hobobaggins

8 ms·

61.
by hobobaggins 2y ago
This is cool. You probably have to extract and transport in (SD card?) the TOTP secret, since I imagine a a QR code reader built isn't built-in.
62.
by hobobaggins 2y ago
> Why It's Hard to Get Hired Despite Glowing Jobs Reports .. perhaps because jobs numbers are now partisan and politicized, and no longer reflect reality.
63.
by hobobaggins 2y ago
I just re-read your post and caught it - thank you, made my evening!
64.
by hobobaggins 2y ago
We use Userify which manages multiple user logins (via SSH) and sudo usage.. there are definitely many, many use cases for teams logging into remote servers, and most security frameworks (PCI-DSS, HIPAA, NIST, ISO 27000) require separate cr
65.
by hobobaggins 3y ago
I for one welcome our new Skynet into existence.
66.
by hobobaggins 3y ago
why is that a hole?
67.
by hobobaggins 3y ago
> you can't force users to use a decently strong unique password unique is the key word. you can certainly force users to use a decently strong password, but not keep them from using the same password at every other website.
68.
by hobobaggins 3y ago
(not to be overly pedantic, but you probably meant pore, not pour: https://www.merriam-webster.com/grammar/pore-over-vs-pour-ov... )
69.
by hobobaggins 3y ago
Most people will have to sync their passwords (generally strong and unique, given that it's for github) to the same device where their MFA token is stored, rendering it (almost) completely moot, but at a significantly higher risk of pe
70.
by hobobaggins 3y ago
"increases user privacy and security" You really think that? Tap to pay cards are easily replaced (revoked) and at no cost to me at all. The only way to revoke my palm is too awful to contemplate!
71.
by hobobaggins 3y ago
Someone better tell that to Elon Musk, Steve Jobs, Sean Parker, and Jack Dorsey.
72.
by hobobaggins 3y ago
It's important to remember that SSE won't automatically reconnect for quite a few HTTP status codes (i.e., upstream proxy outages like 50x error codes)
73.
by hobobaggins 3y ago
Sometimes this is to scope logins to single tabs for security reasons (I think that's why Userify does it that way). It's annoying but for infrequently used apps, no worse than getting logged out every three minutes.
74.
by hobobaggins 3y ago
Yes, but the limit is different (usually much higher) and negotiated, up to maximum SETTINGS_MAX_CONCURRENT_STREAMS (which is fixed at 100 in Chrome, and apparently less in IOS/Safari.)
75.
by hobobaggins 3y ago
There are at least two polyfills for it, but I think most of them require at least IE10. (but IE6 has so many other issues that probably 90% of your other JS won't work anyway... so glad it's gone!)
76.
by hobobaggins 3y ago
r3labs/sse seems pretty good, but doesn't seem to handle backpressure or defend against slow-client attacks. (actually, I haven't seen any libs that do.. maybe this isn't a problem for anyone?) You could roll your own, s
77.
by hobobaggins 3y ago
Oh, I thought you were talking about the establishments themselves, sorry!
78.
by hobobaggins 3y ago
Tesla is likely making good cars because the CEO is 'problematic'
79.
by hobobaggins 3y ago
They're legit, and they make big tips when they work hard.
80.
by hobobaggins 3y ago
Also helps keep prices in line. Perhaps a local car wash owner wants to maintain their monopoly (that was actually alluded to, but not greatly discussed, in the article!)
81.
by hobobaggins 3y ago
Depreciation is available for any company that purchases equipment; the "unique" thing as described in that article is simply that most of the value for car washes is in the equipment, so depreciation strategies are very important
82.
by hobobaggins 3y ago
The technical implementation is indeed impressive that it operates more-or-less within constant time, but probably very few use cases actually fit that narrow window, so this technical strength is moot when it comes to actual usage. Since e
83.
by hobobaggins 3y ago
A magnetic pulse induces (Faraday effect) a powerful (high-voltage) electrical pulse in exposed wiring, effectively generating its own power. This doesn't have to be a wire in a coil, like in a motor, transformer, or generator, but can
84.
by hobobaggins 3y ago
So why not just throw everyone's rights out and just start searching their homes for evidence of crimes, or at least something that can be prosecuted because it might be a crime? We'll surely get a significant amount of people who
85.
by hobobaggins 3y ago
Clearly we need more money laundering controls then. (/s)
86.
by hobobaggins 3y ago
> Privacy is not an absolute right. This is meaningless.
87.
by hobobaggins 3y ago
> Just ditch it and let anyone move money around with no controls. I'm sure that would work out fine. It did, for thousands of years. The only thing that's new is the ability to track every penny and person from cradle to grave
88.
by hobobaggins 3y ago
Assuming that the Google Streetview didn't just have a different lens that time (it's pretty washed out and on the edge of its resolution), let's assume that it was actually gone. It's very difficult to imagine someone k
89.
by hobobaggins 3y ago
It's not really a bug. It's a design decision. There's no clear solution for it from an encryption perspective without a big tradeoffs (like requiring all participants to be online at the same time). Besides, the larger the g
90.
by hobobaggins 3y ago
Signal's vaunted double-ratchet encrypted groups have a severe weakness in the key exchange where the server can add itself as a participant. Granted, this is pretty hard to solve when participants come online and offline at different

More ›