hsivonen

51 ms·

481.
by hsivonen 12y ago
Yeah. IceCat even loads Flash Player if you are knowledgeable enough to install it. But if you aren't, it doesn't tell you about it.
482.
by hsivonen 12y ago
> It seems they integrate some weird recommendation engine. > And that feels like browsing the web, ca. 2000 and no > adblock. It even comes with predefined 'categories' > (looks like folders, but it will search the
483.
by hsivonen 12y ago
2048 is the RSA key size. 128 or 256 is the AES key size (or more generally the key size for the symmetric cipher). Nowadays the latter doesn't depend on the cert, but in the 90s it artificially did thanks to U.S. export policy. CAs st
484.
by hsivonen 12y ago
Can we, please, have a syscall in Linux that returns random bytes from the system CSPRNG or blocks if not seeded yet and doesn't involve dealing with file descriptors? But even while one isn't available, why is LibreSSL trying to
485.
by hsivonen 12y ago
I expect Debian and its derivatives to offer LibreSSL eventually. There is interest and no good reason not to. However, I expect Fedora and its derivatives to stick with openssl-fips. Red Hat makes a big deal of FIPS due to selling to custo
486.
by hsivonen 12y ago
Well, there's a bit more tweaking to make it EME-compatible, but basically: yes.
487.
by hsivonen 12y ago
What's on track to becoming W3C-sanctioned (EME) is about Microsoft, Google, Apple and now Adobe having their own systems.
488.
by hsivonen 12y ago
Since people who understand the issue understand that Mozilla is incapable of developing a Hollywood-approvable CDM, if we had just announced the intent to do EME, it would have raised a big unanswered question: Where is the CDM going to co
489.
by hsivonen 12y ago
See "Linux" in https://www.adobe.com/products/adobe-access/tech-specs.html . The problem is that copyright holders can still stipulate policies that exclude Linux. For example, http://voddler.
490.
by hsivonen 12y ago
I doubt "it would be pretty trivial". The problems are probably in cross-language object life times and memory management--not in whether both generate machine instructions using LLVM machinery.
491.
by hsivonen 13y ago
Rust ( http://www.rust-lang.org/ ) is a serious effort to build a language that's close to metal like C but safe.
492.
by hsivonen 13y ago
TLS 1.0 is not enabled by default in IE6, so for practical purposes, IE6 does not support TLS 1.0.
493.
by hsivonen 13y ago
Are there any known software updaters that rely only on Secure Transport hostname checking for update authenticiity? If you use NSS-based browsers exclusively on OS X, can you have been pwned via fake updates due to this bug?
494.
by hsivonen 13y ago
Thanks for the test (very useful!) and for the update. A couple of comments: "Servers that do not support Forward Secrecy with our reference browsers are given a warning." Why aren't such servers capped to a non-A rating? Als
495.
by hsivonen 13y ago
In that case, the site providing DRMed video and the NaCl player would have distribute an H.264 decoder (and potentially other encumbered stuff) to end users as part of a NaCl executable. It's much more convenient for a company like Ne
496.
by hsivonen 13y ago
https://hsivonen.fi/eme/ explains what EME is . Granted, it might not explain "what is going on".
497.
by hsivonen 13y ago
If Apple wanted to, they could write their own implementation of the non-DRM parts of swf. Mozilla is doing this in Shumway. Apple did this for PDF. Of course, just like you aren't allowed to interoperate with an EME CDM without perm
498.
by hsivonen 13y ago
Chrome for Linux indeed comes with libwidevinecdm.so, but still, Netflix is not letting the Chrome on desktop Linux play content even though Netflix allows Chrome OS to play content. So that libwidevinecdm.so isn't particularly useful
499.
by hsivonen 13y ago
You seem to think that "the Open Web" doesn't mean the part of the Web that's freely implementable but the part of the Web that uses W3C-specified tech. What makes you think that? Wouldn't it be more logical to say
500.
by hsivonen 13y ago
None of the ones that have shipped already are installed like browser plug-ins. The ones Netflix deploys (PlayReady on Windows 8.1 with IE11 and Widevine on Chrome OS with Chrome) are bundled with operating systems and work with the browser
501.
by hsivonen 13y ago
That one is, IIRC, LGPL, so it's Open Source in the copyright and code availability sense, but it's otherwise encumbered, so it's not in Chromium by default.
502.
by hsivonen 13y ago
For Safari: The Open Source WebKit part is significantly less self-contained than Firefox or Chromium. A whole lot of stuff that Firefox or Chrome implement themselves relies on OS X system APIs in the case of Safari. (Some of those things
503.
by hsivonen 13y ago
The (non-about:config) UI for these settings was removed for a reason. Even though it makes sense for these to be configurable for testing, end users are more likely to break their browser (make it less secure or make it incompatible with r
504.
by hsivonen 13y ago
Generally true but my grocery shopping Evernote note is an exception: I erase the contents and add some new content.
505.
by hsivonen 13y ago
Requires login? Why?
506.
by hsivonen 13y ago
> Let me know how they are going to, say, get audio from webapps. HTML <audio>? Web Audio API?
507.
by hsivonen 13y ago
How is PNaCl not Chromium lock-in? Pepper is defined by the Chromium implementation.
508.
by hsivonen 13y ago
StartSSL's certs are accepted by browsers and revoking a free cert costs $24.90.
509.
by hsivonen 13y ago
TLS on port 443 is what makes SPDY / HTTP2 deployable. That way the new protocol is hidden from middle boxes that mess with port 80 traffic and would break things if the traffic didn't look like HTTP 1.x.
510.
by hsivonen 13y ago
The short answer is that at the time this stuff was designed, it was assumed that a passive attack could trivially become active instead, so it was assumed that defending against passive attacks wasn't worthwhile. Newer info about fibe

More ›