akerl_

36 ms·

871.
by akerl_ 2y ago
This isn’t a slippery slope. Your starting point, where it’s a good idea to socially pressure people to not reproduce based on your assessment of what traits are sufficiently undesirable, is already bad. We don’t have to slide anywhere.
872.
by akerl_ 2y ago
I think what you’re missing is that advocating for social pressure towards eugenics is also alarming. I’m not limited to only being concerned about advocates of government-mandated eugenics policies. Social efforts to encourage eugenics, li
873.
by akerl_ 2y ago
I'm not sure what I find more fascinating: That it doesn't seem noteworthy to you that your best comparison is invoke Godwin's law on yourself. Or the idea that the reason that the right wing suffered must have been because p
874.
by akerl_ 2y ago
So you don’t want eugenics to be legally required, but you think participating in collective eugenics is the morally right thing for everybody to do?
875.
by akerl_ 2y ago
> Those who are sickly or low iq or carry certain congenital conditions (if they are aware of them) definitely shouldn’t [reproduce]. > People love to straw man this obvious issue, saying, “oh so you support forced sterilization?” No,
876.
by akerl_ 2y ago
What is the cost of that to me?
877.
by akerl_ 2y ago
The easier and more productive thing is to make an easy-to-use tool that does a specific workflow vs trying to be a swiss army knife. https://github.com/FiloSottile/age is this for encrypting files. https://
878.
by akerl_ 2y ago
The average small business in 2025 is not running custom on-premise infrastructure to solve their problems. Small businesses are paying vendors to provide services, sometimes in the form of on-premise appliances but more often in the form o
879.
by akerl_ 2y ago
I'm trying to square two aspects of your comment: > Some libraries are so common that basically everybody uses them, to the point that they're considered the standard and they don't count when I raise complaints about peop
880.
by akerl_ 2y ago
It seems like you have two pretty viable options: 1. Wire up LetsEncrypt certs for things running on your LAN, and all the "dire certificate warnings" go away. 2. Run a local ACME service, wire up ACME clients to point to that, ma
881.
by akerl_ 2y ago
The browser policies are set by the same entities doing the CAB voting, and basically every prior change around WebPKI has only been enforced by browsers for CAs in the browser root trust stores. Which is exactly what's defined in this
882.
by akerl_ 2y ago
As is already described by the comment thread we're replying in, "internal use" and "HTTPS" are very compatible. Corporations can run an internal CA, sign whatever internal certs they want, and trust that CA on thei
883.
by akerl_ 2y ago
How could it possibly be true that libraries that are so commonly used that you consider them “the standard” are so infrequently used as to be a “very small minority” of libraries people actually use?
884.
by akerl_ 2y ago
This article presents what it claims is the generally accepted approach, makes a viable case for why the author thinks it should be the generally accepted approach, but doesn’t actually back up why they think it really is generally accepted
885.
by akerl_ 2y ago
Can it? In many SAML setups, there's not direct network interaction between the IDP and Service, other than at most sharing metadata via URL.
886.
by akerl_ 2y ago
Properly stored nuclear material is safe as well. But it’s still hazardous material because if the storage or handling are imperfect, they are harmful. Passwords are the same, except we’re constantly finding new attacks and weaknesses. As s
887.
by akerl_ 2y ago
Passwords are data that, once you've built a system that requires you store them, must be kept forever, with basically zero tolerance for loss or unavailability (so you have to make them continuously available to systems that validate
888.
by akerl_ 2y ago
I don't understand. As this page notes under "What would it mean for iOS to "have" sideloading?", iOS lets you sideload apps. If you pay for a developer account, you can sideload an app and just have to renew the ce
889.
by akerl_ 2y ago
Sometimes people just share information that they have about a topic as part of a discussion, without there being a persuasive intent.
890.
by akerl_ 2y ago
As the comment you linked to notes, that doesn't really fix the problem so much as it ensures that the CA's legal team gets to work nights and weekends for the next year. The legal system is almost certainly going to view future-d
891.
by akerl_ 2y ago
I don't think I disagree with you about what courts can do. And (as shown by all the back and forth in the CAB thread, and now here), it is risky: we currently have a situation where CAs can find themselves in a position where taking c
892.
by akerl_ 2y ago
> Besides, this kind of hyper-polite passive-aggressive "erm akchually" conversation happens in every CAB incident discussion. As somebody who doesn't spend much time scrolling CAB reports, this was jarring to me. Digicert
893.
by akerl_ 2y ago
I’d love to hear more about the idea that somebody making a fraudulent signup with a stolen credit card is potentially going to pay full price if they “get caught”
894.
by akerl_ 2y ago
Why? Why does doing something in public for a long time create an obligation to people who see me do it.
895.
by akerl_ 2y ago
I'm trying to square your comment here and https://news.ycombinator.com/item?id=43151500 . It seems like this money is pretty censorable, it's just a different group doing the censoring.
896.
by akerl_ 2y ago
If I go for a jog, and a bunch of people start jogging behind me that I didn’t solicit in any way, then no… it is not rude of me to just stop jogging and go home without saying anything to them.
897.
by akerl_ 2y ago
Evidence of it opening a reverse shell would be wild, and should be possible to spot, if it’s happening, by monitoring what network traffic to that domain looks like. Beyond that, companies being able to push changes via custom firmware is
898.
by akerl_ 2y ago
I’m missing a step here. I see a var called ssh, and an authorized key, but I don’t see where they’re seeing any method for the device to expose itself outside the NAT that’s in place on basically every consumer LAN. This looks a lot more l
899.
by akerl_ 2y ago
Did Amazon recommend that other 3rd party products use their SDK as their own client?
900.
by akerl_ 2y ago
Suggesting that people who publish open source should be flattered by harassment is a fascinating take.

More ›