cjbprime

52 ms·

751.
by cjbprime 6y ago
Agree with you, it's entirely incorrect that a CT log operator "defines the security of the entire CA system". They can't issue certs and their output is already regarded with suspicion by default.
752.
by cjbprime 6y ago
As I understand it, this is not a big deal: there are multiple CT servers, and auditors verifying their entries, the design of the system assumes the possibility of compromised log operators.
753.
by cjbprime 6y ago
> The order would task the Commerce Department to petition the Federal Communications Commission to open a proceeding to reconsider the scope of the [Section 230] law, the people familiar with the document said. It also would seek to cha
754.
by cjbprime 6y ago
We may have miscommunicated. I'm fine with making the box-ticking mandatory, but not the donation mandatory. In your earlier messages you asked about mandatory donation, not mandatory box-ticking. Opt-in-by-default does have the disa
755.
by cjbprime 6y ago
Just curious: is it possible that they knew they had a gear malfunction and didn't know whether it was nose or main, when they decided to go around?
756.
by cjbprime 6y ago
Disallowing opt-out hurts some of the people whose organs will be donated, while those people are still alive. If they have a strong objection which doesn't qualify for an exclusion, they have to spend their life feeling this lack of c
757.
by cjbprime 6y ago
Seems they couldn't get their nose gear down.
758.
by cjbprime 6y ago
"Malware analysis" is a subfield you're likely becoming qualified for, but it's a relatively small field, especially compared to your Django skilset. Joining a CTF team (e.g. the team I play on! OpenToAll) would be a goo
759.
by cjbprime 6y ago
No you can't -- the request from the browser is coming from inside the firewall, on an internal IP.
760.
by cjbprime 6y ago
Then the ends are no longer awesome, because people would likely be sad about not having their decisions respected by the rest of society.
761.
by cjbprime 6y ago
That's a trickier case in that giving blood is at least an inconvenience while you're still alive to experience it..
762.
by cjbprime 6y ago
You're saying "maybe we should avoid saving millions of lives a year because someone might feel really strongly that they don't want to save lives after they die, but not strongly enough to go to the effort of ticking a box
763.
by cjbprime 6y ago
Super bad news about that: even if it didn't allow the `localhost` string, DNS rebinding allows the domain name of the site you visited to become 127.0.0.1. The answer to why browsers allow connections to 127.0.0.1 from external sites
764.
by cjbprime 6y ago
The Host fix sounds right to me, local TCP web servers already have to do the same thing to avoid DNS rebinding attacks from external websites.
765.
by cjbprime 6y ago
Just thought I'd drop a note that the second author (Brandon Falk) streams development of his full OS fuzzing hypervisor in Rust on Twitch, have been watching it some. https://twitch.tv/gamozo
766.
by cjbprime 6y ago
Presumably he's been using Signal over Tor, defeating all such attacks as a side-effect.
767.
by cjbprime 6y ago
Would be interesting to see a link! That doesn't sound like it would get an accurate guess to me, given facts like "light travels slower in copper than fiber" and "your packets have to enter a country through specific l
768.
by cjbprime 6y ago
Yes, here's a screenshot of Iosevka Aile in VSCode: https://chris.printf.net/iosevka-aile.png
769.
by cjbprime 6y ago
Iosevka's great! I've been using the quasi-proportional version, Iosevka Aile, as a coding font. Never thought I'd end up using a proportional coding font! Screenshot: http://chris.printf.net/iosevka-aile.pn
770.
by cjbprime 6y ago
The problem is that the Electron API changes rapidly, such that you'd really want to run each app against the Electron release it was developed against, and Electron releases so often that you're not going to actually save any dis
771.
by cjbprime 6y ago
Does the updater need to run as root, though? They could install a launchd process running as the installing user who owns the /Applications folder. This is what everything else does -- privileged helper daemons are not common.
772.
by cjbprime 6y ago
Using PIDs to lookup the calling process doesn't seem like a great idea given the small PID space on macOS, I wonder if there could be a race there too.
773.
by cjbprime 6y ago
Try a textbook? e.g. Types and Programming Languages by Benjamin C. Pierce.
774.
by cjbprime 7y ago
It's kind of odd to imagine not being able to think of anything to do on a system or codebase. Do you need approval before starting on a change? Why not just do something that makes things better?
775.
ICANN board withholds consent for a change of control of the .org registry(icann.org)
1464 points by cjbprime 7y ago|247 comments
776.
by cjbprime 7y ago
And if you're lucky , then the wifi chip will helpfully corrupt your RAM with its terrible DMA mismanagement in a way that allows you to notice that the memory you were expecting to contain your own values instead contains the ESSID o
777.
by cjbprime 7y ago
For what it's worth, a counterpoint from an ex-kernel maintainer who now does web stuff and distributed systems: kernel programming was usually easier for me than your standard full-stack web developer stuff. The API surface of a web
778.
by cjbprime 7y ago
FWIW there's also wasm2c and wasm2js out there :)
779.
by cjbprime 7y ago
Amazing work.
780.
by cjbprime 7y ago
It sounds like you could use a therapist, if that's an option. Most people don't find themselves completely overwhelmed by these interactions. I'm not saying that to be mean or make you feel bad: it's normal to have trou

More ›