bawolff

34 ms·

871.
by bawolff 9mo ago
As a non-C programmer, why would "header only" be a good thing?
872.
by bawolff 9mo ago
I mean, i think you need to look more into it than that. If you make a test that always returns true, it would also meet that criteria.
873.
by bawolff 9mo ago
I feel like that kind of word of mouth is not enough to compensate. Like how many customers is word of one sucessful match expected to attract?
874.
by bawolff 9mo ago
I think the second paragraph is. They are saying that an "error" is any departure from legal principles, and the poster is saying that that is a bad definition of error.
875.
by bawolff 9mo ago
Yeah, and sometimes if you pull an all nighter bad things happen as a result of lack of sleep. So it is an apt metaphor.
876.
by bawolff 9mo ago
Did i miss the part of the RFC that says google must accept every message? Pretty sure the RFC allows email providers to reject any message they feel like.
877.
by bawolff 9mo ago
Sure, but you can also evaluate if it gets awards, or buyers, buzz, etc. I agree its pretty subjective and not the essiest thing to evaluate, but i think its certainly possible.
878.
by bawolff 9mo ago
True, but its not a free for all. Judges (especially in a common law juridsiction) are supposed to be consistent and interpret laws following certain principles. There are more right and less right interpretations - thus we can grade judges
879.
by bawolff 9mo ago
You could evaluate how much art gets created
880.
by bawolff 9mo ago
I dont see how we are getting "answers". Disagreeing with program design is not a question. Tbh though, that doesn't sound that special. Many countries subsidize artists.
881.
by bawolff 9mo ago
> Judges do what their name implies - make judgment calls. I find it re-assuring that judges get different answers under different scenarios, because it means they are listening and making judgment calls. I disagree - law should be the s
882.
by bawolff 9mo ago
I don't really agree, but you could argue that GLP is targeting people who want a magic solution just like casinos.
883.
by bawolff 9mo ago
Good news, we won't have to fix the y2k36 bug.
884.
by bawolff 9mo ago
That's far from clear. XMPP is still probably a minor use caee of client certificates.
885.
by bawolff 9mo ago
While google did do a lot of work on making https by default be a thing, that is only a small part of what im refering to. Google did huge amount of work to make https high quality, so that sites using it were actually secure. They increase
886.
by bawolff 9mo ago
As a general rule in cryptography, a lot of vulnerabilities relate confusing the system by using a correct thing in the wrong context. Making it a rule that you have to use separate chains for separate purposes is a good rule from a general
887.
by bawolff 9mo ago
You are being pedantic but also pedantically incorrect. Lets encrypt provides value by providing signed TLS certs that are enrolled in webPKI (i.e. trusted by browsers). If they were just provided a (not necessarily trusted) tls cert, like
888.
by bawolff 9mo ago
Too late for an edit, i read a bit more about how xmpp works, i guess the cert is not really about network access controls or authenticating the connection, but authenticating the data is coming from the right server. So i guess that could
889.
by bawolff 9mo ago
> It seems reasonable for server-to-server auth though? Suppose my server xmpp.foo.com already trusts the other server xmpp.bar.com. If you already trust xmpp.foo.com, then you probably shouldn't be using PKI, as PKI is a complex sy
890.
by bawolff 9mo ago
> That's the same problem we have with server certs, and the general solution seems to be "shorter cert lifetimes". No it isn't, and that's not the reason why cert lifetimes are getting smaller. Cert lifetimes be
891.
by bawolff 9mo ago
> What exactly do you mean with "WebPKI"? WebPKI is the name of a specific PKI system, where PKI us a generic term for any PKI.
892.
by bawolff 9mo ago
Unless im missing something, this is a poor design full stop. How are they validating SAN on these client certificates?
893.
by bawolff 9mo ago
I feel like using web pki for client authentication doesn't really make sense in the first place. How do you verify the common name/subject alt name actually matches when using a client cert. Using web pki for client certs seems l
894.
by bawolff 9mo ago
That's not how this would work. Based on previous history where people actually did call google's bluff to their regret, what happens is that google trusts all current certificates and just stops trusting new certs as they are iss
895.
by bawolff 9mo ago
Google didn't force lets encrypt to totally get out of the client cert business, they just decided it wasn't worth the effort anymore.
896.
by bawolff 9mo ago
Put it in an iframe with a Content-Security-Policy header?
897.
by bawolff 9mo ago
> Historical societies did not have the technology to simply farm in another place when their current place become hostile to farming. We already do this. Maybe not to the same extent, but empires in the past certainly had the ability to
898.
by bawolff 9mo ago
Are they really trying to do science, or are they just trying to determine pragmatically whether or not current AI is useful for a research mathematician in their day to day job?
899.
by bawolff 9mo ago
I guess this is the study https://www.nature.com/articles/s41561-021-00699-z unfortunately i can only see the abstract so its hard to say.
900.
by bawolff 9mo ago
Being cold doesn't seem that big a problem. I think the bigger concern is what sudden climate shifts might do to agriculture. If some farmland becomes much less viable on a wide basis, that might be much harder to adjust to on the shor

More ›