kardos

41 ms·

421.
by kardos 9y ago
> That way the VPN can't see who you are So how do you get around the part where you pay for the VPN service and provide login credentials to use it?
422.
by kardos 9y ago
Perhaps (self driving) cars can be redesigned to mitigate the outcome of pedestrian collisions, eg, like cowcatchers on trains [1], except something more appropriate for the situation. External airbags? [1] https://en.wikipedia.o
423.
by kardos 9y ago
Or does the prospect of onerous regulation outweigh the competitive advantage?
424.
by kardos 9y ago
Do you know a good way to automate that?
425.
by kardos 9y ago
With vibrant competition, no
426.
by kardos 9y ago
Because they can switch on a 30% profit margin at a moments notice once the competition is sufficiently demolished
427.
by kardos 9y ago
Yeah that's a fair assumption. So no wildcards for subdomains at dynamic dns providers -- probably not an important use-case anyhow.
428.
by kardos 9y ago
That sounds like the description of an EV or OV certificate, where the CA takes additional verification steps. LE is all about DV certs -- you just need to control the web server at secure-payments.yourbusiness.com, and with DNS control you
429.
by kardos 9y ago
Dynamic DNS providers is one -- I probably shouldn't be able to get a wildcard cert for any of these [1] domains, but permitting *.mysubdomain.hostname.com is probably OK [1] https://www.dtdns.com/dtsite/faq#hostdo
430.
by kardos 9y ago
Not sure how the availability of wildcard certs changes that scenario, if I can set the DNS record for secure-payments.yourbusiness.com then I can get a non-wildcard cert for it and get on with the spamming straight away
431.
by kardos 9y ago
But it's an uphill battle to force manufacturers to make things easy to disassemble/repair as they wish to discourage both in pursuit of more profit. There's a bunch of hairy details about what constitutes "easy to disas
432.
by kardos 9y ago
While I agree that moving away from the throwaway culture is a good move, it seems like an uphill battle. Resource recovery / recycling approaches, such as systems that separate dead electronics (and more widely, post consumer products
433.
by kardos 9y ago
I interpreted OP's point as moving that kind of complexity to a black box would open it up to being compromised and then leveraged as a backdoor into your system, or as a botnet, etc.
434.
by kardos 9y ago
We already have plenty of insecure non-auditable black boxes on our networks [1,2] and in our CPUs [3]. A dodgy offload chip seems like a minor concern until those are solved [1] https://www.networkworld.com/article/30
435.
by kardos 9y ago
So one could setup an automated crawler thatbruns frequently to keep everything in cache?
436.
by kardos 9y ago
I remember that day, it was the day I abandoned facebook. Reading this thread confirms that I haven't been missing out on much aside from heaps of dark patterns.
437.
by kardos 9y ago
Which, incidentally, exposes an info leak. Timing the load time for a cached script reveals if you've loaded that script before. Value low for extremely common libraries, higher for less common libraries.
438.
by kardos 9y ago
If the electricity or gas has an outage, I'm not locked out (or in).
439.
by kardos 9y ago
Perhaps not a solution, but wind assist [1,2] for shipping seems like a way to chip away at that problem. [1] https://en.wikipedia.org/wiki/Wind-assisted_propulsion [2] https://en.wikipedia.org/wiki&#x2
440.
by kardos 9y ago
This just reinforces the idea that Facebook has long jumped the shark -- they think their role is to orchestrate your interactions with friends. Not looking forward to 'ostracism-as-a-service'...
441.
OpenSSL wins the Levchin prize(openssl.org)
94 points by kardos 9y ago|29 comments
442.
by kardos 9y ago
The big hammer is the pragmatic approach for the short term. Everyone and their dog wants to claw back the lost performance, we're only week past the big reveal. Your idea of black/white listing processes might bubble up as a solu
443.
by kardos 9y ago
On one hand, great news for Intel: everyone needs a new chip. On the other, terrible news for Intel: AMD's offerings are pretty competitive these days. It'll be interesting to see how this plays out.
444.
by kardos 9y ago
It smells like this approach opens up a sort of attack vector. Eg, to wreck someone's experience by getting some false information injected into a target's social media streams in order to be picked up by these information harvest
445.
by kardos 9y ago
It's actually Signal, see bottom of the long image [1] [1] https://ha.cking.ch/s8_data_line_locator/images/10_01_cmds.j...
446.
by kardos 9y ago
A wholesale rewrite is fantasy, but piecewise replacement might be plausible. Is it technically possible to write a driver in Rust and add it to the kernel in a reasonable way? That is, without gobs of fragile shims, etc.
447.
by kardos 9y ago
Am I wrong in thinking that these hints should include subresource integrity hashes? Given hints with SRI hashes, the client can fetch/verify them and be ready when the HTML arrives, or even better, consult the cache and verify to avoi
448.
by kardos 9y ago
I am also not him. Fail2ban is ineffective against distributed brute force -- if someone has a 100k strong botnet, they can try 100k user/pass guesses, and fail2ban won't lift a finger. But stepping back a bit, in the case where y
449.
Nextcloud Introducing Native Integrated End-To-end Encryption(nextcloud.com)
1 points by kardos 9y ago|0 comments
450.
by kardos 9y ago
Surely they set the word limit afterwards, yes?

More ›