akerl_

15 ms·

391.
by akerl_ 8mo ago
I'm not sure why you're trying to build up what CIA means by inventing scenarios. https://en.wikipedia.org/wiki/Information_security#CIA_triad > For any information system to serve its purpose, the informa
392.
by akerl_ 8mo ago
> For the record, the 'A' in CIA refers to resilience against some party's purposeful attempt to make something unavailable. That’s pretty clearly not correct.
393.
by akerl_ 8mo ago
> But let's not pretend that WebPKI is perfect. You're commenting on a post about LetsEncrypt working with other entities in the industry to make improvements to WebPKI. It's safe to say that nobody's claiming it&#x27
394.
by akerl_ 8mo ago
Ok, it's inconvenient and clumsy in ways that make it easy to shoot oneself in the foot. But that's not dangerous?
395.
by akerl_ 8mo ago
It’s going to blow your mind that many processes at many businesses are horribly inefficient and waste buckets of human time.
396.
by akerl_ 8mo ago
> attacker "proves" themselves trustworthy on any project by behaving in an entirely helpful and innocuous manner, then leverages that to gain trust in target project (possibly through multiple intermediary projects). Well, yea
397.
by akerl_ 8mo ago
That's the class war you're worried about?
398.
by akerl_ 9mo ago
This reminds me of the Keyboard.io blog, where they documented their experience with the same kind of issues: https://shop.keyboard.io/blogs/news/day-743 Notably: > When we got back, we watched as the laser eng
399.
by akerl_ 9mo ago
Why are you ok with Patreon taking a cut but not Apple?
400.
by akerl_ 9mo ago
Some googling shows hits from iOS 18 betas, where folks reported this bug, that seem to have the same UI.
401.
by akerl_ 9mo ago
What iOS version is that? It seems odd that the UI does not match what I see.
402.
We Should Talk About the Morality of Political Violence(popehat.com)
9 points by akerl_ 9mo ago|0 comments
403.
by akerl_ 9mo ago
It seems basically impossible that math works differently on your calculator app than somebody else’s. Can you post a recording of what you’re seeing?
404.
by akerl_ 9mo ago
https://vimeo.com/1158134310?share=copy&fl=sv&fe=ci Can you show what you’re seeing?
405.
by akerl_ 9mo ago
> e.g. type this sequence into the calculator Works perfectly for me.
406.
by akerl_ 9mo ago
It turns out sentencing cares whether you’re cooperative and contrite or you stand by having done nothing wrong.
407.
by akerl_ 9mo ago
I think we just fundamentally disagree about the quality of the “assessment” FIPS is doing. Choosing to use FIPS is basically choosing to tether yourself to the finest decision-making that government agencies could muster based on the techn
408.
by akerl_ 9mo ago
So I only care about it being approved if my customers are stipulating it; there’s not an inherent security value in “approved” algorithms?
409.
by akerl_ 9mo ago
Why do I care if an algorithm is “approved”.
410.
by akerl_ 9mo ago
I went looking to refresh my memory, and Wikipedia reminded me about the brief window where ESR lent his voice to the Great Slate and helped raise money for progressive campaigns.
411.
by akerl_ 9mo ago
The fact that she's awaiting sentencing suggests they didn't ignore her as much as she may have liked.
412.
by akerl_ 9mo ago
> You're kidding, right? You've never seen a server completely inaccessible just because the owner had trouble renewing the cert? I am not kidding, but also the rest of your comment isn’t at all related to what I said.
413.
by akerl_ 9mo ago
Which is why root certs are stored in HSMs, there’s a well defined total set of them, and if the owner violates any of the rules around handling of them, the CAB can put them out of business.
414.
by akerl_ 9mo ago
Which ACME client are you referring to?
415.
by akerl_ 9mo ago
It's almost like the threat models for CA and leaf certs are different.
416.
by akerl_ 9mo ago
The pitch here wasn't that only a few people get a vote, it was that the people making the decisions aren't aware of how "the wider world" works. And they are, clearly. The people making Chrome/Firefox and the peopl
417.
by akerl_ 9mo ago
Which wider world? These changes are coming from the CAB forum, which includes basically every entity that ships a popular web browser and every entity that ships certificates trusted in those browsers. There are use cases for certificates
418.
by akerl_ 9mo ago
I’ve got no problem with somebody choosing to mitigate something instead of fixing it. But it’s just incorrect to apply a blind mitigation and declare that you’ve diagnosed the problem.
419.
by akerl_ 9mo ago
I already gave you a link above with a definition of sandbox, the noun, and a list of example technologies that it applies to. If you’re going to get fired up about people you feel are misusing this term, and then ignore citations about its
420.
by akerl_ 9mo ago
> I’m saying I don’t think sandbox is a noun, I think it’s a verb. You are incorrect.

More ›