brians

31 ms·

391.
by brians 9y ago
They did. Apple laptops have no ME, and Chromebooks are safe (e.g., the source is open to Google!)
392.
by brians 9y ago
It's fragile: leaks the password when TLS is having a bad day, when the server's compromised—say, on more than 1% of days in the last five years. It's fragile to request smuggling attacks too, because the password is not enta
393.
by brians 9y ago
That's a valuable perspective. How do you propose they prevent social engineering of their staff while meeting this goal?
394.
by brians 9y ago
Try a reminder including the word "play". The choice to play an album or open an app dominates, so it tells you it doesn't have an app with some nonsense name. List decoding was invented by 1955. This is a set of hard problem
395.
by brians 9y ago
https://www.akamai.com/us/en/resources/front-end-optimizatio... Opt-in by the publisher, of course.
396.
by brians 9y ago
It's a pain to get mosh support in iOS clients, yeah.
397.
by brians 9y ago
4K of that is software. The 6k option doubles the number of cameras.
398.
by brians 9y ago
Mozilla's made a couple of bet-the-company decisions in the last couple years, including Firefox OS and the phone. Given the results of those, it's a miracle of luck and effective management that they're still in business. B
399.
by brians 9y ago
Because Google said they'd abandon TLS and use QUIC-CRYPTO unless TLS had 0-RTT in the core standard. And that they insist on splicing the early data onto the TLS stream, smearing H2 traffic across both. Maybe they're right and it
400.
by brians 9y ago
Oh, it's badly flawed enough that it's visible without testing. The way some TLS libraries are implementing it---fusing the early data with the regular stream---is a recipe for Triple Handshake style bugs. What's going to be
401.
by brians 9y ago
And that's just how old tables often worked.
402.
by brians 9y ago
One step closer to Emacs on iPad.
403.
by brians 9y ago
If you ignore water purity and access issues, parasites, and lead.
404.
by brians 9y ago
One good place to look for that is < http://git.annexia.org/?p=jonesforth.git;a=summary> , previously discussed at < https://news.ycombinator.com/item?id=942684> .
405.
by brians 9y ago
That's okay. RSA-4096 is suitable for long term secrets, but we're talking about authentication: typically signing short challenges, or DH key shares, for immediate verification. The requirements for that application are much ligh
406.
by brians 9y ago
That's not the hard part. The hard part is getting keys moved around, expiry updated, subkeys handled—maybe having one key on the Yubikey helps with this, but I think sublet expiration is still going to be a problem.
407.
by brians 9y ago
By contrast, my kids (all <8) are highly motivated to go to swim class on cold days by the ribbons given out—every participant, every class.
408.
by brians 9y ago
I think that looks like a framework for proving things about the bandwidth usage of other programs, no?
409.
by brians 9y ago
Yes. The overt statements of HMG say they want warrants and court orders and individual targeting, not kibozing or grepping the gmail spool.
410.
by brians 9y ago
Well, you could repeat it for all the 24-year periods from 1917 through now. I wouldn't expect very different results, though accounting for college deferments will be fun.
411.
by brians 9y ago
Its making some assumptions that don't seem right, accounting for people having safety nets, minimum livable standards, and (for ages 16-66) more sweat-equity to invest tomorrow. If all that money's going into the stock market, co
412.
by brians 9y ago
Or perhaps you need to be a frustrated machine language programmer?
413.
by brians 9y ago
What's new: https://www.tug.org/texlive/doc/texlive-en/texlive-en.html#x...
414.
by brians 9y ago
Because the AGPL, like the GFDL, is not a free software license. It doesn't allow running the software in reasonable ways. For example, given an AGPL full text search program expected to run over a web interface (and offer source over
415.
by brians 9y ago
The reporters didn't see a tear down of the sleeves, and wouldn't be able to identify a battery if they had. They showed sleeves and a charging indicator, rather than a simple wattmeter. This was a fraud—though like many inventor
416.
by brians 9y ago
Well, they have GCL and CLisp too!
417.
by brians 9y ago
It's Guile s-expressions, so at least there's a good C reader and writer?
418.
by brians 9y ago
Is that the interface you'd like to offer others? I love Prolog and its cousin datalog for authentication systems. It makes them extensible, offers user-comprehensible delegation semantics---of course I'm likely to implement that
419.
by brians 9y ago
That's about where Blue Bottle and Counter Culture live: coffee that makes hardened street palettes numbed by decades of Dunkies reach for the word "terroir." They have to import from Kenya, Sumatra, a bunch of other complic
420.
by brians 9y ago
He didn't say he buys it by the pound; 6 oz bags are common.

More ›