amluto

43 ms·

781.
by amluto 9mo ago
This seems like it would completely break any attempt to track access from unauthorized users or devices — any IT department using a backend other than Microsoft’s would need to pretend that all access from MS’s servers is safe.
782.
by amluto 9mo ago
> Docker is still maintaining the runtime on which orbstack, podman Podman? Podman appears to have reimplemented basically everything. What runtime are you talking about?
783.
by amluto 9mo ago
Off the top of my head, here are some options. They all boil down to having a privileged driver talk to the TPM and less privileged programs mediate their access through the driver. 1. Have some PCRs that are not in the TPM at all but inst
784.
by amluto 9mo ago
> The system could extend one of the PCRs, or an NVPCR, with some unique user credential locked to the user directory. Then you can't recreate the PCR records in any immediate way. Sure, but can the system context-switch that PCR be
785.
by amluto 9mo ago
> Anyone can do this today Please explain
786.
by amluto 9mo ago
That helps with FDE (except to the extent that one might want to connect an encrypted device after boot), but it doesn't help in the slightest with SSH keys. The TPM has nothing remotely resembling per-user PCRs.
787.
by amluto 9mo ago
That’s a weird problem to have. The US has a huge bond market in part because the US has an absolutely enormous amount of debt, and the bonds are the US debt. The EU doesn’t have bloc-wide debt, for better or for worse. As an interesting
788.
by amluto 9mo ago
My pet peeve is that the entire TPM design assumes that, at any given time, all running software has exactly one privilege level. It’s not hard to protect an FDE key in a way that one must compromise both the TPM and the OS to recover it
789.
by amluto 9mo ago
IMO it would be awesome if it also exposed an ACM serial device so that one could connect with a terminal emulator and avoid fiddling with SSH. Otherwise this is very cool.
790.
by amluto 9mo ago
> The key difference in threat models is that the device manufacturer often needs to protect their intellectual property (firmware, algorithms, and data) from the end-user or third parties, whereas on a PC, the end-user is the one protec
791.
by amluto 9mo ago
In most (all?) US states, you can just start a company. You file a form, usually online, with the state, and you ask the IRS, online, for an ID number called an EIN. Technically you have a valid company after just step 1, but good luck get
792.
by amluto 9mo ago
If a user’s verification attempts fails because their own rules block access, that doesn’t sound like a Cloudflare bug. If a user’s verification attempt fails because of Cloudflare’s built in rules, maybe that’s an issue, and maybe Cloudfla
793.
by amluto 9mo ago
The one thing that I find bizarre about this: why did Cloudflare feel inspired to special-case /.well-known/acme-challenge at all? The only thing I can think of is that clients were having caching issues (Cloudflare caching the c
794.
by amluto 9mo ago
Not much? As I understand it, the major effects are in very long wires. Long wires can have get massive induced currents. But your homelab is unlikely to have long wires or very large loops. Ethernet wires are limited to 100m, and unshie
795.
by amluto 9mo ago
It could be interesting to try to apply Fil-C techniques to Rust. After all, while safe Rust is fully memory safe and has many other forms of bug-resistance that Fil-C lacks, Fil-C is far safer than unsafe Rust. Maybe one could achieve
796.
by amluto 9mo ago
I have icons of apps I’ve used many times visible in a launcher, and I still have to think about which is which because they are so nondescript.
797.
by amluto 9mo ago
I find it interesting that, as someone utterly unfamiliar with ergodic theory, Dini’s theorem, etc, I find Deepseek’s proof somewhat comprehensible, whereas I do not find GPT-5.2’s proof comprehensible at all. I suspect that I’d need to de
798.
by amluto 9mo ago
This has some questionable methodology. image = Image.open(file) greyscale = image.convert('L') stat = ImageStat.Stat(greyscale) avg_lightness = int(stat.mean[0]) That’s a non-gamma-corrected average, which g
799.
by amluto 9mo ago
Au contraire. If you live in a climate where the outdoor air is generally fairly dry and also sufficiently warm that it spends most of its time above the interior dewpoint, then fine. You can vent our attic and it stays dry. This covers rat
800.
by amluto 9mo ago
> Apple mostly cares about legibility and consistency in icons now, not art. The second-to-oldest one is legible. The word “PAGES” is quite legible. It’s pretty clear what’s going on. In fact, it’s the only one in the entire set where I
801.
by amluto 9mo ago
Me too. But have you been in a competently built insulated and unvented attic? The insulation on top makes an enormous difference, to the point that the attic can usually maintain a very pleasant temperature. While it’s true that the to
802.
by amluto 9mo ago
> For example, how many houses have a cupola? They're common on older homes, but non-existent on modern ones. What the roof does is accelerate the wind moving over the roof, then the air vents in the cupola let the wind through, whi
803.
by amluto 9mo ago
I think you're best off not upgrading for the time being. It seems like the old auth still works server-side but the the new auth is very, very busted if you are not on a personal plan. But good news: you can fake out codex-rs into th
804.
by amluto 9mo ago
Which has what, exactly, to do with Palantir? On a somewhat related note, it always bothers me that the discussion is about whether it’s appropriate for the government to buy this sort of data as opposed to whether it is appropriate for any
805.
Ask HN: Is Codex login down for all workspace (non-personal) users?
6 points by amluto 9mo ago|2 comments
806.
by amluto 9mo ago
The goop is generally considered to be unnecessary. What you need is a termination that is rated for aluminum wire, and these are very, very common as long as the wire in question is fairly large (8AWG or so and larger).
807.
by amluto 9mo ago
If by “special” you mean ordinary low-cost lugs, then sure. Check it out: https://lugsdirect.com/WhyAluminumOverCopperFAQ.htm And you can browse that site for lugs, and they’re mostly rated for aluminum and copper. Copper-
808.
by amluto 9mo ago
> Sure, aluminum is a pain to work with Really? In larger sizes, an equivalent ampacity aluminum cable is generally lighter and more flexible than copper. The main downside is that it’s thicker. (Common terminations for larger wire size
809.
by amluto 9mo ago
libsodium is great if you only need to interoperate with other software using libraries that sound like “sodium”. This is generally not helpful for the kinds of things that people use OpenSSL for.
810.
by amluto 9mo ago
This is amazing. Once upon a time, OpenSSL was the place to go for crypto primitives that were hardware specific and well optimized, and you would pay the price of using a nasty API. Now it’s an even nastier API and it’s not even fast anymo

More ›