dathinab

40 ms·

541.
by dathinab 1y ago
> "Privacy preserving age verification" is bullshit it is possible if you accept that it only needs to be good enough - it's fully okay if it can be deceived in all kinds of ways - verifying only once per account is okay,
542.
by dathinab 1y ago
Given how: - a lot of cease fires, reduction of Intel and similar happened to often come at maximal bad timing for the UK - various "money saving actions" seem to directly hurt US cyber defense - and military - and internal stabil
543.
by dathinab 1y ago
> I can’t imagine anyone at Meta, a company full of smart people in the bay area, actually wanted to work with people like that? You mean except their boss which has a long history with having problematic idea and just learned to not sa
544.
by dathinab 1y ago
I'm not recommending it. But it is the daily norm pretty much in any country people do want to frequently get into. Actually if I had to recommend anything it would be to stay very very very far away from any organized crime organizati
545.
by dathinab 1y ago
trying to become a EU member state citizen as a UK citizen is still much easier then for many other countries through often not on paper, but in practice, like the people which can throw rocks in your path do that less likely in the end it&
546.
by dathinab 1y ago
Well there had been system with very high rates of false positives for certain ethnicities which if wide scale deployed would in effect be like systematic harassment of this people. So it is a thing people which in general are okay with mas
547.
by dathinab 1y ago
This is how Germany ended up with a ton of organized crime. The organized crime organizations just mostly focus on crime which mainly hurts immigrants and people racist police personal might not see as German even if they have a passport, a
548.
by dathinab 1y ago
> It's a cliche, but if you have nothing to hide, and intend to protest peacefully, why are you covering your face? because who says the state (and the people acting for it, e.g. police) are always the good guys there is a VERY long
549.
by dathinab 1y ago
> The UK is quickly deploying surveillance state technology that people once decried China for. they always had been or at least tried, for decades by now, the only thing which had been holding them back was the EU frequently being like
550.
by dathinab 1y ago
that is just not true web is mostly based on standards which always have been supper lenient, messy und had massive gaps of unclearity mainly because it was more "lets somehow standarize what browsers already do" then anything els
551.
by dathinab 1y ago
> progressive enhancement possible no not at all extensible isn't the same as lenient having a Content-Type header where you can put in new media types (e.g. for images) once browsers support it is extensibility sniffing the media t
552.
by dathinab 1y ago
oh yes so true, but I would generalize it to "to flexible" - content type sniffing spawned a whole class of attacks, and should have been unnecessary - a ton of historic security issues where related to html parsing being too fle
553.
by dathinab 1y ago
> compliant with whatever ISO cert you're pursuing ISO cert compatibility audits are very different from a proper security audit. And weather they do anything to check if depends on which you high, many of the slightly more expensiv
554.
by dathinab 1y ago
> Security audits are just theater. It really depends on you auditor, audit approach and goals. There are many audit companies which have a "under the hand" reputation of not properly looking and being easy to convince that you
555.
by dathinab 1y ago
we are EU based and have besides other attorney customers. Cloud Act and more then just one or two cases of the US engaging in industry espionage against their allies(1) makes it a high legal liability to use more or less any service from a
556.
by dathinab 1y ago
yes auditors from a security audit
557.
by dathinab 1y ago
right ... wtf We could barely convince the reviewers on the last review that using GitHub is okay as long as we take some extra steps, I guess we should prepare to switch to a different platform with the next review.
558.
by dathinab 1y ago
the "the app tries to trick me into using the service of the company behind it so that they can consolidate the market" problem it's not quite new, as a dump example depending where in android contacts you click on a address
559.
by dathinab 1y ago
yeah, IMHO the design was messed up by a few very influential companies "over fitting" it for their company specific needs but I don't think attestation per-se is bad, if you are a employee from a company and they provide you
560.
by dathinab 1y ago
yes, that is embarrassing
561.
by dathinab 1y ago
sure, it being a 6 digit code which has potential for social engineering can be an issue like similar to if you get a "your login" yes/no prompt on a authentication app, but a bit less easy to social engineer but a in turn al
562.
by dathinab 1y ago
but there is a huge difference between: 1) racing, and normal motorcycle use -- like the kind of accidents you run into commonly differ hugely 2) you being able to afford a end of the line product or being very budged constrained and this a
563.
by dathinab 1y ago
but the things is there is a difference between 1) a parser which can handle both (based on detecting both and then switches the parsing depending on it) 2) a parser which is made for YAML and happens to be able to parse JSON
564.
by dathinab 1y ago
people stuck with sub-par tooling (weather that's because of laziness, better tooling not being available/integrated, not know, not being usable or them being stuck on a ideological delusion where they insist on not using it doesn
565.
by dathinab 1y ago
> Especially with compile-time checking. no compile time checking and integration tests in general sqlx only provides the most minimal string based query building so you can easily run into annoying edge cases you forgot to test, so if y
566.
by dathinab 1y ago
> dynamic query building it's not (really) addressed by sqlx (intentionally), in the same way most ORM features are not addressed but to some degree this is what is so nice about sqlx it mainly(1) provides the basic SQL functionalit
567.
by dathinab 1y ago
interesting > "Don't do this" suggests that lead water pipes into the home were common enough to need a warning against. sadly, they still are today sometimes, in areas with a lot of 125+year old infrastructure :/
568.
by dathinab 1y ago
also lead flavoring lead tastes sweet, sugar wasn't cheaply & widely available, honey is expensive etc. and knowledge about lead poisoning was not really a think AFIK at the same time lead pipes tend to gain a crust of chalk over t
569.
by dathinab 1y ago
> And by Powerpoint, Jeff I believe refers to the concept of slides, and not the tool itself. pretty sure about that but also every time I have to use PowerPoint instead of some other tools for presentations I'm surprised how bad it
570.
by dathinab 1y ago
the problem is - presentations inherently have a friction between them being fluent and them being detailed (to some degree that is why they work so well for sells, they make it easy to gloss over the parts you don't want attention on

More ›