arccy

21 ms·

421.
by arccy 1y ago
because AWS is an american company, and right now the US is hostile to the rest of the world. probably similar to how US companies view working with a Russian or Chinese company.
422.
by arccy 1y ago
Wanting to and reading Windows source is fine. What isn't fine is the suggestion to not admit to it.
423.
by arccy 1y ago
This is so wrong, read up on https://datatracker.ietf.org/doc/html/rfc9413 The internet is ossified because middleboxes stick their noses where they shouldn't. If they just route IP packets, we could have had
424.
by arccy 1y ago
see https://datatracker.ietf.org/doc/html/rfc9413#section-4.2
425.
by arccy 1y ago
if you read it but didn't confess, you'd still be ineligible, you'd be harming rather than helping wine if you did sneak in contributions.
426.
by arccy 1y ago
github's fine grained scopes aren't even that good, you still have to grant super broad permissions to do specific things, especially when it comes to orgs
427.
by arccy 1y ago
your password manager needs them in decryptable form...
428.
by arccy 1y ago
crypto isn't necessary... it's just that no bank wants to take on the risk of exposing an api to the regular consumer.
429.
by arccy 1y ago
noone reputable would want to touch Tether and their anti-regulation stance.
430.
by arccy 1y ago
request signing is strictly better... except that developers complain when you try to implement anything harder than an api bearer token (see recent threads on google gemini / vertex apis).
431.
by arccy 1y ago
if you copy the aws signing, curl has --aws-sigv4
432.
by arccy 1y ago
well it's probably a good thing jj isn't vc funded.
433.
by arccy 1y ago
I think you just described something similar to the Japanese system
434.
by arccy 1y ago
Google's CA offers them for free via ACME https://pki.goog/
435.
by arccy 1y ago
mkcert is pretty painless
436.
by arccy 1y ago
funny. java is known for its stacktraces where you need 3 vertical monitors stacked together to see the whole thing and it still doesn't tell you anything useful about why the app crashed.
437.
by arccy 1y ago
or the "records" are in private channels you can't access
438.
by arccy 1y ago
the value the company receives is the amount of money they can make from it.
439.
by arccy 1y ago
it increases the efficiency of sending short messages...
440.
by arccy 1y ago
most smtp servers don't use client certs, there's almost nothing that requires their clients to use client cert auth. mail servers will continue working along just fine.
441.
by arccy 1y ago
not even most smtp servers, just his special setup
442.
by arccy 1y ago
For a server auth cert, you validate that the thing you connect to has a cert for the same name. For a client cert issued by web pki, all you know is that they've somehow obtained a cert for some name, you don't know if it's
443.
by arccy 1y ago
but delivery to means the receiving end is a server, so they just need server auth TLS certs, not client auth.
444.
by arccy 1y ago
password expiry was bad only because humans were in the loop. otherwise, for secure things you rotate secrets every time, like new encryption keys for every tls exchange, and a continuous cycling of keys for perfect forward secrecy in e2e m
445.
by arccy 1y ago
smtp servers shouldn't have been doing this anyway... the pki separation is good.
446.
by arccy 1y ago
a successful PR campaign given now we have court rulings that show apple is an abusive company. abiding by apple's abusive TOS won't improve developers' situations, you have to stand up to them.
447.
by arccy 1y ago
The Google / Chrome sync is free
448.
by arccy 1y ago
This is a straight up lie. They've been in Linux Chrome for quite some time now.
449.
by arccy 1y ago
maybe gamified busses will convince people to use public transport instead of driving everywhere.
450.
by arccy 1y ago
i think cloudflare workers does this

More ›