andersa

36 ms·

541.
by andersa 3y ago
I imagine we'll seem them "come out in support" by quietly deploying the feature in their browsers.
542.
by andersa 3y ago
Perhaps this specific proposal is only Google's doing, but the concept in general, absolutely. For example, these provide essentially the same attestation service for native apps consuming APIs, validating that the phone is not rooted,
543.
by andersa 3y ago
It was always about the right wing kind of free speech - free to harass and insult people, freedom from consequences.
544.
by andersa 3y ago
It can't, that's the point. Unless you steal the attestation key from Google. Disabling the feature on your device will make you fail attestation and thus websites requiring it will just stop working.
545.
by andersa 3y ago
Here's an example how far along we already are. You can imagine the next steps, right? https://blog.cloudflare.com/eliminating-captchas-on-iphones-...
546.
by andersa 3y ago
Why do you think they don't have consensus or approval from all the people that matter? This is far too big for that. Google, Apple, Microsoft, Cloudflare, etc, are all working together on this. Governments will like it for "secur
547.
by andersa 3y ago
All of the major tech companies are in on this. Google and Apple already deployed it for their phone and desktop platforms (iOS, Android, macOS, ChromeOS, all support attestation already). Microsoft is getting there with Windows 11, and all
548.
by andersa 3y ago
Careful, with the right arguments from Google the EU might just make this mandatory in the name of "security".
549.
by andersa 3y ago
From the outside, that seems to have primarily two reasons: - universities wasting massive amounts of money on things that have nothing to do with academics, such as sports programs, stadiums, etc. - because they can, due to people getting
550.
by andersa 3y ago
This thingy: https://extranet.bundesbank.de/ams How they describe it: https://www.bundesbank.de/en/service/reporting-systems/exter... Any single transaction exceeding 12500€ entering (or lea
551.
by andersa 3y ago
My personal favorite is the website for reporting large international transactions, which can only be using during regular working hours on weekdays.
552.
by andersa 3y ago
The situation on windows is fascinating: everyone links these libraries dynamically, and yet, there are about two hundred of them on my system, every application using its own uniquely outdated version.
553.
by andersa 3y ago
You don't send any data to the attester. It runs locally on your device, or rather is part of its core functionality. Building a chain of trust from the TPM hardware module, validating secure boot is enabled, validating the kernel and
554.
by andersa 3y ago
Anyone who can see the uuidv7 can determine at what time it was generated. You might not want that for things exposed to users.
555.
by andersa 3y ago
They claim that but it's not true. It will deliver significantly less than that in 4k random read. I don't have the link to benchmarks at hand right now, but there was a review running CrystalDiskMark on these drives and the 4k
556.
by andersa 3y ago
It's such a tragedy Intel completely dropped the ball on Optane drives. With them having an order of magnitude higher random IOPS, it would have been incredible for servers!
557.
by andersa 3y ago
That can't be right, it would be entirely pointless then. It looks like the article was written during a pre-release time, so maybe it wasn't fully enabled? I've not yet been able to use XFG in any production software, due to
558.
by andersa 3y ago
Windows also recently implemented a far better version of this called Extended Flow Guard (XFG) that not only checks whether the location is a valid destination, but also whether it's a valid destination for that specific source. For e
559.
by andersa 3y ago
Exactly one, "are you sure you want to cancel the subscription?" "yes" "no".
560.
by andersa 3y ago
Fucking finally! This isn't a "win for Facebook and Google", this is a win for every single small European business which can finally use industry standard services again without worrying about being fined.
561.
by andersa 3y ago
What hard technical problem did Uber solve?
562.
by andersa 3y ago
Huh. First time hearing about this. No longer a small company then.
563.
by andersa 3y ago
Small companies can't just give out $50k bounties, even if it would be deserved.
564.
by andersa 3y ago
Using the most expensive service at scale to handle "huge bursts" or "spam filters" seems like a fantastic idea!
565.
by andersa 3y ago
Wouldn't this exclude all cloud servers? Since they are not permanently in your office
566.
by andersa 3y ago
Windows Sandbox is a full VM with all the advantages that brings, like most definitely a stronger security boundary around it, as well as all the disadvantages, like not properly sharing RAM and GPU access. You also can't make a Window
567.
by andersa 3y ago
I had this problem with math in uni. All abstract concepts, zero explanations why we should care about it in the real world. So it goes in one ear and out the other. That has to be one of the least effective ways of learning about something
568.
by andersa 3y ago
That makes sense.
569.
by andersa 3y ago
There would be no benefit to providing it, then.
570.
by andersa 3y ago
What if you want to run a service that can't go behind Cloudflare (such as a game server)?

More ›