
by NoahZuniga 10mo ago
The cloudflare 15 year cert is one they issue privately and that they only use to authenticate your origin. Cloudflare manages the certificates for connections coming from the web.
82.
by NoahZuniga 10mo ago
Have you heard the good news of Merkle Tree Certificates[1,2]? They include the transparency cryptography directly in the certificate issuance pipeline. This has multiple benefits, one of them being way smaller transparency logs. 1: https:
83.
by NoahZuniga 10mo ago
> # We must reshape X to be a column vector (3,1) > # or rely on broadcasting rules carefully. > Z = Y @ X.reshape(3, 1) Why not use X.transpose()?
84.
by NoahZuniga 11mo ago
I use cloudflare and it's great. It feels like the only registrar that has a business case for at cost domains. Also if you're worried about cloudflare downtime, you can only use them for dns resolution (which hasn't been imp
85.
by NoahZuniga 11mo ago
I mean this is a decision you can make, but its a disservice to your customers. Starting in about a few months, user agents will stop requiring all certs to be logged in at least one RFC 6962 log. At that point some certs will not be visibl
86.
by NoahZuniga 11mo ago
> With Github that’s not even an option. Github does offer a self hosted product: GitHub Enterprise Server
87.
by NoahZuniga 11mo ago
This article seems to imply that when works enter into the public domain depend on where they were published. This is not true! It's based on where you are and when it was published.I E, if you're in the USA and some work publishe
88.
by NoahZuniga 11mo ago
its consistent cross site, so you get all the same privacy problems as with 3rd party cookies
89.
by NoahZuniga 11mo ago
archive.today already takes down all reported CSAM? They explicitly don't want to archive it.
90.
by NoahZuniga 11mo ago
> Even if you're worried about other people sniffing network traffic, the hostname you're visiting still gets revealed in plaintext during the SNI handshake Many sites now support Encypted Client Hello. This makes it possible t

More ›