ancarda

36 ms·

331.
by ancarda 9y ago
>Yeah, I realize they weren't competent, but I also realize that it had no practical effect on my site's security Can you explain why you think Symantec demonstrating incompetence is completely isolated from your Symantec SSL p
332.
by ancarda 9y ago
>I'm still waiting for the day a C-like language that runs on BEAM I used to have a similar desire! I actually started working on a language that transpiled to Haskell, like CoffeeScript -> JS. What I found, however, is a lot of
333.
by ancarda 9y ago
>I wouldn't pick up Cogent with their negative attitudes towards IPv6. Ignoring and not adopting IPv6 is bad enough, but being negative about it? What did they say? Sometimes I think we’re never going to fully adopt IPv6. It’ll just
334.
by ancarda 9y ago
I get the sentiment, but how many people can just casually add OpenCL to Tensorflow? For a lot of people, even if talented programmers, they may not be able to do anything but ask and beg. My webcam doesn’t work with Linux. Should I write a
335.
by ancarda 9y ago
Possibly German privacy laws? AFAIK they are fairly strong
336.
by ancarda 9y ago
rubs hands together I really can't wait for GDPR
337.
by ancarda 9y ago
>They quite literally do have a business that requires them to know your floor plan No they don't. Let me be quite clear here: The robot must know your floor plan. The company doesn't need to. Analogy here: Apple sold me a comp
338.
by ancarda 9y ago
In that case, why don't the companies just access those public files? Why build their own floor plans and send them back to the cloud to be sold? Why is there even a market for buying floor plans from people who didn't realize the
339.
by ancarda 9y ago
Could you send me a detailed copy of your floor plan? Ideally, SVG? Thanks! Oh, and anything else the robot sends too, like your IP address and maybe GPS coordinates? If you're willing to send, great -- thank you. I'd love to know
340.
by ancarda 9y ago
>bounce mail w/o a sensible text part Hmm... I’d like to, but I’m not sure how I’d do that on FastMail. Eventually I may host my own emails, but until that day, I can’t really do much about this problem. Maybe I could have an IMAP c
341.
by ancarda 9y ago
Sorry for the delay in replying, I don’t check my comments very frequently. Usually only in the morning. I use mutt for emails, so believe me — I know when I get a text/html only email as mutt can’t display the text/plain version.
342.
by ancarda 9y ago
Do you know how was this bug found? Are there just enough people using iOS that these sorts of bugs can be found by mistake, or is someone fuzzing CoreText? Perhaps that can be applied to provide some kind of test coverage? Even if it’s not
343.
by ancarda 9y ago
Wasn’t text/html intended as an optional enhancement too? But most of the emails I receive are only text/html - no text/plain alternative, which would be displayed if available. I fully expect text/x-amp-html only emails
344.
by ancarda 9y ago
Can anyone explain what this would look like? Just an HTML email but with parts of it hosted on AMP’s CDN? Or the whole email is hosted on AMP, and non-AMP email clients just have a link (and cannot view their email without clicking on a li
345.
by ancarda 9y ago
>How is it possible to propagate a session id in PHP What the hell does that even mean? I write PHP for a living and this makes no sense to me. Do they mean retrieve the ID via session_id() and pass it onto a page, like in a GET paramete
346.
by ancarda 9y ago
You’re confusing open source with free software. You definitely can have open source code that you can’t use (legally). Taking the code off GitHub and using it without Apple’s permission would be theft. Open Source only means the code is av
347.
by ancarda 9y ago
Maybe this will sound silly and ridiculous, but I’m going to ask regardless. Why doesn’t Apple just opensource iBoot? It could be under a very restrictive license; one that doesn’t allow the code to be redistributed or used by anyone in any
348.
by ancarda 9y ago
Hopefully Azure will implement some solution to provide SSL for free. I suspect with this announcement, free SSL may get more attention on hosting providers. There's already several tickets open on the Azure feedback website: https:&#
349.
by ancarda 9y ago
Could you help me understand scenarios where Let's Encrypt and CloudFlare SSL won't suffice? They have, e.g. added wildcard support now, so that's another angle covered.
350.
by ancarda 9y ago
It makes me a bit sad to hear you are distressed from this news. Would you like some help setting up SSL? We could go over Certbot & Let's Encrypt, as well as provide some advice on things like HSTS, Mixed Content, etc... My email
351.
by ancarda 9y ago
Insecure can't be used as a drop-in replacement for compromised though; Being insecure will get you compromised. One distinct thing might lead to another distinct thing
352.
by ancarda 9y ago
But it quite literally is: insecure (adj.) (of a thing) not firm or fixed; liable to give way or break. not sufficiently protected; easily broken into. A webpage loaded over HTTP is easy to tamper with. Let me give you an e
353.
by ancarda 9y ago
What I find really interesting is the website in question, oilandgasinternational.com, now has SSL on by default now; it'll redirect you from any page if accessed over HTTP. Given that, perhaps we should just let them complain? It seem
354.
by ancarda 9y ago
An example from the real world -- Comcast, a large ISP in the USA, has been caught injecting JavaScript into websites: https://thenextweb.com/insights/2017/12/11/comcast-continues... It's not hard t
355.
by ancarda 9y ago
If browsers allowed you to bypass HSTS, then it could be easily defeated by an attacker by breaking the traffic on port 443, forcing the user to disable SSL for the site. What would be the point over regular SSL? HSTS was designed as a resp
356.
by ancarda 9y ago
example.com has SSL: https://example.com/ -- so may one day default to using that. I'd really recommend http://neverssl.com/ for this purpose. The homepage explains it's literally designed for sit
357.
by ancarda 9y ago
Am I right in thinking #5 is asking for premature optimization? I thought that was generally discouraged
358.
by ancarda 9y ago
>Lucky we are that the world does not know yet how to hold us to a high enough standard. I'm not sure what you mean, could you elaborate? Wouldn't it be a good thing if the world held us to a higher standard?
359.
by ancarda 9y ago
>It's getting to be almost comical that the US is being presented as the cause of all that is wrong in the world. The anti-Americanism that's rife here is a bit ridiculous Unfortunately, this could be said on basically any foru
360.
by ancarda 9y ago
The sole reason I use Spotify is it’s fantastic (community created) playlists and great recommendations. Once Apple Music catches up to that, I may switch to it because Spotify’s UI is truly awful. I want to go back to Apple Music. I only l

More ›