kbolino

31 ms·

481.
by kbolino 2y ago
Advanced economies are not so much living ahead in time as living at the top of a deeper production chain. The lower rungs on the production ladder do not cease to exist, though sometimes one of them is replaced by another, they just move a
482.
by kbolino 2y ago
UUID versions 3 and 5 are derived from hashes (MD5 and SHA1 respectively).
483.
by kbolino 2y ago
A compiler (JIT or AOT) can certainly make decisions which are more or less cache-friendly. It does depend on the language and the amount of freedom the compiler has, but just as one example, struct/object field reordering can reduce p
484.
by kbolino 2y ago
This is not about Linux vs Windows and it's perfectly possible (in fact, much more likely) to ship malware via Windows-derived install media. Secure Boot does not protect against post-boot vulnerabilities but it does protect against pe
485.
by kbolino 2y ago
The Macs (at least the Apple Silicon ones) do it much better, though. In most cases I can see minimal battery loss even over days. Whereas the Windows laptops are good for maybe a few hours on sleep. Whatever Apple is doing is miles apart f
486.
by kbolino 2y ago
If there is no pre-existing trusted root, the certificate presented is meaningless to laypeople. There's no way for the average person to know whether to press yes or no to it, as they're not about to check the SHA256 fingerprint
487.
by kbolino 2y ago
I'm not sure what's being complained about here. Most PCs (still) come with Windows, so "first use" will have occurred before you obtained the computer. A motherboard bought separately usually comes unlocked so you can r
488.
by kbolino 2y ago
I had to think about this one a bit. Basically, binary.Read/binary.Write are capable of reading/writing struct values. The worry would be that, if the Go compiler reordered fields under the hood, the order may differ between writi
489.
by kbolino 2y ago
You can enroll your own certificates as long as you have unlocked firmware. However, in order for vendor ISOs to boot without modification, they need to be signed by some trusted root beyond your control.
490.
by kbolino 2y ago
One of the most successful indie games (Factorio) has had a strict policy of no sales ever. Of course, this is not the norm, but it is not necessary to sell for pennies unless your game is explicitly limited in scope or playtime. Factorio a
491.
by kbolino 2y ago
That's good to know. I'm not making use of this assumption, but the purego package (came from ebitengine) does. It looks like they're aware of HostLayout [1] but I'm not sure how many other people have gotten the memo (H
492.
by kbolino 2y ago
I think this broaches the real matter, which is that nVidia's core business is GPUs while AMD's core business is CPUs. And, frankly, AMD has lately been doing a great job at its core business. The problem is that GPUs are now much
493.
by kbolino 2y ago
Basically, anything that isn't a thin pointer (*T, chan, map) gets boxed nowadays. The end result is that both words of an interface value are always pointers [1], which is very friendly to the garbage collector (setting aside the extr
494.
by kbolino 2y ago
In particular, struct field alignment matches C (even without cgo) and so any change to the default would break a lot of code.
495.
by kbolino 2y ago
Thinking about it, I guess you're right. While I'd like some way to say "never trust a DKIM signature claiming to be from me if it allows extension", the reality is that the only way for somebody to get their hands on su
496.
by kbolino 2y ago
I'm sure they could do more, but ... They own GitHub, they make Visual Studio Code, they made C#/.NET open-source and cross-platform, they added Linux support to Windows (twice), and they created WinGet, just off the top of my hea
497.
by kbolino 2y ago
What I mean is, I cannot set a policy that emails with DKIM signatures that allow length extension should not be trusted.
498.
by kbolino 2y ago
> SPF is obsolete and weak in other ways as well. Maybe so! But if I create the SPF record, it should be enforced. If I don't want it enforced, then I wouldn't have created it! I think, though, where we're converging is th
499.
by kbolino 2y ago
Yep, the colors come from the PC System Design Guide [1] developed by Microsoft and Intel in the late 90s after IBM completely lost control of the PC market. [1]: https://en.wikipedia.org/wiki/PC_System_Design_Guide
500.
by kbolino 2y ago
It is not a state law, it is a Federal regulation under 49 CFR § 571.138 [1]. These requirements were fully effective for manufacturers and "alterers" as of 1 Sep 2008. However, yes, if your state doesn't require it (or doesn
501.
by kbolino 2y ago
I was configuring Shenandoah GC on OpenJDK 8 before COVID, so I can say for sure that it's been available for a lot longer than 18 months. However, ZGC (the other low-pause-time collector) has only been the default for a little whi
502.
by kbolino 2y ago
What does forwarder mean to you here? Because, from my perspective, a forwarder that I don't trust--or even know about--should not be allowed to deliver legitimate-looking mail from my domain. DKIM alone is weak to replay and payload e
503.
by kbolino 2y ago
The TPMS requirement in the US is ratcheted. Once you have TPMS on a car, it needs to stay on the car even if you replace the wheels. It must not be disabled or removed, and it must be fixed if broken. Obviously, it is easy to flout these r
504.
by kbolino 2y ago
Can you sign and notarize your own software made for internal use with your own infrastructure? If so, then this is a valid response. If not, then this is an irrelevant response because the issue is going through Apple, not the process bein
505.
by kbolino 2y ago
GitHub Actions could use lock files, and they would be useful specifically for composite actions, but they don't really solve the full problem at hand. First, many GitHub Actions use a Docker image to do their work. This runs into ba
506.
by kbolino 2y ago
Some key differences I observe: OPKSSH covers only logging in through SSH to an existing user account, while authd covers all forms of login (console, graphical, SSH) and user/group management . The latter makes it much more of a full
507.
by kbolino 2y ago
If you have trusted forwarders, you just add them to the SPF policy (which can be recursive, though there is a pretty low limit on how many records can be looked up). I've not had an issue with this, personally. However, assuming DKIM
508.
by kbolino 2y ago
I can think of two different uses for multiple client IDs with the same IdP: rotation as I mentioned already (e.g. if client secret leaks, although the secret is not used here), and for when there are multiple domains in use but the IdP cli
509.
by kbolino 2y ago
This is very interesting! It looks like there's a config file [1] to set up username <- email,issuer associations. It looks like multiple identities (from different IdPs even) can access the same username, which is useful. There&#x2
510.
by kbolino 2y ago
I'd also like to see an update to DMARC so you can require both SPF and DKIM in your policy, instead of just one out of the two.

More ›