dagenix

44 ms·

361.
by dagenix 8y ago
That assumes that a significant number of people a) know that Google has a EV certificate and b) actually check it. To the first point, I'm not sure that Google actually does have an EV cert - looking at Google.com, I think they just h
362.
by dagenix 8y ago
So? Many people hate the current system. Its not clear that anyone has a better idea.
363.
by dagenix 8y ago
Who requires these certs? I've always gotten the impression they are useful for 1) checking a box on some form; and 2) making more money for CAs. And, if its my job to check that box or to make money for a CA, well, that's fine. B
364.
by dagenix 8y ago
That's pretty rude.
365.
by dagenix 8y ago
> NSA monitors all traffic Source for this claim? I don't doubt they monitor what they can - but the sheer volume of internet traffic makes it unlikely that they are able to monitor everything and instead must target specific things
366.
by dagenix 8y ago
Lol - no. My computer isn't that old. Chrome switches tabs instantly. Firefox doesn't. I'm not going to buy a new computer to find out if Firefox will then switch tabs faster. Also, I've read similar complaints from othe
367.
by dagenix 8y ago
Google does some things that I think are very cool. Google does some things I don't think are so cool. None of the things that Google does, however, can in any way be compared to the things that a child rapist does. Making that compari
368.
by dagenix 8y ago
So, Google is making people stupider? Thank goodness we have you here to warn us with insightful analysis such as Google is "super creepy"!
369.
by dagenix 8y ago
Your anecdote is a sample size of one that shouldn't be extrapolated from. Right back at you.
370.
by dagenix 8y ago
Yeah, thats annoying. That doesn't mean it's not also a practical decision.
371.
by dagenix 8y ago
... which has nothing to do with what I'm talking about.
372.
by dagenix 8y ago
Do you want to not be blocked? That's a reason to go through 80/443.
373.
by dagenix 8y ago
> First, I think it gives too much power to the browsers. Firefox was already taking some dangerous choices with DNS over HTTPS on some of their recent changes. Chrome as well, doing changes that will benefit Google, in detriment of the
374.
by dagenix 8y ago
Why? What's the specific harm? AIUI, as long as the request still fits into a single frame, its not anymore inneficient.
375.
by dagenix 8y ago
... except that SNI isn't encrypted.
376.
by dagenix 8y ago
That's fair. Saying it's a feature you don't like is reasonable. IMO, calling it spyware is too much.
377.
by dagenix 8y ago
Personally, I'm going to sign into both anyway. One less thing to sign into saves me time. That makes me happy. I dunno if I'm in the minority or not. But, it's a feature that at least some people find useful, so, I think bra
378.
by dagenix 8y ago
Calling that behavior "spyware" is a bit of a stretch.
379.
by dagenix 8y ago
Last time I tried Firefox, a few months ago, tab switching was painfully slow as compared to Chrome. I intend to give it another chance soon, though.
380.
by dagenix 8y ago
Prediction: DNS-over-TLS won't win. I don't think it's going to be able to get around the non-standard port issue. Instead, I think DNS-over-HTTP is gonna be the champ. The overhead of HTTP is a minor issue, but, I think usin
381.
by dagenix 8y ago
I don't doubt that sqlite will wipe the floor with xsv for certain types of analysis. I also suspect that the opposite would be true for other types of analysis. Although, you'd know much better than I would - I've used sqlit
382.
by dagenix 8y ago
Faster than xsv? AIUI, both sqlite and xsv rely on the OS filesystem buffer cache to keep their data in memory.
383.
by dagenix 8y ago
It's perfectly fine to say "this is an impressive project. I don't understand why it couldn't be done in Python. I would love for someonet to explain that to me. Thanks!" It is not necessary to dismissively declare
384.
by dagenix 8y ago
I installed with: PCRE2_SYS_STATIC=1 RUSTFLAGS="-C target-cpu=native" rustup run nightly cargo install ripgrep --force --features 'simd-accel avx-accel pcre2' `--no-pcre2-unicode` sped it up a little. But, it wa
385.
by dagenix 8y ago
Fair enough. The way that HPKP was deployed and designed and then undeployed was really quite awkward.
386.
by dagenix 8y ago
> That's exactly the same situation as any other TLS failure, not at all unique to HPKP in any way that I'm seeing. Yup. But the feeling I'm getting is that browser vendors see this behavior as non-ideal since it trains us
387.
by dagenix 8y ago
> Even if the error screen is skippable, it makes it clear to the user that something is very wrong and that they're advised to abort their usage of the site. If users do abort their usage of the site, the site is effectively bricke
388.
by dagenix 8y ago
> make HPKP error screens skippable like any other TLS errors That largely defeats the point. Almost no one knows what to make of those errors. And just training everyone to ignore them makes HPKP pointless. The problem with HPKP was tha
389.
by dagenix 8y ago
> Electron isn't just bad because it's all a mess of javascript, it's bad because it's not portable Electron runs on (at least) Linux, Windows, and Mac OS. That may not be perfect, but, I think its hard to brand that
390.
by dagenix 8y ago
My extremely unscientific test had PCRE2 being quite a bit slower - 1 second vs 0.2 seconds to search through 10k files - ie, slower, but still pretty darn fast.

More ›