davb

35 ms·

301.
by davb 11y ago
Absolutely. I'd trade what we're stuck with today for simple, self-hosted images and links (no trackers, third party scripts, creepiness) in a heartbeat. This is advertising done right.
302.
by davb 11y ago
This technique makes certificate pinning that much more important. I assume that it would just lead to cert mismatch errors on clients with pinned certificates, but in almost call cases that would be preferable to being MITM'd.
303.
by davb 11y ago
It's also worth noting that many clients now have LibOTR (Off The Record - end-to-end encryption) plugins available. For group chat, the best option seems to be a TLS only server and an agreement with all parties to avoid publishing lo
304.
by davb 11y ago
Something like the Accept header, listing capabilities. Or something like how Android handles capabilities in manifests.
305.
by davb 11y ago
Honestly, it sounds like the commenter was defending some crappy engineering decisions. I'm not really comfortable that YT/Google were, via this guy, asking for special consideration (from an open source project) but only willing
306.
by davb 11y ago
> Consent shouldn't necessarily be regarded as transitive I think you're on to something with this statement. I'd feel much better if selling/transferring customer data was disallowed with explicit consent from the us
307.
by davb 11y ago
This is rich, being reported by Engadget. I've reached out to them numerous times to let them know their ad networks try to redirect Chrome (Android) users to Play Store apps. It doesn't happen all the time, and it doesn't ha
308.
by davb 11y ago
I opened this on my phone, and just seen some links (MozOpenHand Links). I had no idea there was supposed to be more content here. The actual content is hidden for mobile UAs (I have no idea why, but it's very confusing). I'd have
309.
by davb 11y ago
True but it's much easier for a malicious player to set up a VPN service selling cheap a anonymity as a way to gather MITM targets than it is to set up an ISP or transit provider.
310.
by davb 11y ago
As are some VPNs. It's concerning that so many people route all their traffic (when connected) over some unknown third parties network. Default gateway and server pushed DNS. Only HSTS and certificate pinning would prevent their traffi
311.
by davb 11y ago
Internet access via IFE (in-flight entertainment) systems and WiFi has been a thing for a good while now. There's no new attack vector or failure mode in that respect.
312.
by davb 11y ago
I've come to take the BBC's tech reporting with a pinch of salt.
313.
by davb 11y ago
I do like Firefox on Android but I won't use it for a single reason - the scroll physics doesn't match native app scroll physics. The scroll acceleration or easing is "off", compared to Chrome on Android and native widge
314.
by davb 11y ago
The 3B2 computer mentioned in the story was around in the mid-1980s. Git's initial release was in 2005.
315.
by davb 11y ago
Could you please clarify if the face recognition is done on-device or if the photo (or some subset of data) is uploaded to Facebook's servers in order to analyse the photos? Thanks.
316.
by davb 11y ago
And terrorism is such a broad term these days, especially with regards to "cyber-terrorism".
317.
by davb 11y ago
I think this is a bit like Apple using Samsung SoCs. The consumer-facing parts of the business hate each other; the B2B units have a more reasonable view of each other.
318.
by davb 11y ago
In this UK (at least), this is known as "card clash". You can't select which card is used. I'm not sure what the EMV contactless specification actually says, but anecdotally terminals will either fail to process the tran
319.
by davb 11y ago
This is the case in the UK too. When it became more difficult to use cloned magstripe-only cards in the UK, banks relied more heavily on behavioural profiling and risk analysis ("has this card been used in this country in the past?&quo
320.
by davb 11y ago
Yeah. And if you do happen to enter you PIN, request cash then just walk away, the machine will furiously beep for a short time then pull the card back in ("swallow the card"). You've then got to request a replacement card fr
321.
by davb 11y ago
It is indeed called EMV here, it's just not marketed as such. EMV stands for Europay, Mastercard and Visa - the original consortium who agreed the smartcard payment standard. In the UK it's marketed as "Chip and PIN", bu
322.
by davb 11y ago
1) I agree - I think this is a regional thing. In the UK, ATMs almost always lock the card in place (typical non-corner-store ones take the entire card into the machine). 2) In the UK, most machines make you take the card out before dispens
323.
by davb 11y ago
> The first transaction on each reader and random transactions every 20-50$ (and all transactions above a $20 limit) will require chip+PIN verification Not necessarily. In the UK (at least, at the banks where my fiancée and I hold accoun
324.
by davb 11y ago
How does it handle VAT MOSS on digital goods in the EU? The new rules state that sellers must charge VAT at the rate of the buyer's country and must record evidence of the buyer's location. Even businesses under the VAT threshold
325.
by davb 11y ago
If they hashed PASSWORD + USER_SPECIFIC_SALT + SITE_SALT, storing USER_SPECIFIC_SALT in the user table and SITE_SALT in the application config, both data and site config would have to be leaked.
326.
by davb 11y ago
I remember these! A quick Google yields the following, with an example of the reader mechanism http://www.telephonecardcollector.com/optical-cardphone-payp... A touch of nostalgia there.
327.
by davb 11y ago
Feel free to reach out if you need a little help fixing the mobile usability issues - I'm happy to give some advice. I'm not a designer by trade but there's nothing huge to fix there - a few small tweaks to the existing desig
328.
by davb 11y ago
This site is really difficult to read on mobile devices (profile photo overlaps first paragraph of text, paragraphs are very narrow due to large padding/margins). A couple of little fixes would make it a much more comfortable read.
329.
You cannot start a tweet with “D. Tusk”(twitter.com)
211 points by davb 11y ago|87 comments
330.
by davb 11y ago
Yeah, using OpenVPN allows your client and server to reside on the same subnet, which I presume is necessary for Steam In-Home Streaming.

More ›