berdario

38 ms·

361.
by berdario 9y ago
I have 2 bank accounts in the UK, and neither of them provided an hardware fob. It's frankly a bit disappointing, since storing secrets in their mobile app means that at the end of the day, when you do banking on your phone, you'r
362.
by berdario 9y ago
The Prelude is just what's visible in the default namespace, it's not the whole language Data.Array and // are also described in the Haskell 2010 report https://www.haskell.org/onlinereport/haskell20
363.
by berdario 9y ago
Jira and Heroku seemed to have had issues due to this
364.
by berdario 9y ago
It fails to work with Firefox
365.
by berdario 9y ago
Interesting. I guess that, even if the rules appear to be stricter, in the UK it might de-facto be the same, if HMRC is not contesting many claims.
366.
by berdario 9y ago
I'm wondering how widespread claiming "R&D tax credits" actually is. To think that most companies could/would seems preposterous (how many are truly doing something worth of the monicker R&D?) I'm seeing an
367.
by berdario 9y ago
My solution is: go through every chat that you had in the last 2 years, and "mute" it. That way you won't get the red dot notifying you about it when you log into Facebook, and you can blissfully ignore any message there. You
368.
by berdario 9y ago
Unless you setup your own ngrok server, you cannot use ngrok1, and ngrok2 is not open source
369.
by berdario 10y ago
Nix https://jakob.gillich.me/post/2016-03-22-self-contained-deve... https://ariya.io/2016/06/isolated-development-environment-us... You can easily automate provisioning and deployment with Ni
370.
by berdario 10y ago
> In general, I think non-Turing complete (always terminating) languages are super useful and should be used more often. yup, always-terminating functions are also called total functions (if they're defined for every input). Which i
371.
by berdario 10y ago
I don't know any insider, but obtaining a CVE was not really difficult: http://seclists.org/oss-sec/2016/q3/231 (and it was not even my project... I just reported the bug) Now the workflow changed a bit,
372.
by berdario 10y ago
Is the vetting truly that high? http://www.independent.co.uk/voices/i-am-on-the-us-kill-list... From what you write, I understand that you mean mistakes in targeting/dropping bombs, but not mistakes in assessing&#
373.
by berdario 10y ago
Yeah, weird... I guess that since sessions are enabled by default, they didn't bother making it independent/explicitly requiring it
374.
by berdario 10y ago
Exactly But even shutting down access to port 80 on the server wouldn't be enough: the attacker only needs the victim to send the request, it doesn't need for the plaintext request to actually reach the server (did you mean HSTS i
375.
by berdario 10y ago
Have you read the discussion on security.stackexchange.com ? there's no decrease in availability by an attacker (there's only a self inflicted denial by the user) there's also no decrease in confidentiality for the service it
376.
by berdario 10y ago
They are using a token, just like everyone else... this is just some added protection on top Let's not spread FUD :)
377.
by berdario 10y ago
I'm a bit confused... I thought that Django always signed the CSRF tokens with the app's SECRET_KEY But upon looking at the code, it seems that the SECRET_KEY is only used to reseed the PRNG O_o https://github.com/
378.
by berdario 10y ago
Looks like it https://security.stackexchange.com/questions/96114/why-is-re... I don't think that the solution can be as simple as: > you should not post from HTTP to HTTPS anyway. because if the attacker i
379.
by berdario 10y ago
> had no idea Broadcom chipsets didn't have Linux drivers Actually, it was a Realtek chipset (I'm not currently using that laptop, so I remembered incorrectly). The driver was available, but it was severely unstable, dropping c
380.
by berdario 10y ago
Thinkpads are not better than other laptops when it comes to Linux support. Just look at the broadcom wifi chipsets: if you mistakenly buy a thinkpad with one directly from their website (and they obviously don't advertise it as such
381.
by berdario 10y ago
Yeah, quite damning and sloppy on his behalf... Thanks for pointing this stuff out!
382.
by berdario 10y ago
I watched both of his talks, but I've never heard before about this "code on the slide was not valid Perl" complaint. You're not talking about a small typo, are you? Can you point to the wrong examples/slides?
383.
by berdario 10y ago
I never heard of Joe Cocker, Mickey Rooney, Jack Bruce and I heard of Shirley Temple just a couple weeks ago (in a discussion about how she's not as well known outside the US) These people are definitely not as POP as Bowie, Prince, Ge
384.
by berdario 10y ago
No https://en.wikipedia.org/wiki/Write-only_language in this context it's about having the source code accessible itself, instead of only a binary/bytecode available (or some obfuscated/minified code)
385.
by berdario 10y ago
This was the comment that most clearly explains the issue, I'd say. I think that this is an issue of properly covering a use-case, and having simple configuration options to avoid manual and cumbersome steps... But I don't think t
386.
by berdario 10y ago
Well, there are 3 cases: - "usual" case (if you agree): dependencies will be downloaded from the Internet, single command download+build is useful - in a bank/SC environment: the developer configured a proxy/local mirror
387.
by berdario 10y ago
> I am sorry, I'd contest that. There are often cases where one might not want to use the most current version of some library (incompatibility, undesired features, etc.) I think we're misunderstanding each other. What I meant
388.
by berdario 10y ago
> To clarify: I'm not against managing (downloading) dependencies. I just want two separate steps: [download things] and [compile things]. Fair enough, but if you have outdated dependency artifacts, it doesn't make sense to co
389.
by berdario 10y ago
I've already read this refrain: it seems to make sense, but I cannot really justify why "build systems should only build" should be the case What's the advantage over a build system that downloads the dependencies, but w
390.
by berdario 10y ago
Parsing of the capital name doesn't handle Switzerland properly

More ›