gzread

12 ms·

1. 301.▲
   by gzread 7mo ago

   start a small web directory for your language!
2. 302.▲
   by gzread 7mo ago

   Same here, but I'm considering adding it. I already have HTML, so it can't be that hard to add another format. More onerous is needing to write a blog post at least once a week. And woe betide thee whose website isn't a blog.
3. 303.▲
   by gzread 7mo ago

   Shouldn't be a public company, at least. You can squander your own money as you like.
4. 304.▲
   by gzread 7mo ago

   That was the point - it's absurd as a manual process, and forces automation.
5. 305.▲
   by gzread 7mo ago

   You can account a transaction that's been placed but not fulfilled. I think when someone orders $15m of goods, you can immediately book $15m accounts receivable (asset) and $15m goods owed (liability) as soon as you have the expectatio
6. 306.▲
   by gzread 7mo ago

   I saw this as a serious proposal somewhere but I can't remember where. There are exchanges out there that run continuously but with delayed information feeds.
7. 307.▲
   by gzread 7mo ago

   but you just don't sell and wait until the liquidity comes in and prices return to normal at 9am, no?
8. 308.▲
   by gzread 7mo ago

   You'd be very surprised. It's more likely to be a collection of internet trolls than to be organized crime
9. 309.▲
   by gzread 7mo ago

   Do you agree that we don't need HTTPS because phishing is the most common HTTP attack, not MITM?
10. 310.▲
    by gzread 7mo ago

    when you go before a jury of your peers for having illegal solar panels on your roof, what will they say?
11. 311.▲
    by gzread 7mo ago

    I was taught to give them a quick rinse but let the dishwasher make them sparkly clean. This avoids clogging the dishwasher's pipes with excessive food waste. Certainly any piece of food you could pick up between your fingers must be s
12. 312.▲
    by gzread 7mo ago

    I don't remember. It was years ago.
13. 313.▲
    by gzread 7mo ago

    Yes. Can you really invest only 50k into OpenAI? That seems low to me. However, some small companies are okay with small investments. You have to negotiate privately, that's just how it is. If it was a simple, uniform process, they&#
14. 314.▲
    by gzread 7mo ago

    Solves part of it. They still control your HTTP and can make LE issue a certificate for you. So actually solves nothing. Unless you had a CAA record saying only LE certs from your account are valid. And maybe you want that record to be au
15. 315.▲
    by gzread 7mo ago

    It's how you detect something wrong in the CT logs, not just a routine certificate renewal
16. 316.▲
    by gzread 7mo ago

    You requested: > real world compromises of major sites that don't use DNSSEC? Without any other changes to this infrastructure DNSSEC by itself wouldn't have prevented this, but it could have been combined with something else l
17. 317.▲
    by gzread 7mo ago

    So a whole alternative DNS tree just for verifying domain ownership to CAs? Or would it be the same tree? If it's the same tree why not extend it to all records, all the time?
18. 318.▲
    by gzread 7mo ago

    I wonder if this is a curse of popularity. Presumably the documentation is stable and good because the software is also stable, and well-specified with one way to do each thing rather than five competing projects.
19. 319.▲
    by gzread 7mo ago

    > Then bcachefs came and ... appears to have gone nowhere AFAICT. I heard the developer got sidetracked into writing himself an AI girlfriend. (Not sarcasm)
20. 320.▲
    by gzread 7mo ago

    Basically reinventing DNSSEC?
21. 321.▲
    by gzread 7mo ago

    Here's one: https://notes.valdikss.org.ru/jabber.ru-mitm/
22. 322.▲
    by gzread 7mo ago

    To detect the misissuance you would run something that compares the certs requested by the server with the certs actually issued and included in the log. If you don't care (and most people don't) then you don't detect it.
23. 323.▲
    by gzread 7mo ago

    This happened: https://notes.valdikss.org.ru/jabber.ru-mitm/
24. 324.▲
    by gzread 7mo ago

    You don't have to expire your DNSSEC keys. You have the option to, or not to. DNSSEC seems extremely flexible about how you manage your keys.
25. 325.▲
    by gzread 7mo ago

    Actually, does it? Yes, the obvious upside when I type in slack.com instead of 123.45.56.67 is very good. Does this same upside apply to addresses I don't type in? What's actually the advantage of addressing one of foobarcorp&#x27
26. 326.▲
    by gzread 7mo ago

    DNSSEC is to DNS what HTTPS is to HTTP, so most of these kinds of questions can be answered by asking yourself the same questions about HTTPS.
27. 327.▲
    by gzread 7mo ago

    To be clear, your argument is that DNSSEC is bad because people don't use it?
28. 328.▲
    by gzread 7mo ago

    I'll rephrase the argument to make it more clear for you: Phishing attacks are far more common than HTTP MITM, so we don't need protection against HTTP MITM. If you think this conclusion doesn't follow from this premise, then
29. 329.▲
    by gzread 7mo ago

    Aren't you supposed to keep the old and new KSK records for a while? Sorry if it's a dumb question since I don't regularly do this myself. Worst case you can put the old records back until you figure out how to generate the n
30. 330.▲
    by gzread 7mo ago

    The question was "can you find me some reputable cryptographers that support your position?" which is just ad hominem and should be ignored as such, except it does indicate that the person asking it doesn't have any better ar