forty

23 ms·

421.
by forty 3y ago
Oh and for SSH, SSH CA and short lived SSH certificate is the only right way ^^ (I recommend Hashicorp Vault for this purpose. It also works for the host key)
422.
by forty 3y ago
Passkeys are not MFA, Passkeys are expected to be used as a single authentication factor.
423.
by forty 3y ago
Breaking backward compatibility would be another issue if devices cannot be upgraded, some kind of planned obsolescence where you need to throw away your perfectly working device for no good reasons. How does that work in practice though? D
424.
by forty 3y ago
See my answer to your sibling
425.
by forty 3y ago
I read that in le monde (in French, paywalled I think) https://www.lemonde.fr/les-decodeurs/article/2023/07/11/des-... They call the intermediate "dropshippers" (even in the French text)
426.
by forty 3y ago
Yeah I don't understand why it's not clear for everyone now that the only people benefiting from DRM are DRM makers. It never actually protected anything. The most outrageous example is HDCP, for which I believe one of the master
427.
by forty 3y ago
Sometimes it works. Recently I read that in France (where I live) there is this rule that all online sellers selling to customers must pay VAT even if abroad. Someone pulled a trick along the lines of: taking orders from customers then orde
428.
by forty 3y ago
Possible solution: use your hardware security key to login to your password manager and use the password manager for Passkey login. (Disclosure: I work for a PM which implements Passkeys)
429.
by forty 3y ago
I understand that this person is not happy that a feature that is designed to make billions of users safer, might make life annoying for the handful of people who are using a hardware security key when they use that feature :)
430.
by forty 3y ago
Yes but it has been expired for a while
431.
by forty 3y ago
I totally get that, but XAES-256-GCM/11 is in an even worse situation than XChachaPoly since none are NIST but XChachaPoly has at least a RFC ^^ EDIT: I'm wrong, ChachaPoly has an rfc, but not the X variant
432.
by forty 3y ago
Yes that was my thoughts as well, if you are concerned about speed and dropping AES rounds, you might as well do the same with Chacha and use Chacha20/8 (which I don't know if it "exists" but Salsa20/8 is a thing, u
433.
by forty 3y ago
How does it compare to XChachaPoly? I guess it's only useful when you are sure to have CPU support for AES and not having to deal with the annoyance of non constant time software implementations. I feel like XChachaPoly has the benefit
434.
by forty 3y ago
The issue is not resource depletion, but more how we f* the planet by producing / consuming too much (heating it and killing biodiversity in miscellaneous other ways).
435.
by forty 3y ago
Fast doesn't always mean good. For example in cryptography a fonction named fastCompare could be a non constant time comparison which is faster but not safe for cryptography :D (though you'd probably want to name it unsafeButFastC
436.
by forty 3y ago
I think it can go both ways: heavily regulate stuff built abroad to reduce their profit, heavily regulate stuff made locally so that standard is too high for foreign competition to join the market.
437.
by forty 3y ago
I'd consider the being the buying side of a market as "participating" in that market. Vehicles are definitely regulated in Europe (see that story with Volkswagen, an EU brand, cheating the regulation as an example [1]) [1] h
438.
by forty 3y ago
I'm not sure the French/Belgium split is that relevant for several reasons (correct me if I'm wrong, I'm French and don't want to wrongly appropriate Belgium culture): - most if not all of those characters are frenc
439.
by forty 3y ago
"people" don't know what is Emacs, vim, tr or urandom for any reasonable definition of "people". I work for a company that makes a password manager, and at least one clear benefit, versus copy/pasting from some
440.
by forty 3y ago
Well that's case even when you are not entering the park, because of all those laws you must follow at all times
441.
by forty 3y ago
My own conclusion is that the rule is not clear enough. Define "vehicle" and "in the park". Sure it's probably hard to think of all the use cases when you first write the rule. Simply iterate and add exceptions and
442.
by forty 3y ago
The problem with structural/duck typing is that words can mean several things. For example `.run`ning your duck is probably very different from `.run`ning your Thread. I think the Symbol is a way to signal "this is the dispose fun
443.
by forty 3y ago
It'd totally work if people gave a shit (but they don't, and prefer purchasing new shiny Samsung every other year anyway so it doesn't work indeed)
444.
by forty 3y ago
If this is a priority for you, you could vote with your wallet and purchase a fairphone next time your current phone dies. They provide fairly long software support and always had replaceable batteries.
445.
by forty 3y ago
I have always used stable on my servers and testing on my laptop but I recently switched to stable on the laptop with kernel from backports (I have fairly recent hardware). I have never been happier :) (to be fair, staging was fairly stable
446.
by forty 3y ago
What does running 100% on renewable mean? Do they have a separate electricity grid with dedicated production? Or does it just mean they just use the same mixed electricity as everyone else and pay a small premium to have their electricity c
447.
by forty 3y ago
This is really cool, thanks! I noticed that it's missing results from Distributed Code Jam, which happened 2 or 3 years only, and I'm partial for it since that's the only Codejam competition where I have ever managed to win a
448.
by forty 3y ago
Still, I don't have a very hard time imagining living alone (even though I'm in what we have just decided to consider "marriage" and we have kids), that seems a perfectly fine life to me, which would have also a center,
449.
by forty 3y ago
You can live together with someone, have kids and move with your kids without marriage, those things seem orthogonal to me.
450.
by forty 3y ago
I understand, that's kind of my feeling from the other point of view too. I guess it's complicated stuff, probably often very linked to spiritual and/or religious beliefs too, so it's probably hard to really understand h

More ›