Perseids

24 ms·

151.
by Perseids 10y ago
> It's not a very inviting home to live in, a kind of non euclidean space. The surface of the earth is my favorite place to live on, but maybe you prefer infinite planes? (Earth's surface is non euclidean, parallel lines inters
152.
by Perseids 10y ago
I'm also one of the heavy tab users (though even more on the high end: I routinely close hundreds of tabs when I tidy up my browser) and I can wholeheartedly recommend the Tree Style Tab extension [1]. It automatically orders your tabs
153.
by Perseids 10y ago
JSON5 [1] is an extension to JSON that allows comments, multi line strings, additional commas at the ends of lists, and more. It has become my preferred config file format. [1] http://json5.org/
154.
by Perseids 10y ago
If you are using Firefox you can log all TLS Master Secrets to a file so you can later on decrypt the recorded TLS (i.e. HTTPS) sessions. Wireshark supports the file format out of the box. https://developer.mozilla.org/en-US
155.
by Perseids 10y ago
Something which is missing entirely in this concept (or, hopefully, only in the blog entry), are security updates. For example, let's assume I use an HTTP library whose TLS dependency has an error where it doesn't properly match t
156.
by Perseids 11y ago
The legitimate use comes from real world situation. Quite often I first cat a file only to find out it is too large to look through by hand and only then grep it. As the last command was `cat /some/long/path`, I go up to the
157.
by Perseids 11y ago
I indeed do and was. But then again, not being able to have ECC RAM on my laptop has been a pet peeve of mine for quite a long time, so after my initial disappointment I could also enjoy the surprise article :)
158.
by Perseids 11y ago
What I would really prefer is to be able to set your own keys, probably with some defaults for common layouts. That way you serve any layout and any key usage habits.
159.
by Perseids 11y ago
I'm using Neo, and though I'm also used to keyboard switching, I'm very much accustomed to leave my fingers on the default position (i.e. my left index finger on qwertz [f], where the little marking is). Because of this I hav
160.
by Perseids 11y ago
It's also pretty bad on Nexus 4 with Firefox. The reader view works pretty good though.
161.
by Perseids 11y ago
I might be the minority here, but I've been burned twice with btrfs (in Q3 and Q4 of 2014) and was only able to recover the data with great effort. Both times the errors only occurred after extended use and without a clear cause. My (u
162.
by Perseids 11y ago
"Today’s change is another big step towards making the private side of Twitter even more powerful and fun." Calling the ability to send arbitrary long messages "powerful", when virtually every other internet messaging se
163.
by Perseids 11y ago
> Note that some hash functions output only half of their state vector as the final hash. If you built your construction out of two such hash functions, and no weaknesses were found in either, then your proposed construction would be col
164.
by Perseids 11y ago
> SHA-2 is fine, and in fact the more conservative choice right now. SHA-3 didn't happen because SHA-2 was threatened. To extend on that, shortly after SHA-1 fell, there was the very real threat that the SHA-2 family would follow s
165.
by Perseids 11y ago
Afaict, to not be unuseable restrictive, the extension has to at least have access to the originating site by default. Thus the security of the data depends on the originating site to be secure against leakage – a property no site is design
166.
by Perseids 11y ago
Distributed VCS are uniquely great in allowing one to switch hosters without much of a hiccup, yes. I was referring, though, to all the surrounding aspects of GitHub, e.g. issue tracking / discussions and discoverability. Quite a lot o
167.
by Perseids 11y ago
> 1. This isn't censorship of the type that is illegal or not allowed. It is a private company deciding a word was inappropriate. It is a private company, alright, but it is also becoming a critical company for the internet as a wh
168.
by Perseids 11y ago
Self-censorship as a term has value whenever people fear losing something that is important to them. With governments it might be their their career chances, personal freedom or even their life. With companies it might be your online identi
169.
by Perseids 11y ago
Furthermore, even the best encryption does little to prevent meta data and anonymity networks ala Tor are inherently high latency and low throughput. What's more, people tend to prefer centralised systems at the moment, for the sake us
170.
by Perseids 11y ago
I think NoScript works best as an additional defence line and not as a primary protection mechanism. As such, I would of course still install all regular security updates. It does reduce my attack surface, though, even if it won't stan
171.
by Perseids 12y ago
Remember that `SecureBoot`ed Kernels only load signed kernel modules, because otherwise you could still run arbitrary kernel code. Thus with locked secured boot you cannot ever use self-compiled kernel modules, e.g. Nvidia driver and ZFS.
172.
by Perseids 12y ago
> I'd be surprised if compressor utilities running through Cygwin's emulation layer could achieve the same speed as a native tool. Why do you think so? The emulation layer should only be relevant for the IO part of the compress
173.
by Perseids 12y ago
> Google UK Ltd, and other subsidiaries across mainland Europe, pay little tax because they are designated as providers of marketing services to Google Ireland Ltd, the Dublin-based subsidiary whose name appears on invoices to most non-U
174.
by Perseids 12y ago
> Secure Boot doesn't build a walled garden if implemented the way it generally is on x86: anyone physically present at boot time can add and remove keys or just disable it That is true for very competent end users, but near imposs
175.
by Perseids 12y ago
Extending example #1: Buyer anonymity enables customers to circumvent pesky geolocation restrictions on digital goods. As a personal example I've finally found an online shop that sells audiobooks without DRM, only to realize later tha
176.
by Perseids 12y ago
> You can’t authenticate the data. Authenticating every sector is too expensive. Try to (painfully) authenticate the whole disk and any disk error trashes the disk. Maybe your users enjoy exciting games of chance? Authenticate arbitrary
177.
by Perseids 12y ago
Except for the fact that there really are no owners of any zone in DNS and DNSSEC, beside the owner of the root zone. Every other zone is just a temporary delegation that lives as long as the delegation record is cached. If you go that far
178.
by Perseids 12y ago
Coincidentally, VeriSign (responsible for DNSSEC for the root zone and .com) also runs a major CA in the existing CA infrastructure. Even worse, it is such a major player that removing it from the certificate store would invalidate the cert
179.
by Perseids 12y ago
> Look at the code in Firefox that handles certificate failures, presents user interface to end users to resolve the ambiguity, and then completes the operation once that happens. Then look at the sample code I linked to. The code I hav
180.
by Perseids 12y ago
> I'm still looking for the walk-through of how you see the attacks by a government against DNSSEC. I don't see them! Assume we are attacking example.tld For the US government: 1a) Use the root zone keys -- that are essentiall

More ›