dcrazy

13 ms·

331.
by dcrazy 6mo ago
Shell extensions are the single most common cause of Explorer crashes according to Raymond Chen. When you realized that Mac OS X didn’t have an equivalent API, did you perhaps consider that it was for a good reason and that you should redes
332.
by dcrazy 7mo ago
Sorry, attestation is the goalpost. The community wants certainty that the package was published by a human with authority, and not just by someone who had access to an authority’s private keys. That is what distinguishes attestation from
333.
by dcrazy 7mo ago
When designing a system for secure attestation, end-user programmability is not a feature. It would not be an advantage for your front door lock to be infinitely reprogrammable. It’s just a liability.
334.
by dcrazy 7mo ago
The easiest approach is a provider-issued hardware dongle like a SecurID or Yubikey. Lack of end-user programmability is a feature, not a bug.
335.
by dcrazy 7mo ago
The attacker installed a RAT on the contributor’s machine, so if they had configured TOTP or saved the recovery codes anywhere on that machine, the attacker could defeat 2FA.
336.
by dcrazy 7mo ago
Back in the Mac OS X public beta days (and maybe even into 10.0–10.1?), apps that are nowadays shoved into the menu at used to live in the Dock. I kinda think I prefer that.
337.
by dcrazy 7mo ago
I remember MMC snap-ins.
338.
by dcrazy 7mo ago
It’s far from a complete solution, but to mitigate this specific avenue of supply chain compromise, couldn’t Github/npm issue single-purpose physical hardware tokens and allow projects (or even mandate, for the most popular ones) maint
339.
by dcrazy 7mo ago
Thank you for finding that. That seems like a much more plausible comparison. Edit: wait, that’s the M5 Max. What about the stock M5?
340.
by dcrazy 7mo ago
Wasn’t PowerPC cut down from POWER?
341.
by dcrazy 7mo ago
The roads around Apple Park are usually partially or fully closed during WWDC. It’s just traffic management.
342.
by dcrazy 7mo ago
What’s “bona fide news?” Does it include the World Socialist Web Site? MS NOW? Newsmax? Russia Today? Generally it’s not advisable for the government to have the power to ban political communication and decide on a case-by-case basis what
343.
by dcrazy 7mo ago
The 40-odd-hour result was only achieved by loading a webpage, lowering the brightness to 150 nits, and doing absolutely nothing else with the device. That’s not reflective of real-world laptop usage, though it is a common trick for devices
344.
by dcrazy 7mo ago
I’m curious what you find “backwards” about native tooling. I know the sentiment is common, and there must be some truth to it. But my partner works in web infra and frequently laments her inability to trace a single request through her c
345.
by dcrazy 7mo ago
SQL Server started as a source fork of Sybase.
346.
by dcrazy 7mo ago
Even modern games replace distant geometry with billboards. Simplygon is one middleware that does this. The Remedy folks talked about how Alan Wake 2 used it at GDC last year or the year before.
347.
by dcrazy 7mo ago
The link or the footnote itself doesn’t render for you? It renders on mobile Safari, just by scrolling to the bottom of the page.
348.
by dcrazy 7mo ago
Footnote 2.
349.
by dcrazy 7mo ago
FYI, the article incorrectly claims that SIP just controls write access to /. It does way more than that.
350.
by dcrazy 7mo ago
I get it, but also, it’s pretty amazing that it only takes 10 seconds to remotely activate and stream live video from a camera installed in a cat house placed on a sidewalk 6,000 miles away.
351.
by dcrazy 7mo ago
It is absolutely relevant. It is completely within the realm of feasibility that a foreign nation state would pressure a manufacturer in their jurisdiction to include a backdoor, or simply insert it themselves. Routers are in every home and
352.
by dcrazy 7mo ago
This is the problem with erosion of norms. We’ve all known for decades that consumer routers have shit security. We’ve all known about the risk of implants or intentional backdoors in the supply chain. And now when the FCC appears to be fin
353.
by dcrazy 7mo ago
I encourage you to listen to the Song Exploder podcast to learn about how songwriters write songs.
354.
by dcrazy 7mo ago
The meme of “you aren’t big enough to need Kubernetes” doesn’t apply to megabanks like American Express.
355.
by dcrazy 7mo ago
You speak so confidently, yet it appears you’ve never gotten a text asking you to approve or deny a charge that you are performing.
356.
by dcrazy 7mo ago
Presumably NV Energy values having the data centers as customers more than they value Liberty Utilities.
357.
by dcrazy 7mo ago
Yes, generations of Mac and Windows programmers have used GUIs to create their GUIs. Visual Basic, MFC + App Studio, .NET + WinForms, Interface Builder…
358.
by dcrazy 7mo ago
You can fail to maintain a wiki written in any software. The value of Confluence is when everyone uses it, so there’s one place to find info to answer questions like “why the hell did we do it this way?”
359.
by dcrazy 7mo ago
The court has not sided with anyone yet. The NLRB sided with the employee and has argued her case in court.
360.
by dcrazy 7mo ago
There’s enough of a difference, IMO, between campaigning against your organization’s plans and venting to your coworkers about the way in which the CEO delivered said plans.

More ›