hlandau

12 ms·

91.
by hlandau 3y ago
As a 16:9 refusenik/16:10 holdout it's pretty disappointing how, with the possible exception of LCD backlights, the 16:10 display panel offering remains basically the same as it was in 2006, and hasn't inherited any of the up
92.
by hlandau 3y ago
Small update: I've just written a blogpost with my thoughts on the incident. https://www.devever.net/~hl/xmpp-incident I usually brood on blogposts for days before publishing them since I care a lot about getting
93.
Mitigating the Hetzner/Linode XMPP.ru MitM interception incident(devever.net)
341 points by hlandau 3y ago|145 comments
94.
by hlandau 3y ago
Yeah. I used to be 100% in on DANE and against CAs. I'm still 100% for DANE but I now think DANE using existing CAs is the better option in many cases because it means things get CT logged. We don't have a DNSSEC transparency situ
95.
by hlandau 3y ago
>Using CAA is a good idea in general, but would it help in this case? The attacker would just request the exact cert configuration that is permitted by CAA. Maybe this helps if you can strengthen one validation method? Author of ACME-CAA
96.
Friday Factorio Facts #381 – Space Platforms(factorio.com)
160 points by hlandau 3y ago|38 comments
97.
by hlandau 3y ago
In what way is this a standard? Where can I read the specification?
98.
OpenSSL Announces OpenSSL 3.2 Alpha 1(openssl.org)
12 points by hlandau 3y ago|0 comments
99.
by hlandau 3y ago
There is a comment here by the author of this patch which is absolutely extraordinary: https://lore.kernel.org/lkml/20230731083806.453036-6-hch@lst... "Given that symbol_get was only ever inteded for tightly coope
100.
by hlandau 3y ago
>"It can’t be that an Ed Sheeran stream is worth exactly the same as a stream of rain falling on the roof," Warner Music Group CEO, Robert Kyncl told Music Business Worldwide earlier this year. Why not?
101.
by hlandau 3y ago
>My web searches around that are eerily silent, and the best technical explanations I could glean tend to show that measured boot and discrete TPMs are fundamentally incompatible. Indeed. It is actually remarkable how the TPM implementat
102.
by hlandau 3y ago
Sure, this is fine.
103.
by hlandau 3y ago
This article is correct that having a general-purpose owner-controlled programmable secure enclave is highly desirable. The design where each program which runs receives a unique cryptographic identity derived from a fused key is also somet
104.
by hlandau 3y ago
Worth pointing out that t.co has always been an instance of an annoying and seemingly unjustified practice I named "nonsemantic redirect". Rather than legitimately redirecting using an HTTP Location header, it instead is an HTML p
105.
by hlandau 3y ago
Except using NixOS without flakes doesn't require this manual enumeration so it's clearly not a requirement, but a design choice. Nothing is ultimately pure since you're running on top of a kernel which can affect computation
106.
by hlandau 3y ago
To date I've paid no attention to Flakes because whenever I look at them, they appear to require me to manually list all target architectures in the Flakes file, which is ridiculous. I'm not going to make the code I publish needle
107.
by hlandau 3y ago
I always get surprised by how many sensor products offer temperature and humidity but not pressure, considering that combined MEMS temperature/humidity/pressure chips are available. Having a sensor which can do temperature/hu
108.
Why even let users set their own passwords?(devever.net)
272 points by hlandau 3y ago|374 comments
109.
by hlandau 3y ago
Out of curiosity I actually looked up the details on this scene a while back. There is some actual real model of circuit breaker this scene was based on; I think someone dug up the model number, but I can't remember it now. It turns ou
110.
by hlandau 3y ago
This is called 'blackstart', particularly in the energy sector. My earliest exposure to this concept as a child was watching the film Jurassic Park. As someone fascinated by systems I found the idea of having to bring the whole sy
111.
by hlandau 3y ago
Is OrioleDB interested in committing to a stable on-disk format removing the need for an upgrade process between Postgres major versions? Seems like an opportunity to solve this problem.
112.
by hlandau 3y ago
Another design to accomplish this same goal seems to be called the "safety shoe" [1]. I believe this is a horizontal bar placed under the open door which moves the airbridge down if it gets too close. https://www.youtub
113.
by hlandau 3y ago
https://www.devever.net/~hl/ Some favourites: - https://www.devever.net/~hl/ruthlessness - Computers are an inherently oppressive technology - https://www.devever.net/~hl/mild
114.
by hlandau 3y ago
I remember an extension like this for Firefox called Outfoxed.
115.
The problem with federated web apps(devever.net)
128 points by hlandau 3y ago|170 comments
116.
by hlandau 3y ago
Author here. I think the problem is the notion of services shipping code. If you get the endpoint software from a different entity to the communications provider, that's the first step to fixing this. XMPP+OMEMO etc. would be examples
117.
Web-based cryptography is snake oil(devever.net)
111 points by hlandau 3y ago|102 comments
118.
by hlandau 3y ago
Worth noting it is possible to embed decryption keys inside .pcapng files, using editcap --inject-secrets.
119.
by hlandau 3y ago
Can you explain how the root of trust is configured? Is it efuses or some sort of onboard mutable nonvolatile storage? If I buy a system with one of these chips in, am I likely to be able to set my own root of trust, or will the OEM have ir
120.
by hlandau 3y ago
The Unicode space used to be 31-bit. UTF-8 defined 5 and 6-byte encoding sequences for this reason. When UCS-2 had to be extended to create UTF-16, the solution chosen effectively limited things to a 21-bit space. Unicode was then redefined

More ›