hannob

19 ms·

211.
by hannob 3y ago
That is certainly true, but it's not a full explanation. I recently was at an information event from our local electricity provider about wind energy projects. And there are those people... There was a conversation going on like: &quot
212.
by hannob 3y ago
The reasons this site recommends disabling certain algorithms are, to say the least, very specualtive. Just to give two examples: It recommends disabling diffie hellman with 2048 bit. There isn't even the slightest evidence that any at
213.
by hannob 3y ago
This nonsense comes up every now and then. The facts are: * The risk on any modern phone is close to nonexistent. By default they only charge. You'd need a zero day exploit in the charging function. * There are no reports of such attac
214.
by hannob 3y ago
That's under the assumption you'll have a fusion only grid. But fusion won't exist in a vacuum. It will exist within the energy system in 20+ years. That will in all likelyhood be dominated by wind and solar, yet with another
215.
by hannob 3y ago
> Renewables have currently very difficult problems to solve with storage. And fusion does nothing to solve these problems. Even in an optimistic scenario, what you'd end up with fusion is a very expensive power plant that can gener
216.
by hannob 3y ago
It may come as a surprise to people (it certainly was a surprise to me), but actually there was a quite substantial renewable ammonia industry in the past in some countries, e.g. in Iceland and Norway. It eventually couldn't compete ag
217.
by hannob 3y ago
You seem to confuse "physics" with "moral arguments". They are profoundly different.
218.
by hannob 3y ago
Except very high CO2 emissions, but those are of course harmless </sarcasm>
219.
by hannob 3y ago
Whether countries use mostly landfills or incinerators depends pretty much on one variable: Population density. The US has plenty of space for landfills. Japan has very little space. But ultimately, landfills and incinerators are both bad s
220.
by hannob 3y ago
Here's a script I wrote for myself: https://github.com/hannob/rpter It gives a summary of reports, and details for failures. Not super sophisticated, but should be simple enough to extend. Also parses SMTP-TLS rep
221.
The Super-Greenhouse-Gas from Fertilizer, Nylon, and Vitamin B3 Production(industrydecarbonization.com)
2 points by hannob 3y ago|0 comments
222.
by hannob 3y ago
This is the problem: "Service-level contracts and governmental requirements mean that a critical CVE needs to be addressed in short order, so non-critical bugs that get marked that way can cause real problems." You are right what
223.
by hannob 3y ago
I mean - if you separate your html from your assets security wise, that naturally means they need to be on different hosts, as you cannot really reroute requests before TLS decryption based on paths or any other indicator. But the motivatio
224.
by hannob 3y ago
Is the idea here that saving the data from the cookies will speedup things, because requests become smaller? Or does it have some impact on caching or something else that I am not considering right now? I would expect that unless you have e
225.
by hannob 3y ago
Here's how to reduce roundtrips: * Support TLS 1.3 + HTTP/2 or HTTP/3. * Reduce the number of different hosts that you connect to. The optimal number is 1. That's it.
226.
by hannob 3y ago
I've heard physicists raise opinions like yours (i.e. QC will never be built for practical reasons), but I also hear ones that say the opposite. I'd err on the side of caution. As for your conspiracy: The conclusion of that would
227.
by hannob 3y ago
It's definitely a case for huge alarm. Maybe not the vulns. But the interaction with a security researcher. Like this part: "Bluesky has responded to only one of these reports, one time, 4 days after submission, saying "We ap
228.
by hannob 3y ago
FWIW it is not recommended to use asan+co for release builds. These are designed as debugging tools, if you use them in production builds they may actually open up new bugs. See also: https://www.openwall.com/lists/os
229.
by hannob 3y ago
I think he is talking about NSO group, or whoever sold it to them. However, obviously that's unlikely to get revealed.
230.
by hannob 3y ago
Also interesting: Shortly after there is another commit that is related to oss-fuzz: https://github.com/webmproject/libwebp/commit/95ea5226c87044... This could mean Google optimized their fuzzers for libwebp
231.
by hannob 3y ago
The problem is not trying it, the problem is painting it as a solution for continued fossil fuel exploration. If we could agree that carbon capture is a small part of the solution, direct air capture an even smaller part, and the primary go
232.
by hannob 3y ago
No. You're probably confusing carbon capture in general (which already exists in some quantities, although still small to what would be meaningful) with DAC. For the latter, Climeworks is kinda the leader, which is an independent start
233.
When URL parsers disagree(canva.dev)
156 points by hannob 3y ago|56 comments
234.
by hannob 3y ago
That's great for the 0,1% of users who will do that. As said: I'm all for it. But the problem is the other 99,9%.
235.
by hannob 3y ago
I am all for alternative free software firmware. But I don't think it adresses IoT security in any meaningful way.
236.
by hannob 3y ago
> The FCC recently issued a Notice of Proposed Rulemaking [2] for a cybersecurity labeling program for connected devices. That appears to me to be the wrong way to go about this, and it has specifically to do with how IoT security is a p
237.
by hannob 3y ago
> With the recent advances of turning CO2 into other substances The "advances" are relatively modest efficiency improvements, but they don't change fundamental realities like the laws of thermodynamics. "Unburning CO2
238.
by hannob 3y ago
I'm no expert in art or antiquities. The only reason I even know the name "Sotheby's" is because it was mentioned in a John Oliver piece about stolen antiquities. So as a layman I can tell you: The only reason I know Sot
239.
How to make Plastics without Fossil Fuels(industrydecarbonization.com)
1 points by hannob 3y ago|0 comments
240.
by hannob 3y ago
Not surprised. A few years ago a team of researchers tried to use a feature attribute flag in BGP. Their experiment caused an important BGP software to crash. The BGP community reacted by thanking the researchers for uncovering that flaw an

More ›