ilyt

8 ms·

31.
by ilyt 3y ago
From my experience it only work in CM repos where you have a lot of very small changes and usually unrelated.
32.
by ilyt 3y ago
Well, the one that didn't got breached.
33.
by ilyt 3y ago
I think we'd be in far healthier society if corporations not turning profit for half a decade would just die instead of entangling more users into their failure. via investment money...
34.
by ilyt 3y ago
We use similiar gpg-based one in our Configuration Management infrastructure, works really well. The data files are encrypted with keys of the CM main servers and other admins, GIt has history in case something that should not get removed g
35.
by ilyt 3y ago
Ain't nobody giving shit about your pictures kept on home server. Security measures need to be relevant to chance of attack, they do not exist in the void. And so mediocre protection of irrelevant target can be far more effective than
36.
by ilyt 3y ago
Actually if browser used plain old smartcard cert off yubikey for client cert auth it would be prevented, but that's too PITA to use. Well, if implemented right. Techically every ssl connection would carry user's identity so cooki
37.
by ilyt 3y ago
> And whether Heartbleed was worse than log4shell is mostly philosophical. Most definitely not. Heartbleed means that as long as your are on the internet they have your certs, full stop. Log4shell required access in both directions (to i
38.
by ilyt 3y ago
And you can just wash hands because you used "industry's best practice" and continue the security theatre.
39.
by ilyt 3y ago
Extremely unlikely, PSUs are not built in the way where that would be really possible
40.
by ilyt 3y ago
Apple updates their phones for LOOONG time compared to Android
41.
by ilyt 3y ago
At least it makes it easier to spot the inept and incompetent in the crowd.
42.
by ilyt 3y ago
Actually no, they were first to have code successfully run in (space dust) cloud for so long
43.
by ilyt 3y ago
I feel like it will converge to just having RV + FPGA chips rather than people wasting precious FPGA space on softcores. Zynq's are plenty popular already
44.
by ilyt 3y ago
They want to have the cake and eat it too with same instruction set fitting "small" (few hundred kB of flash/RAM at most) and "big" (Linux kernel running devices and up) ones. IMO it's futile effort that unnece
45.
by ilyt 3y ago
If they bothered to mount extra connector they didn't bother to remove rest of the parts, I'd imagine the connector is connected to same power rail anyway. It's still probably at wattage as advertised, but I wouldn't be
46.
by ilyt 3y ago
"Not this visit"
47.
by ilyt 3y ago
Why US allows such clowns to enforce law ?
48.
by ilyt 3y ago
No reaction ? Straight to jail Nervous ? Straight to jail Laughing ? Straight to jail Laughing nervously ? Guess what, straight to jail
49.
by ilyt 3y ago
AES instructions still fill CPU's time regardless of how fast they run Doing 2.6GB/s in single thread means you have one core less to use...
50.
by ilyt 3y ago
Doesn't answer question "why?" In other languages they were used coz they were far lighter than native threads but that's not the case in Go
51.
by ilyt 3y ago
Ask a full stack JS developer to make their app use a proxy and they will get nervous breakdown
52.
by ilyt 3y ago
If it was actually meant to prevent eyesore it would be about how many of them are in front of the property, not overall
53.
by ilyt 3y ago
They just seem pretty pointless as a tool in language that already have super-light green threads and good concurrency primitives.
54.
by ilyt 3y ago
> I assume the root cause is DNS tricks. Maybe read the article
55.
by ilyt 3y ago
Did that, can confirm. For other more sensible reasons but still.
56.
by ilyt 3y ago
> Why is it even possible to issue more than 1 certificate on the same domain via Let’s Encrypt? Shouldn't the previous certificate be revoked when a new one is issued? First, you want to have to have some leeway so you don't n
57.
by ilyt 3y ago
FDE is overrated, most leaks are not "someone stole my laptop" but "user clicked malicious links" ad other stupid stuff like that. And it is also entirely useless for good amount of data volume-wise on machine. I never n
58.
by ilyt 3y ago
Right, then commit that one line fix to the plugin
59.
by ilyt 3y ago
Or remove it altogether, warn people for years about deprecation, then remove all of them. Which they did. More net lines removed too. But hey, it annoyed Man That Is Bad At Dependency Management and Wrote A Book About It so it must be bad
60.
by ilyt 3y ago
I put "throwing the cruft away" in the same sentence EXPLICITLY to address that I am not just talking about refactoring. Learn to read before throwing dictionary definitions at people Providing method now-provided by standard libs

More ›