jeroenhd

27 ms·

631.
by jeroenhd 7mo ago
Getting Java to run is a base requirement for running most software written in Java. However, there is a dedicated Dockerfile for creating a native image (Java words for "binary") that shouldn't require a JVM. I haven't
632.
by jeroenhd 7mo ago
Anything with PAM integration may work for you. I use the fingerprint reader in my laptop. Others use yubikeys. You could probably throw together a quick PAM module that scans for your phone's presence. But, aside from the security&#x2
633.
by jeroenhd 7mo ago
Every week, the USA finds a new way to lose credibility as a serious nation. If it weren't for the observably fair elections, you'd almost think America was being taken over from the inside by foreign infiltrators. It's ludic
634.
by jeroenhd 8mo ago
I think that would work just fine for most use cases, though you may run into people trying to set up weird usernames on their VMs that conflict with the host split config. Still, this is the best zero-config solution in my opinion, much si
635.
by jeroenhd 8mo ago
ISPs won't bother with IPv6 until they've either run out of IPv4 space or the internet starts to use IPv6's advantages. Discussions about IPv6 quickly end with "we have enough v4 space and there are no services that requ
636.
by jeroenhd 8mo ago
The privacy policy was just a generic corporate "we may collect some information to improve a service" crap. Technically, lawyers will argue that users had to opportunity to inform themselves. Practically, nobody knew.
637.
by jeroenhd 8mo ago
I know that some keyboard layouts come with different characters, which can be confusing when similar-looking keys are in the same place on a US-Int keyboard (nl-NL has a ¨ character almost exactly where the normal " would be for insta
638.
by jeroenhd 8mo ago
I have never encountered that behaviour outside of Microsoft Word and its alternatives, I've always had this happen application-side. Is this an IME thing? Or a non-Unicode-compatible code page? Because I don't think there's
639.
by jeroenhd 8mo ago
Option + ] will produce ‘, Option+Shift+] will produce ’. Similarly, “” can be produced with Option(+Shift)+[. Alternatively, Option+Shift+e will produce ´.
640.
by jeroenhd 8mo ago
I can only imagine the delays and damage that police officers opening random shipping containers without a warrant would if it became normalised. Saying "it's definitely one of those" is a rather big claim for someone who has
641.
by jeroenhd 8mo ago
If only router manufacturers could be trusted to implement UPnP safely, then none I'd this bullshit would be necessary. At least with IPv6 this crap becomes a little easier because you no longer have randomized source ports (which this
642.
by jeroenhd 8mo ago
Work on a standardised solution has already been done and proposals are already being discussed. Things aren't moving as fast as they could be because every time something like this hits a front page somewhere a bunch of people have to
643.
by jeroenhd 8mo ago
It's by design. This isn't a bug or a skipped test case. https://developer.apple.com/videos/play/wwdc2025/310/?time=4... > Each element is designed with a curvature that sits neatly within t
644.
by jeroenhd 8mo ago
My banking app works fine on a rooted phone that I don't bother faking a proper Play Integrity signature for. Except for a warning about the phone being rooted when setting it up, of course. I'm not 100% sure what happens when you
645.
by jeroenhd 8mo ago
Firefox throws a "this tab is slowing down your browser" warning, but it doesn't crash. Chromium works for me, though.
646.
by jeroenhd 8mo ago
If you didn't click the button, then of course, you don't send the unsubscribe message. If you did subscribe to a newsletter and no longer want to receive it (which is the majority of these cases), then the unsubscribe action is t
647.
by jeroenhd 8mo ago
My proxmox server with a few VMs works perfectly fine with much less compute. My homelab setup runs out of memory much faster than it does CPU cores.
648.
by jeroenhd 8mo ago
> you just need to trust the resolver you're DoH'ing to I don't trust the public DoH resolvers that much, actually, and neither do I trust my own ISP. I know for a fact that they mess with DNS records because of court orde
649.
by jeroenhd 8mo ago
DNSSEC alone is obviously useless because any attacker interested in SNI hostnames can just as easily monitor DNS traffic. However, DoH/DoT without record integrity is about as useful as self-signed HTTPS certificates. You need both fo
650.
by jeroenhd 8mo ago
That's used RAM, it doesn't include things like caches. Even with macOS deep into swap space during development (about 6-8GB of swap), macOS internals will happily keep 2GiB of memory reserved for window management and spotlight.
651.
by jeroenhd 8mo ago
Apple isn't good enough at software design to make macOS work on touch screens. Plus, they don't want to compete with themselves. Why sell an iPad running macOS when they can sell you a Macbook and an iPad instead?
652.
by jeroenhd 8mo ago
8GiB of RAM, combined with "Built for Apple Intelligence.", makes me question the user experience on this thing. macOS with a browser open pretty quickly hits 13 GiB of RAM usage for me. That poor SSD is going to be swapping its w
653.
by jeroenhd 8mo ago
> Pretty sure modern web apps can do all of those If you're on Chrome and give them permission, or stuff them into Electron and friends, they can. The workflow isn't as smooth as with native applications, though. On the other h
654.
by jeroenhd 8mo ago
"Report spam" is quicker and easier than "unsubscribe". Gmail added a popup asking the user if they want to unsubscribe when flagging a newsletter with the appropriate unsubscribe headers, so it must be common enough to
655.
by jeroenhd 8mo ago
Someone recently leveraged some kind of automated spam attack against my domain using Zendesk's email servers. For some reason, Zendesk doesn't enforce SPF and DKIM checks when opening new tickets, so I got flooded with "your
656.
by jeroenhd 8mo ago
If browsers remember which domains do ECH and refuse to downgrade to non-ECH connections after, the way the HSTS cache forces browsers to connect over HTTPS despite direct attempts to load over HTTP, then you only need an entry in the brows
657.
by jeroenhd 8mo ago
"Just buy a second domain exclusively to work around the arbitrary restrictions put onto the protocol" works as a solution, but it's a silly solution that shouldn't be necessary.
658.
by jeroenhd 8mo ago
THe benefit is that the SNI is not being logged. Resolving an IP to a domain name is pretty hard for a small actor who doesn't have a record of all DNS records.
659.
by jeroenhd 8mo ago
If you control the domain you're fingerprinting clients on, you can decrypt the inner ClientHello and fingerprint on that. If you're not in control of the domain you're fingerprinting, then ECH is working as intended. I don&#
660.
by jeroenhd 8mo ago
> For IPv4, there’s room for ambiguity. I can't think of a single numeric TLD, so I don't think anyone is confusing IP literals with domain names, unless they're doing so extremely lazily. > And how are IP certificates

More ›