hsivonen

37 ms·

331.
by hsivonen 10y ago
If a site with an EV cert is being spoofed using a similar-looking domain name and a DV cert, how realistically is the user going to remember that the real site is supposed to have an EV cert? (Besides just maybe remembering it for Paypal i
332.
by hsivonen 10y ago
> It's also possible it just hasn't made it into the release yet, The proposal was just made, so you shouldn't expect it to be reflected in code just yet.
333.
by hsivonen 10y ago
Download as in "cache this title within this app for viewing in an environment where Internet connectivity doesn't work well yet" is very different from download as in "here's an .mp4/.webm file for you to hold
334.
by hsivonen 10y ago
> Thankfully, the community had more of a backbone back then. Back then there wasn't Chrome to switch to. Users disliked IE much more back then than they dislike Chrome today.
335.
by hsivonen 10y ago
If you don't want Widevine, you can simply uncheck the “Play DRM content” checkbox in Mozilla-distributed Firefox, and the CDM doesn’t get downloaded and gets deleted if it was already downloaded. No need for a different build. Be sure
336.
by hsivonen 10y ago
Uncheck the “Play DRM content” checkbox in Firefox, and you have your parallel stack right there. Does it still play Netflix that way? No.
337.
by hsivonen 10y ago
Amazon Video works with EME+Widevine, too. What makes you say it still requires Silverlight?
338.
by hsivonen 10y ago
If you mean using EME just for non-DRM encryption, no it doesn't make sense: https://news.ycombinator.com/item?id=11692420 If you mean that the recipients of the video are restricted in what they can do with it, that&#
339.
by hsivonen 10y ago
The previous DRM plug-in (Silverlight) was made by Microsoft. The new one (Widevine CDM) is made by Google.
340.
by hsivonen 10y ago
Why would you prefer letting streaming companies have full code execution on you desktop instead of having browsers mediate?
341.
by hsivonen 10y ago
If git changed to BLAKE2b, I'd expect a perf improvement over SHA-1.
342.
by hsivonen 10y ago
It's hard for a software project to make progress if the only way to reach users is non-rolling distros. To a large extent, the progress of software in non-rolling distros relies on enough other people using the intermediate versions f
343.
by hsivonen 10y ago
I'm very excited about the promise of security updates for Android.
344.
by hsivonen 10y ago
I bet the Intel chip will get kernel security updates for longer.
345.
by hsivonen 10y ago
Indeed, it would be nice if the article acknowledged the existence of BLAKE2b.
346.
by hsivonen 10y ago
> What's wrong with the MIT license? Navigate to about:license in Firefox. Does it seem like a good idea to have to reproduce every variant (with each unique notice) of MIT and BSD license?
347.
by hsivonen 10y ago
Obviously, but everyone with more recent CPUs (as in only 14 years old) who runs x86 packages ends up running less efficient software.
348.
by hsivonen 10y ago
> (normally) are not allowed to depend on non-Debian binaries. It turns out that Debian is more permissive than Fedora when it comes to bootstrapping compilers with out-of-archive compilers. Fedora has an actual policy and it allows one-
349.
by hsivonen 10y ago
x86 isn't just 32-bit. Linux distros have been reluctant to upgrade their notion of 32-bit x86 to require SSE2. This means that x86 isn't just 32-bit but involves weird 387 floating-point math when other mainstream architectures u
350.
by hsivonen 10y ago
Is there a way to use a desktop computer as the tty for the Debian instance and to run the scheduler on the Android device in active mode without keeping poking at the touchscreen? I recently installed Ubuntu Touch hoping that I could turn
351.
by hsivonen 10y ago
Is some AV product using it for that?
352.
by hsivonen 10y ago
Speaking of F-Secure, has taviso just not looked at F-Secure yet or does F-Secure not have egregious blunders?
353.
by hsivonen 10y ago
The first thing you should do with a PC is to delete all partitions and install a fresh OS. Even if you aren't installing Linux, you should download untampered Windows 10 (the same edition that the PC came licensed for) from Microsoft
354.
by hsivonen 10y ago
That's for the Wireshark debugging use case.
355.
by hsivonen 10y ago
What's the mainline kernel support situation for this SoC? If not mainline support, what's the kernel security update story?
356.
by hsivonen 10y ago
In Java regexps, the dot matches a code point or an unpaired surrogate, so if you have a proper surrogate pair, the dot matches the whole pair without splitting it. It does split grapheme clusters. It's unclear to me what you mean by &
357.
by hsivonen 10y ago
Is the memory representation of Swift strings now documented as something that programmers can rely on for performance characteristics? I read the Swift Book when Swift first came out and it bothered me a lot that the book didn't say w
358.
by hsivonen 10y ago
In addition to the Rust design making more sense for systems programming than Swift's, what Rust puts on the language-level is forward-compatible with future Unicode versions. A future version of Unicode could define combining behavior
359.
by hsivonen 10y ago
Java strings are sequences of 16-bit units and don't guarantee UTF-16 validity. There are newer standard library APIs that perform astral-aware operations, though.
360.
by hsivonen 10y ago
It's rather disappointing UX and something that trains users to accept key changes of their contacts that Signal doesn't support affirmations of key continuity. If you get a new phone without having lost the old one, it would be g

More ›