feanaro

67 ms·

781.
by feanaro 6y ago
I should note that I do not necessarily imply in my comment that it would be Bitcoin that would bend the world to its will. Bitcoin is just one member of a larger cluster of cryptocurrencies. There are certainly some cryptocurrencies for wh
782.
by feanaro 6y ago
This is interesting, thank you!
783.
by feanaro 6y ago
Thinking about point 1 makes me wonder why no popular regex engines have an intersection (logical AND) operator. It seems like it could allow writing complex regexes in a much clearer way.
784.
by feanaro 6y ago
Why is it obvious that no amount of tech can solve it? Tech can also influence policy. If something is nearly impossible to stop, it likely won't be stopped. The policy will be changed instead.
785.
by feanaro 6y ago
What does it even mean to "drive" the economy? I've always thought that's such a vague phrase that can denote a lot of different objective, mathematical concepts, depending on the speaker.
786.
by feanaro 6y ago
Just add `-site:example.org` to your query.
787.
by feanaro 6y ago
> And surely, you participate in the same process, even if you don't feel as strongly about it - otherwise, why are you replying to strangers that you are unlikely to ever meet or speak to again? Why not? Do you not value discussion
788.
by feanaro 6y ago
> One of the defining traits of an introvert is avoiding conflict. Where do you get this idea from? The introversion/extraversion scale is commonly taken to represent whether (and to which extent) one is energized by solitude and dr
789.
by feanaro 6y ago
Yes, but random search for information is not always a bad thing. There's a time for exploration.
790.
by feanaro 6y ago
Which crate are you using for graph manipulation?
791.
by feanaro 6y ago
seccomp escapes are a thing and if you're inside a restrictive environment such as WASM, it is harder to achieve it.
792.
by feanaro 6y ago
> Using wasm in addition to seccomp strictly increases your attack surface. If you want to maximize security you would only use seccomp. Huh? How so?
793.
by feanaro 6y ago
Shopify is already a known seccomp user (for running Ruby in the mruby VM), so I think there's no reason to assume the WebAssembly runtime is not in a seccomp jail too.
794.
by feanaro 6y ago
You really shouldn't expect to be able to put up a public website and then get upset when people start connecting to it using a standard, open protocol to retrieve the information you're deliberately exposing to the world.
795.
by feanaro 6y ago
That depends entirely on the nature of the information that is contained in your server logs.
796.
by feanaro 6y ago
Why do you think changing the implementation to the server side will comply with the letter of the law? Or perhaps I should ask which law. GDPR doesn't differentiate between the client side or server side, you're simply not allowe
797.
by feanaro 6y ago
GDPR doesn't care if you're accomplishing the tracking with a cookie or using a different mechanism. You're not allowed to do it either way, unless the user has consented.
798.
by feanaro 6y ago
> IP addresses still count as Personally Identifiable Information under GDPR, so deriving an identifier from this for a use case such as analytics would likely require consent. Only if there is a bijection between the identifier and the
799.
by feanaro 6y ago
The secret would have to be non-static (not baked into the code).
800.
by feanaro 6y ago
> a Thunderbird Android email client. [...] I want a full featured "power user" IMAP-over-TLS + SMTP email client for Android that is also open source. Here it is: https://email.faircode.eu/ Unlike K-9, it is v
801.
by feanaro 6y ago
Yes, and perhaps it isn't so illogical.
802.
by feanaro 6y ago
You could accomplish this with client certs too, sure. A random secret is a simpler solution in many ways and accomplishes the same goal, though.
803.
by feanaro 6y ago
It's a benefit from the point of view of the user and for the openness of the web. We shouldn't rely on features exclusive to a single browser anyway.
804.
Workplace for Facebook shutting down its free plan(workplace.com)
1 points by feanaro 6y ago|0 comments
805.
by feanaro 6y ago
No, because CORS can only restrict which origins (scheme, domain, port combinations) are able to access the site's data. But you're not even connecting from a web origin but from localhost and you're trying to defend from al
806.
by feanaro 6y ago
The additional benefit of this approach is that you can then build your application such that it works with all standards-compatible browsers, such as Firefox.
807.
by feanaro 6y ago
Yes, there's a lot of work being done on more intelligent fuzzing. To throw some terms into the mix, there's coverage-guided fuzzing (which is now an old technique), concolic testing (which combines concrete execution with symboli
808.
by feanaro 6y ago
I think you're mixing two different concepts up here. Determinism in the context of fuzzing is related to the reproducibility of a program state. It's deterministic in the sense that all the inputs to the system are known and cont
809.
by feanaro 6y ago
The point is people have a right to financial privacy and cryptocurrencies are one possible way of achieving this. Therefore, cryptocurrencies are not a priori useless. I'm not even talking about Monero or the particularities of its cu
810.
by feanaro 6y ago
I feel like my point is getting ignored and I dislike this type of reasoning via "common sense, obvious, irrefutable narrative".

More ›