jeroenhd

48 ms·

961.
by jeroenhd 10mo ago
Bitwarden works just fine for Amazon. Works on my phone too. Even when supplying passkeys over QR code+Bluetooth to another computer, Bitwarden's Android integration works flawlessly. I do believe you need Android 14 for that, though,
962.
by jeroenhd 10mo ago
Apple is already shipping remote attestation in Safari in the form of Private Access Tokens ( https://developer.apple.com/news/?id=huqjyh7k ), though Cloudflare's trial for that has ended. Safari authenticates and a
963.
by jeroenhd 10mo ago
The point of passkeys is that they're unexportable. Software implementations like Bitwarden/KeepassXC/etc. making them exportable go right against the point of the protocols. I personally think the ability to export+import pa
964.
by jeroenhd 11mo ago
LLMs can and often do turn any technology into an insecure heap of shit. I don't see how that's relevant to Supabase specifically.
965.
by jeroenhd 11mo ago
The Google Wallet app will let you import any pkpass file. The trouble is that most websites that support the format will only offer them for download of you're coming from an iPhone. Google's format also has a download option but
966.
by jeroenhd 11mo ago
I very much appreciate libraries that provide optional logging. Tracing error causes in network protocol calls can be pretty near impossible without throwing a library/package/crate/whatever into TRACE mode. Of course they sh
967.
by jeroenhd 11mo ago
Exactly this, a remote error may still be your problem. If your SMTP mailer is failing to send out messages on behalf of your customer because their partners' email servers cannot be reached, your customer is still going to ask you why
968.
by jeroenhd 11mo ago
Knowingly filing false DMCA claims will also perjure them. However, ICANN has a whole procedure they follow where complaints are fact-checked, whereas DMCA takedowns put an unreasonable burden on hosting providers that requires immediate ac
969.
by jeroenhd 11mo ago
Depends on your ISP. If you live in a place where there aren't many IPv4 addresses available, CGNAT is the reason you're seeing a lot of Cloudflare/Akamai/Google CAPTCHAs everywhere, and IPv6 fixes that.
970.
by jeroenhd 11mo ago
The IPv6 spec looks long because it also includes protocols that are separate on IPv4 (DHCP/SLAAC, NDP, depending on the document ICMPv6, mirroring DHCP, ARP, ICMP, NetBIOS, etc.), as well as the addressing schemes that were different
971.
by jeroenhd 11mo ago
That's more proof that TP-Link should not be trusted than that there is a problem with IPv6, really. Even cheap $20 Aliexpress routers have a firewall enabled by default.
972.
by jeroenhd 11mo ago
Are those problems? If either addressing method works and is reachable, who cares which one end up getting used first?
973.
by jeroenhd 11mo ago
I generally prefer mitmweb, the web frontend for mitmproxy. I don't have much of a problem with their tmux-like UI, but I find mitmweb a lot easier to use than the keyboard shortcut based terminal navigation.
974.
by jeroenhd 11mo ago
mitmproxy/mitmweb offer a WireGuard server implementation to do pretty much this. You can grab any existing WireGuard VPN, scan a QR code to import the VPN config, and start monitoring (after installing the MITM certificate, of course)
975.
by jeroenhd 11mo ago
mitmproxy supports quite a few features that Charles doesn't and vice versa. You could use them as alternatives for basic browser traffic analysis (where they're both fine), but their features and capabilities cover different area
976.
by jeroenhd 11mo ago
The Kotlin functions are actually quite easy to write, they're all written in standard Kotlin. also: https://github.com/JetBrains/kotlin/blob/2.3.0/libraries/std... apply: https://gi
977.
by jeroenhd 11mo ago
The same pattern can also be useful in Rust for early returning Result<_,_> errors (you cannot `let x = foo()?` inside of a normal block like that). let config: Result<i32, i32> = { Ok( "1234"
978.
by jeroenhd 11mo ago
Each does different things, and Rust also has plenty of them. and_then(), or(), or_else(), then(), the list goes on. Kotlin just implements them more widely. Actually, Kotlin's with() and apply() are more powerful than what Rust can pr
979.
by jeroenhd 11mo ago
Not without being able to use the ? operator. The closest thing I can think of that will let you return a result from within a separate scope using a set of foo()? calls would be a lambda function that's called immediately, but that ha
980.
by jeroenhd 11mo ago
I have to ask, like with all the other browser specific trial implementations: how is cross platform support? If we wanted to make a grid layout that only worked in one browser engine, grid-template-rows: masonry was there for a while now.
981.
by jeroenhd 11mo ago
That depends on how terrible the middleboxes those corporate environments use are. If they only block actual malicious pages, it shouldn't be a problem unless the user un-hides the links and clicks on them. There's a good chance c
982.
by jeroenhd 11mo ago
I don't think this code needed to be unsafe. This code doesn't involve any I/O or kernel pointer/CPU register management; it's just modifying a list. I'm sure the people who wrote this code had their reasons to
983.
by jeroenhd 11mo ago
Technically, binder is still part of Linux, even if it's not enabled by default in many cases. This "security vulnerability" is just a local DoS though. Annoying and problematic as it effectively bypasses controls over power
984.
by jeroenhd 11mo ago
Using Molly to get cross-device Signal support works pretty well, though the Android-only approach requires Waydroid or a deprecated Windows feature to run on desktop, unfortunately. Still, it's a lot better than the alternative (which
985.
by jeroenhd 11mo ago
E2EE can work just fine with backup and sync. Signal chose not to do it for a long time and remains cautious, sticking to security over tolerating security-ignorant users. WhatsApp is end-to-end encrypted, for instance, and it's used b
986.
by jeroenhd 11mo ago
FAANG usually only operate what is necessary to collect payment and maybe do some lobbying on the side. Accenture actually has a full HQ with people on the ground in Europe. But yes, legally speaking, FAANG is also EU, same way Volkswagen i
987.
by jeroenhd 11mo ago
> the GDPR fines (that this likely refers to) I think the American government is mad at the DMA more than anything. Breaking up the monopolies that are currently firmly held by American tech giants goes directly against the interests of
988.
by jeroenhd 11mo ago
Only in win32 applications. When UWP and its successors arrived, the OS stopped providing that functionality. Some applications may still support it, but the automatic equivalence of double clicking the application icon to the close button
989.
by jeroenhd 11mo ago
Accenture is operating from Ireland, legally speaking. It may be in American hands, serving American shareholders and American interests, and it may have been started as a European front for an American business, but it's technically
990.
by jeroenhd 11mo ago
The close button has always been there, you double clicked the top left menu button. That worked all the way until Microsoft started redoing window decorations in desktop mode with Windows 8.1, and even for a short period after. This was al

More ›