georgyo

23 ms·

331.
by georgyo 5y ago
I don't think the idea was suggesting that TOTP would be the _only_ method to get in. In fact the code just decides to accept or reject the incoming connection. The normal SSH auth flow would still need to be completed. So you would ne
332.
by georgyo 5y ago
Not who you are responding to, but maybe the slot machine effect is exactly why it does not work for me. To me loosing at the slot roll is actually fairly annoying. When I win, it is not a feeling of reward, but disappointment at myself. In
333.
by georgyo 5y ago
Amazon has a horrible review scam policy. It's okay by Amazon policy for sellers to pay people to remove their bad reviews. Being highly rated on Amazon is so valuable, that there are whole industries on making sure your reviews are hi
334.
by georgyo 5y ago
No, it is not. We have no way to know if the other general recieved the message, we can only know that the block chain has committed it. This is the same as a forum or a blog post. We can make a post, but we don't know if the our other
335.
by georgyo 5y ago
This is really splitting hairs, but even our eyes are interpretation of reality. The camera sensor does not record the wavelengths of lights it is capturing, only RGB values. We can only reproduce the picture in a way that is convincing to
336.
by georgyo 5y ago
Also not a lawyer, but my understanding: Lawyers, doctors, and therapists (also technically doctors) do not need to share and cannot be forced. They cannot be forced to share privileged information they may have. However, this does not prot
337.
by georgyo 5y ago
All password managers need access to the plaintext version of the password at some point... They need to put that into the login field. Chrome syncing across browsers does not mean they are being stored in plaintext. Your login is likely gi
338.
by georgyo 5y ago
Does this actually work and in use? I worked on a transparent MITM proxy, a proxy that is configured in the firewall not at the application; IE applications were unaware they were using a proxy. Simply adding the proxies CA key to the syste
339.
Gpg4win 4.0.0 Released(lists.wald.intevation.org)
1 points by georgyo 5y ago|0 comments
340.
by georgyo 5y ago
What is c/2? 1/c was because the distance between the lightbulb and the battery was 1 meter. m / m/s = s With c as the numerator, I don't even know what the units of that 2 would be? m/s²?
341.
by georgyo 5y ago
Reminds me when I was doing PCI compliance. A PCI question asks if all outbound traffic is explicitly authorized. I took that to mean getting a list of all the IPs for the APIs of services we hit, and even constructed that entire list excep
342.
by georgyo 5y ago
A lot of comments are talking about cheating, but there are so many "free" games that have launchers that auto start at boot. Several of my friends recommended genshin impact. It registered a background service that starts at boo
343.
by georgyo 5y ago
TCP/IP relies on your ISP routing you. They can disown you, taking you offline. Email is fairly dependent on DNS which is fairly dependent on a domain. Your TLD can deregister your domain, and domain hijacking is still a thing. Similar
344.
by georgyo 5y ago
You and the person you are communicating with must both not use iCloud backup. And since apple pushes the backup features pretty heavily, you can be reasonable sure that the person you are communicating is using backups. IE, you cannot use
345.
by georgyo 5y ago
It says Telegram has no message content. Isn't telegram not E2EE by default, instead required explicit steps to make a conversation encrypted? Either way looks like Signal wins by a lot. The size of it spot is so small, it seems almost
346.
by georgyo 5y ago
This is a horrible example that doesn't not apply cleanly. To fix it, let's change it from buy per bag to per gram you want to leave the store. So your canned soup costs at least 3 times more to leave the supermarket then in cost
347.
by georgyo 5y ago
Google Apps is likely a poor example of your point. All the people who were using the free tier were never forced to paid plans. I'm still using free tier Google Apps in multiple places, even though they haven't offered new free a
348.
by georgyo 5y ago
> Some teams are lucky enough for those environments to be different Many teams are lucky enough to have them separate, but unlucky because they are different. Effectively, they only really test when they go to prod.
349.
by georgyo 5y ago
This is a double edge sword. If there are issues with what are initially released and you do not patch you do not get those fixes. So they could add stuff but they definitely will fix stuff. Not updating could be more dangerous then updatin
350.
by georgyo 5y ago
> Most chat systems have done away with it. Slack has it, but that's about it. Slack, Discord, Matrix, FB Messenger, Instagram all have it to name a few. The only ones that don't have it are SMS replacement apps (Whatsapp, Sign
351.
by georgyo 5y ago
Npm is absolute hell. One thing that people do like about JavaScript is that you can import multiple versions of the same package. This solves that depA requires 1.0 and depB requires 2.0. However this makes auditing nearly impossible. Smal
352.
by georgyo 5y ago
There are no other tools that are as quite as paranoid as briar. There is a severe usability and practicality hit as a result. But if you have friends who interested and paranoid then it is quite worth it.
353.
by georgyo 5y ago
iPhone makes much of these concepts either impossible or extremely difficult. Namely, things cannot operate easily as a background service. Forcing the user to jump though many hoops to make it work. And since it is not an apple service. Th
354.
by georgyo 5y ago
If such a simple algorithm worked reliably then you would not want to advertise it because then it would not work any more.
355.
by georgyo 5y ago
What's interesting to me is that Amazon fights very hard if it is their items. I have only every gotten one package stolen, and it was Amazon store brand Presto paper towels, a value of ~$30. Because it was Amazon brand, I got transfer
356.
by georgyo 5y ago
I think when that starts to become a reality solutions will be discovered. But since it is provably a non-issue today because it requires upgrading from TCP, it's going to be low priority.
357.
by georgyo 5y ago
Unlike IPv4 IPv6, there isn't an authority name service to advertise both connectable addresses. This makes discovery for the end user an explicit action. If they cannot connect on V2, the method to discover v3 is almost definitely out
358.
by georgyo 5y ago
QUIC and HTTP3 are great technologies, but they are never likely to become the only protocol a service supports. For one thing, convection to a website via one of those protocols first, and then a header informs the client that it can recon
359.
by georgyo 5y ago
> It is better to have new versions of a standard than to extend a standard to include all possibilities. The equivalent would be making all TLS and SSL versions just extensions of the original SSL standard; a client talking to a server
360.
by georgyo 5y ago
After many years of systemd, I truly believe it has made Linux significantly better. Its strangler pattern is real, but the landscape is so much greener as a result. Very happy to see support for it on WSL2.

More ›