blenderob

9 ms·

151.
by blenderob 1y ago
Wow! The copyright of zone.el goes back to 2000. But this is the first time I hear about it! How did you find this gem?
152.
by blenderob 1y ago
I expect better from the people who lurk at https://news.ycombinator.com/newest and upvote stuff which help decide what reaches the home page. It's sad to see a shallow, pseudo-intellectual piece like this voted to the
153.
Spec-Driven Development with AI(github.blog)
2 points by blenderob 1y ago|0 comments
154.
Decompiling Binary Code with Large Language Models [pdf](aclanthology.org)
1 points by blenderob 1y ago|0 comments
155.
I Reinstated My Guestbook After 20 Years(susam.net)
1 points by blenderob 1y ago|0 comments
156.
High-precision date/time in C(antonz.org)
3 points by blenderob 1y ago|1 comments
157.
You did no fact checking, and I must scream(shkspr.mobi)
324 points by blenderob 1y ago|194 comments
158.
by blenderob 1y ago
You mean it can't be solved with Let's Encrypt? Yes, I agree. What about TLS certificates attested by CAs who validate the real world legal entity? Would you agree that this is a solved problem there?
159.
by blenderob 1y ago
Why do you say I should consider the middle-man answering the request to be the real website? If I want to visit chase.com, I want to consider a server controlled by Chase (the company) to be the real website. PKI with a CA that attests the
160.
by blenderob 1y ago
The very problem here is that I am not ok with middle man becoming the real website. If you are ok with that, you don't have a problem. You can use TOFU. Good for you. But I have a problem with that. So I can't use TOFU.
161.
by blenderob 1y ago
Not at all. I might have my own DNS server to answer my DNS request or I may trust a specific DNS server (not controlled by my ISP). My DNS entry may be 100% correct and resolving to my actual bank website. But with TOFU, on first use , it
162.
by blenderob 1y ago
> When some domain is always constantly resolved to your ISP, then that domain is owned by the ISP in your network. I think you've fundamentally misunderstood the problem. Nobody here is talking about the domain resolving to ISP. We
163.
by blenderob 1y ago
> In that case the ISP becomes the real website. But that's exactly what we're trying to avoid. When I want to visit my bank website, I don't want the ISP to become the real website. I don't understand your comments.
164.
by blenderob 1y ago
> The same way I know which real person is serving me the website. I don't I merely know that the owner doesn't change randomly. Still doesn't explain how I'll confirm that if the website has not been intercepted by a
165.
by blenderob 1y ago
Why is this comment collapsed? There's so much valuable feedback here.
166.
by blenderob 1y ago
> I think it's pretty reasonable to turn off the "yes i would like to accept this key" on first connect. Why is it reasonable to trust the key on first use? What if the first use itself has a man-in-the-middle that present
167.
by blenderob 1y ago
> Simply using TOFU-certificates (Trust On First Use) would achieve this. As a user how would I know if I should trust the website's public key on first use?
168.
by blenderob 1y ago
> TOFU schemes aren't acceptable for the public web because the average user (1) isn't equipped to compare certificate fingerprints for their bank This! Forget about average user. As a technical user too I don't know how I
169.
by blenderob 1y ago
> What kind of security negligence are you referring to? I am not talking about "security negligence". I am talking about "negligence". The negligence was to not follow standard best practices known for over 20 years
170.
by blenderob 1y ago
It's fine if you personally didn't know that. But if I'm paying for a service, I expect the provider to understand basic security best practices that have been industry standard for 20+ years. And if they don't, they sho
171.
by blenderob 1y ago
But something has definitely changed over the past few years. Back in the days, it felt completely normal for individuals to spin up and run their own forums. Small communities built and maintained by regular people. How many new truly in
172.
Google Pixel tackles 'vanilla' smartphones in new spot(creativereview.co.uk)
2 points by blenderob 1y ago|0 comments
173.
by blenderob 1y ago
Great to see the University of California, Berkeley and the University of Cambridge, UK continuing to add to their already outstanding number of Nobel laureate alumni. The Paris-Sud University was a new name to me. Apparently, this will be
174.
by blenderob 1y ago
As nice as TigerBeetle is, do keep in mind that this article is written by an investment company that has invested in TigerBeetle: https://www.amplifypartners.com/blog-posts/our-investment-in...
175.
8 weeks later and Bluesky's legal dept still haven't answered my GDPR request(mastodon.social)
11 points by blenderob 1y ago|3 comments
176.
by blenderob 1y ago
Absolutely! On the globe all countries lie to the west of something and simultaneously lie to the east of something.
177.
by blenderob 1y ago
So the title is clickbait? The title does not match the reality!
178.
by blenderob 1y ago
XFCE or LXDE anyone? Honest question - If you use XFCE or LXDE or similar minimalistic DEs, are you happy with the choice? or do you feel somethings are missing that are available in KDE, MATE and the likes?
179.
by blenderob 1y ago
Has the author bothered to view source their own website? If I search for class= on their view source, I see 175 matches!
180.
Store Tags After Payloads(scattered-thoughts.net)
1 points by blenderob 1y ago|0 comments

More ›