d-z-m

19 ms·

211.
by d-z-m 4y ago
> Which results in the "rightness" and "wrongness" of those actions being open to debate, and therefore subjective. Poor choice of words by me...what I meant to say is that the full scope of human well-being is not ye
212.
by d-z-m 4y ago
This seems like a non-sequitur, can you elaborate?
213.
by d-z-m 4y ago
I used the word "objectively" to close the door to moral relativism. However, I can defend the use of the word more thoroughly. I base my morality on the well-being of conscious creatures. What constitutes well-being is open to d
214.
by d-z-m 4y ago
I understand you're being sarcastic, but it isn't hard to realize that the compulsory veiling of women is objectively wrong. The issue is to the coercion of women and girls. Arguments about which culture is good and decent need n
215.
Fide Women’s Grand Prix Collapses into “Chaos” as Players Withdraw(lichess.org)
48 points by d-z-m 4y ago|99 comments
216.
by d-z-m 4y ago
There certainly are consequences. However, you said it "breaks a lot of the web" including "the back button". Maybe this is the case with some very complicated SPA type sites, but personally, I've never seen this.
217.
by d-z-m 4y ago
This is easy to say, but not always true. Can you elaborate about concrete details of the "capabilities in practice"?
218.
by d-z-m 4y ago
RFP randomizes Canvas data extraction by default, which might have something to do with it. Gitlab favicon seems normal to me when I navigate there(RFP on).
219.
by d-z-m 4y ago
This is FUD. As others have said, been using RFP for years and barely noticed.
220.
by d-z-m 4y ago
> It is much easier than tracking a default settings browser. Not true. Especially if you mean a default browser with Canvas/WebRTC APIs enabled. It is much more difficult for fingerprinting companies to get a high entropy finger
221.
by d-z-m 4y ago
Currently it is, yes. In this case, I'm arguing that it should not be.
222.
by d-z-m 4y ago
Indeed, which is why Bitwarden should disallow pin-only access for offline vault data altogether. Admittedly, I'm valuing a safe interface for users much more highly than one that is convenient or ergonomic.
223.
by d-z-m 4y ago
The author mentions this finding was marked as out-of-scope when they reported it to Bitwarden. A couple of categories that are considered out-of-scope are listed, namely: attacks requiring physical access to a user's device, and &quo
224.
by d-z-m 4y ago
On the topic of good open-source webfont sources. I like the ethos/aesthetic of the League of Moveable Type. https://www.theleagueofmoveabletype.com/ Also, most of their fonts are OFL licensed.
225.
by d-z-m 4y ago
It's a thought experiment, like the original trolley problem. The reason it's notable is because ChatGPT gets it so wrong. > The “racist trolley problem” is not a trolley problem at all. There's a trolley, and there'
226.
by d-z-m 4y ago
Not in particular. Yes, the way they are combining them should be sound.
227.
by d-z-m 4y ago
I'm intentionally not using Kyber, the key xor only happens if you elect to use both. It works just fine with McEliece only. > You also don't need Go You don't need any language in particular. That's the beauty of th
228.
by d-z-m 4y ago
They maintain separate peers for Pre-quantum and Post-quantum so that connectivity isn't interrupted. Each Pre-quantum peer is implicitly paired with a corresponding Post-quantum peer. Negotiating the PSK happens over a grpc api they
229.
by d-z-m 4y ago
One of the KEMS they've elected to (McEliece) has been around since the 70's, and has arguably been studied more than the others. If you're not quite sure about lattices, I've heard it called the "conservative choi
230.
by d-z-m 4y ago
You still can. The problem arises when you don't actually wanna pre-share the key, and you still want post-quantum forward secrecy. Then you need a PQ KEM like McEliece or Kyber to run a PQ-secure key establishment.
231.
by d-z-m 4y ago
> Using a PSK alone doesn't make WireGuard quantum-safe. Not sure what you're trying to say here. If you share the PSK out-of-band, securely, then wireguard is quantum resistant (I wouldn't say quantum-safe, because I&#
232.
by d-z-m 4y ago
> I honestly don't think it would be bad PR. It would be terrible PR, and would re-ignite all the old conspiracy theories regarding Cloudflare. > My point is that there is extra services to maintain that offer 0 technical benefit
233.
by d-z-m 4y ago
There certainly is a difference between keeping LavaRand operational or not. But I would submit that the difference is worth it. I mean c'mon, it's super cool! Also, from a different angle, think about the potential blowback if
234.
by d-z-m 4y ago
> wow. this is such a bad take, it makes me question using Age at all. I would think it would bolster your confidence in age, as the maintainer is expressing a commitment to fix issues as they arise, not punt indefinitely with TODOs at t
235.
by d-z-m 4y ago
Classic McEliece age plugin...thoughts? ;)
236.
by d-z-m 4y ago
> and for someone who has developed a simple & safe workflow around it This is the kicker. Modern versions of GPG have sane defaults, but if I were a new developer who knew nothing about encryption, I would be very scared of GPG, it
237.
by d-z-m 4y ago
The benefit is in the PR. Besides that, it's a good demonstration of a "nothing up my sleeve" sort of RNG.
238.
by d-z-m 4y ago
Looks awesome, can't wait to give these a try.
239.
by d-z-m 4y ago
There is a difference in abstraction between hooking API Gateway to a Lambda function, and writing and deploying an API on a Linux VM. One is closer to the metal, so to speak, and provides a better basis for understanding how these cloud se
240.
by d-z-m 4y ago
There are monastics in the West, perhaps you're simply unaware of them. Your "No True Buddhist" argument is sweeping and fallacious.

More ›