ivlad

9 ms·

91.
by ivlad 3y ago
Using RSA in 2023 for a CA that is expected to be around for an extended period of time is just silly. ECDSA 384 or longer depending on the expected CA lifetime and security margins (see https://www.keylength.com/ ) is a san
92.
by ivlad 3y ago
> Knowledge of the CA private key does not allow for this Of course it does. You just generate certificates for every TLS handshake you see and MitM them. And yes, it works for PFS too. There is no difference for MitM. > In the case o
93.
by ivlad 3y ago
> it was perfectly reasonable to allow the user to take control of the initramfs prior to LUKS unlock! It’s still looks perfectly reasonable, just PCR should be fed with some value before that, maybe a hash of initramfs file? It seems to
94.
by ivlad 3y ago
“git pull” over SSH and have your system RCEd? I’d say it levels above “neat”.
95.
by ivlad 3y ago
I use vim for years, too but also I keep my .vimrc and, more recently, .vim in a git repo (using bare repos for dot files discussed here: https://www.atlassian.com/git/tutorials/dotfiles ). So, getting a functional
96.
by ivlad 3y ago
Yes, that’s resident (or “discoverable”) keys the article author is talking about. You don’t have to do it this way. I configured my Yubikeys to be the second factor and not to use resident keys. It’s possible, although I don’t know if Micr
97.
by ivlad 3y ago
> Passkeys are meant to be a password _replacement_, No. Passkeys parasitize on FIDO2 U2F standard, that was developed to be (as the name implies) the second factor. Resident keys are meant for on-device 2FA with PIN, a functional replac
98.
by ivlad 3y ago
> US copyright doesn't cover worldwide works unless they register in the US. Are you sure it works this way now?
99.
by ivlad 3y ago
> The government sets up a website What government? World government? Yours? Mine? Who will pay for it? What will happen is an author is hit by a car and falls into coma? How will authorship be established? Worldwide federated authentica
100.
by ivlad 3y ago
Doesn’t NSA object hybrid schemes on weird grounds that current implementations suck, full of implementation errors and all-new PQ-only ones will not? Edit: reference https://mailarchive.ietf.org/arch/msg/spasm&#x2
101.
by ivlad 3y ago
Because Indira Gandhi was a woman. She was killed by her bodyguards.
102.
by ivlad 3y ago
I wonder, why nobody mentioned vimwiki. It has diary functionality (available via <leader>w<leader>w by default) that will create dated files.
103.
by ivlad 3y ago
.deb is not executable. It’s an “ar” archive (see https://manpages.debian.org/buster/dpkg-dev/deb.5.en.html for more details) containing a few other archives - for files and metadata. The fact that deb extension i
104.
by ivlad 3y ago
Profit is revenue deducted expenses, taxes, depreciation, loan payments, and other costs. Income is the same as profit.
105.
by ivlad 3y ago
Building ROP chains would so insanely easy; everybody doing binary exploitation would be much happier with this memory layout.
106.
by ivlad 3y ago
> I'm sure that a century ago, space was just something we would never reach. Tsiolkovsky developed his rocket equation in 1903 and in 1928 he published The Will of Universe dedicated to space colonisation. He clearly new it’s withi
107.
by ivlad 3y ago
Neither medium.com nor bbc.com are blocked in Singapore.
108.
by ivlad 3y ago
Looks like people at FAANG did not like this comment.:-)
109.
by ivlad 3y ago
You just want to get a free ride, and they want to feed their kids.
110.
by ivlad 3y ago
fvwm2 may work for you. With enough effort put into configuring it and its modules, you may get almost any look-and-feel. Depending on what do you mean with “NeXT philosophy”, Window Maker and the whole GNUStep suite may also be worth check
111.
by ivlad 3y ago
Nope, Google’s quad eights is “recursive DNS server”. Resolver is usually a part of operating system (sometimes) implementing DNS client functionality and serving as a link between a userland library providing, say, getaddrinfo(), and DNS i
112.
by ivlad 3y ago
It’s about attested keys, not attested apps. Apple does not attest their software-backed FIDO keys (they call them passkeys).
113.
by ivlad 3y ago
Passkeys are just software backed FIDO keys with no attestation and less features. FIDO is flexible enough to distinguish userPresence (I.e., touching the key) from userVerification (commonly, entering a PIN), but this is only defined for p
114.
by ivlad 3y ago
I remember my boss managed to make Oracle 7 running on FreeBSD via iBCS. I was told, CNN did that, too for their web site back in nineties.
115.
by ivlad 3y ago
Almost everyone in China uses alternative stores, like Huawei or Xiaomi; how else do you think malicious PDD app got on their phones? The same applies to other counties in South-East Asia. I have seen our app for Android repackaged with m
116.
by ivlad 3y ago
Recent example: https://www.reuters.com/technology/google-suspends-chinas-pi... Malicious app in alternative store, the one in Google Play is different.
117.
by ivlad 3y ago
Calendar invites are cross-platform and reasonably convenient. You don’t even need to subscribe to someone’s calendar, updates are vCalendar files sent over email. At least iOS and Outlook parse your inbox for vCalendar files and may update
118.
by ivlad 4y ago
Go to Scratch site ( https://scratch.mit.edu/ ), create an account and show them how to connect blocks together to make the avatar move? Do it together and then check out other people’s works at the same site. You can build u
119.
by ivlad 4y ago
AWS’s 24% of operating margin does not appear out of nowhere.
120.
by ivlad 4y ago
It’s very hard to make money from, you know, a freeware browser without earning them somewhere else, i.e., in targeted advertising.

More ›