jabbany

26 ms·

211.
by jabbany 4y ago
The thread above has mentioned a very real problem with snap running on OpenVZ. It requires either squashfs as a kernel module or FUSE+squashfuse. Many OpenVZ hosts will not provide either and docker/k8s is obviously out if you are alr
212.
by jabbany 4y ago
I think the rust compiler kind of does this: https://mobile.twitter.com/hmemcpy/status/115189096847766732...
213.
by jabbany 4y ago
Wait, isn't the point of post-quantum crypto to be as good as existing crypto but also be secure against known quantum attacks like Shor's algorithm and factoring. I don't think the goal is to trade off anything for defenses
214.
by jabbany 4y ago
Useful how? Within a domain/origin you can already track/control this stuff with a plethora of things: cookies, URL params, localStorage, JS access of history to implement fancy back behavior...
215.
by jabbany 4y ago
The real shame is why the linked page even gets referral information at all (and why we cannot disable it on a browser)... I'd love to have a browser setting to just completely disable "Referer:" headers and blank out `docume
216.
by jabbany 4y ago
Ah the good* old days of table layouts! Had a whole book about how to achieve all kinds of page layouts using tables pre the CSS3 days. *: Not actually good.
217.
by jabbany 4y ago
> I'd like to make my machine output-only, not promiscuous in this way. The TV advertises itself on the network so it's the one being promiscuous. Your machine is still being passive, it just shows you the devices that are have
218.
by jabbany 4y ago
Ratings were supposed to be the criteria but we all know how well that worked...
219.
by jabbany 4y ago
No idea, but I could imagine something where you have a period of time on the chain where both signature types are allowed, and people can just migrate their coins by transferring from the old wallet to one based on the new signature system
220.
by jabbany 4y ago
My guess is the grandparent refers to this kind of attack: https://en.wikipedia.org/wiki/Length_extension_attack Basically, many cryptographic hashes support fixed-length hashes of variable message lengths by breaking
221.
by jabbany 4y ago
> Jumping is also real, but we need not worry about people jumping out of the atmosphere. If people are jumping twice as high this year than last, we would ;) https://www.researchgate.net/figure/A-chart-shows-the-pro
222.
by jabbany 4y ago
> Its felt like FUD based on FUD for a while. Not really...? Quantum stuff is real, there are real quantum computers that have been demonstrated to really do quantum operations. They're not close to being usable to break crypto yet,
223.
by jabbany 4y ago
Not at all... I mean if you break either the hash or the signature, then there are bigger fish to fry than just Bitcoin. You'd essentially be on your way to breaking much of the crypto used to secure significantly more valuable informa
224.
by jabbany 4y ago
Probably both yes and no. As of right now bitcoin depends pretty heavily on SHA256 and with hash functions being quite important cryptography primitives, there's always ongoing work on breaking them (tremendous upside to anyone who can
225.
by jabbany 4y ago
One way to think about it might be to think of REST as RPC rather than folder nesting. E.g. `/[param_name]/[value]/..` So if you can find blogs just by their blogId, then `/blogs/:blogId` makes sense since you only
226.
by jabbany 4y ago
Yes, it is on the Gen 1, but the Gen 1 has a lot of other deficiencies in the HW that make it not so great as a daily driver today. The OneMix ones have a capacitive trackpoint that's not as good (-> it works like a tiny trackpad ar
227.
by jabbany 4y ago
I'm not remotely an iOS dev, but the workaround you present seems reasonable to me? Just make your own http(s) requests, fetch the page contents, ignore header CSP, strip CSP in the HTML and send the string to the web view thing. A cur
228.
by jabbany 4y ago
Locking down in-app browsers seems like a reasonable trade-off. Kind of surprised it wasn't the case before, since browser extensions have had site permissions for ages now. One could just follow what browsers do for extensions: have t
229.
by jabbany 4y ago
Ah, I keep the SMS version of 2FA off and only use the app-based 2FA codes.
230.
by jabbany 4y ago
Yep. Here's a news article about this: https://www.npr.org/sections/alltechconsidered/2017/01/31/51...
231.
by jabbany 4y ago
Maybe the spammer used to be a client and the internal mailing list name got leaked through an email they got.
232.
by jabbany 4y ago
> I think it's reasonable to assume that they currently aren't. I don't see any reason they wouldn't be? If anything they probably face more scrutiny than US domestic companies exactly because they are foreign. The p
233.
by jabbany 4y ago
There is an interesting meta discussion here but the parent is over-simplifying things. > How we can allow a Chinese social media app in the west, while any non-Chinese social media apps aren't allowed there? Easy. The laws are diff
234.
by jabbany 4y ago
It might make it much harder to inject stuff, but since the apps control all aspects of the embedded browser and CSPs are enforced by the browser, they could feasibly just disable CSP enforcement and have the embedded browser ignore the CSP
235.
by jabbany 4y ago
Having rust is fine though, it's just oxidized iron. Sure it won't look pretty but it's largely harmless in food. The main caveat I've seen is when making acidic foods with iron cookware (cast iron or carbon steel) it ma
236.
by jabbany 4y ago
It depends on what you're worried about and what you want out of a pan. If you use wooden cooking utensils (spatula, chopsticks etc.), then just keep using the Teflon pan. It's fine as is and you won't scratch the coating. If
237.
by jabbany 4y ago
> It also got a lot of onlookers asking questions about it, leading to those ever so fun random conversations that can lead to night long friendships over wine and coffee. Hah. So true! It's always interesting to see that even today
238.
by jabbany 4y ago
Yeah, the Gen 1 pocket was quite questionable (I had one too), mostly because the hardware back then was hacked together. Support came mostly from the community rather than GPD as they were already working on the next gen Win and Pocket (wh
239.
by jabbany 4y ago
This is a good point. There should be separate categories for FOSS and no-hidden-monetization tools v.s. the other fly-in-the-soup tools where you have to drink around the fly...
240.
by jabbany 4y ago
Ooh, good to know. This should really be advertised a bit more in the website... I want straight to the website and it doesn't mention local mounting in the features at all and no screenshots show anything about local mounts either...

More ›