asdbffg

5 ms·

1.
by asdbffg 8y ago
What is the point of "query privacy" when browsers send host addresses in plaintext (SNI) and destination IPs are still visible to the internet provider? Layering DNS over TLS (or anything else) is meaningless, it increases RTT (a
2.
by asdbffg 8y ago
It is relevant, because Facebook does not let you create new identities.
3.
by asdbffg 8y ago
Using O_APPEND does not imply, that kernel needs to purge the pages from cache ASAP, does it? Removing pages from cache may be expensive operation by itself, so I presume, that it is avoided by default. More importantly, if the disk can not
4.
by asdbffg 8y ago
VM certainly does "call underlying host kernel operation", it just does so indirectly — the guest userspace calls fadvise(), kernel implementation of fadvise() asks the virtio disk driver to perform particular read/writes, th
5.
by asdbffg 8y ago
Java is FOSS. Oracle used excuse, that it's current OpenJDK license (GPLv2) is incompatible with license, used by Google's runtime (Apache 2). If Google re-licensed it's Java implementation under GPL, some of arguments, use
6.
by asdbffg 9y ago
Machine learning also has tendency to unlearn things and corrupt it's own models when left unaided.
7.
by asdbffg 9y ago
You are making it sound like "injecting random garbage into HTTP" is some new hotness. It have been done since forever. By the way, — email still works that way. But Google and a couple of other corporations would not like you t
8.
by asdbffg 9y ago
I doubt, that any government is inherently more trustworthy than any other. It just coincidentally happens, that US controls 100% of root CAs and Kazakhstan (most likely) controls 0. So the later needs more audacious measures, while former
9.
by asdbffg 9y ago
I would love if null encryption ciphers actually worked in real life, but they don't (for the same reason why plaintext HTTP/2 does not — everyone disabled them under political pressure). By the way, — signing is not equal to &quo
10.
by asdbffg 9y ago
So a bunch of centrally controlled monopolies agreed to realign their offerings to maximize profit and gain greater control over end-user. They also pretend, that compromising 3-months certificate is "ok" (or at least less harmful
11.
by asdbffg 9y ago
Indeed. The same is also true for repositories, served via SSL. Majority of HTTPS traffic is sniffable and largely non-confidential, unless you pad every file and web-request to several gigabytes in size. Does your website use gzip? Good, n