captn3m0

5 ms·

31.
by captn3m0 4mo ago
> I don't think there exist a password manager that is explicitly designed for a compromised/hostile device. The crypto people tried this with hardware only password managers but they were too annoying. I have a halfway solutio
32.
by captn3m0 4mo ago
And as we can see from Australia, this doesn’t need a blockchain.
33.
Oil prices fall on US-Iran agreement(cnn.com)
3 points by captn3m0 4mo ago|2 comments
34.
by captn3m0 4mo ago
Other modes worth trying: "Mailing Lists", "Research Papers"
35.
by captn3m0 4mo ago
The discussion is so bad because the article is. There’s so many nuances around assets, trademarks, copyright, monetisation, cheatware(?), multi-player etc but the article ignores all of it and goes for the straight freedom angle. How do yo
36.
by captn3m0 4mo ago
MS gave away its exclusive rights to negotiate no revenue sharing: https://blogs.microsoft.com/blog/2026/04/27/the-next-phase-o...
37.
by captn3m0 4mo ago
> Github does not expose a public bug list or any issues page, hiding their problems deep in email chains Which email chains is this referring to? GitHub/community is fairly active from the community perspective. GitHub rarely looks
38.
by captn3m0 4mo ago
Meta offers it in EU: https://about.fb.com/news/2024/11/facebook-and-instagram-to-... I’ve been considering it but I am not sure if it drops just ads or suggested posts as well.
39.
by captn3m0 4mo ago
> Please don't do things to make titles stand out, like using uppercase or exclamation points, or saying how great an article is. > use the original title, unless it is misleading or linkbait; don't editorialize. https:&#x2
40.
by captn3m0 4mo ago
Signal pushed a fix for that: https://signal.org/blog/signal-doesnt-recall/
41.
by captn3m0 4mo ago
> Mozilla, which still maintains one of the only independent rendering engines (Gecko), is the only viable competitor. Everything else is Blink and Google. Notably missing Safari and WebKit
42.
by captn3m0 4mo ago
I keep writing the same comment every time this is brought up, but browsers need to support text/markdown.
43.
by captn3m0 4mo ago
I arrived at a similar model for NPM using hooks in pnpm: https://github.com/captn3m0/npm-sec-feed . I love the work Packagist/Composer is doing in the space. I’m now a firm believer that every package manager need
44.
by captn3m0 4mo ago
https://en.wikipedia.org/wiki/Hackers_%26_Painters
45.
by captn3m0 4mo ago
I tried to follow the links, but could not discover the expected cost of a record creation. > "Supply is capped at about ten per day. Individual squatting (buy at auction, hold, resell) is possible. " Won't this mean that
46.
by captn3m0 5mo ago
Just flag and move on.
47.
by captn3m0 5mo ago
As someone who’s followed and kept up with browser security for 15 yrs (CORS, CSP, all the security headers, TLS changes) and even the early U2F stuff - passkeys and this webauthn stuff is approaching too-complex territory for me. Maybe I a
48.
by captn3m0 5mo ago
> Prior to HTML5, this was called a definition list. This is because the <dl> was originally only intended to represent glossaries of terms and their definitions. TIL I’ve been naming it wrong for a decade.
49.
by captn3m0 5mo ago
There’s almost a dozen cybersecurity companies scanning NPM publishes in real-time and analysing them.
50.
by captn3m0 5mo ago
They publish some stats at https://railway.com/stats 72M deploys from 3M customers across 10M services in the last month.
51.
by captn3m0 5mo ago
The incentives are nicer here, from what I’ve heard: AWS TAMs are not reviewed in revenue at all. And cost savings for customers actually counts as a win for them.
52.
by captn3m0 5mo ago
Is this generated with a Markov chain?
53.
by captn3m0 5mo ago
All three links animate for me.
54.
by captn3m0 5mo ago
They typically use a visual editor like Inkscape with visual feedback. Nobody is hand-coding a complex SVG.
55.
by captn3m0 5mo ago
This has a security implication which is overlooked. Contributors to a repository have higher rights, such as avoiding approval requirements for fork PR runs. GitHub warns in the docs: > When requiring approvals only for first-time cont
56.
by captn3m0 5mo ago
X is the adjective framing.
57.
by captn3m0 5mo ago
Isn’t splitting code and meta into two repos the same solution here? Like how GitHub tracks your Wiki in a separate repo (which you could repurpose for your issues, even).
58.
by captn3m0 5mo ago
Good place to ask, saw a new AWS User agent in logs today: Amazon-Quick-on-Behalf-of-$HEXID I found a mention on some user agent trackers but no official documentation. Anyone knows if it’s documented? Asking because I am seeing decent traf
59.
by captn3m0 5mo ago
I saw this lets you do Fax over IP. Any other advantages or usecases?
60.
by captn3m0 5mo ago
I’m paranoid but I never authenticate the GitHub CLI - there should be no tokens lying around on my system. If needed, I have some scoped PATs in pass, which I can source as env variables. Git Pushes happen over SSH with Yubikey.

More ›