kevincox

16 ms·

361.
by kevincox 1y ago
> screen resolution Required for showing the right resolution images. The alternative is blurry images or wasted bandwidth. > time zone Most people expect to see times in their local time. > device model This could probably be remo
362.
by kevincox 1y ago
I believe that they could just ignore the Signal app's request to DRM protect the content. Unless Signal is actually encrypting the whole app content before submitting it to Windows it is just a request. This is a bit different to encr
363.
by kevincox 1y ago
You could encrypt the handshake that you recieved with the server's certificate and send it back. Then if it doesn't match what the server thought it sent it aborts the handshake. As long as the server's cert isn't broke
364.
Flutter application development: feedback (2/2)(joinpeertube.org)
2 points by kevincox 1y ago|0 comments
365.
by kevincox 1y ago
That's true. Although pasting the code into the existing browser tab is a bit smoother in my workflow. And at least the form autofills properly when they ask for email and password. I'd much prefer if they could just trust my pass
366.
by kevincox 1y ago
Hardly anyone can tell, until everyone can tell, because you have a breach. It's similar to the idea that if you aren't doing restore drills you aren't really taking backups. But people rarely test their auth rules.
367.
by kevincox 1y ago
> People might be in bad family situations (where not everyone with access to a shared device Then they should configure their browser to log them out. Not hope that every site has good settings for their niche scenario.
368.
by kevincox 1y ago
This is really just an optimization. It means that you don't need to do an expiry check on the regular token, only on the refresh token. It doesn't change the fact that you should be able to revoke a session before it naturally ex
369.
by kevincox 1y ago
I despise this. With username and password my password manager just fills it in and it is one click to click "login". With email magic link I need to enter my email (it seems to rarely auto-fill for some reason), then wait (often
370.
by kevincox 1y ago
This is true. But unless you are sure that current and future inputs will always be small I find it is better to start with the algorithm that scales better. Then you can add a special case for small sizes if it turns up in a hot path. This
371.
by kevincox 1y ago
The reason for this limit, at least on modern systems, is that select() has a fixed limit (usually 1024). So it would cause issues if there was an fd higher than that. The correct solution is basically 1. On startup every process should set
372.
by kevincox 1y ago
This is true, but you can only protect people from themselves so far. At some point you gotta let them do what they want to do. I don't want to live in a world where Google decides what we are and aren't allowed to do.
373.
by kevincox 1y ago
The way I see it is you are deciding between making the instant very clear or making their "time of day" clear. But IMHO "time of day" is less important because 1. People in the same time zone still have different schedu
374.
by kevincox 1y ago
If they happen to work the "average" schedule for their location, and you know what location they will be in at the time of the meeting, and you don't mess up the conversion. But if you try to schedule a meeting with someone
375.
by kevincox 1y ago
I'd love to hear more about their 0.1% error rate threshold. There is a huge difference between 1. Read returns an error but succeeds on the next attempt 2. Read returns an error and continues to do so 3. Read returns the wrong data &q
376.
by kevincox 1y ago
Honestly the takeaway I get from this is that Auora is pretty incredible (possible consistency bugs aside) in that it gets nearly the performance of local disk without the risk of data loss and downtime due to hardware failure (although the
377.
by kevincox 1y ago
What is the alternative? I suspect all modern kernels are more or less just as vulnerable? They did start https://fuchsia.dev/ so maybe they are hedging against this problem? But making a fully-featured OS is a huge underta
378.
by kevincox 1y ago
Or if you want it to look "authentic" replaced it with blurred random text. But personally I like solid bars as it makes it obvious what is happening and that it is secure.
379.
by kevincox 1y ago
Yes, but it is far more tested, fuzzed, studied and battle hardened than your app code will ever be. So in the grand scheme of things it isn't a high risk for stability or security. Yes, it would be nice if the full stack is memory saf
380.
by kevincox 1y ago
No, there just has to be a risk that consumers think that this is somehow associated with Waffle House. The point of a trademark isn't directly commercial. It isn't about preventing other people from making money from your brand.
381.
by kevincox 1y ago
The update appears to have come with unlimited or much higher page size. I don't think anyone has found a thread that is still split into multiple pages.
382.
by kevincox 1y ago
Yet GitHub can't show more than a dozen comments on the same page. Needing you to click "view more" to bring them in 10 at a time. HN is an island of sanity in a sad world.
383.
by kevincox 1y ago
IIUC it doesn't matter much if HDCP is cracked because the licenced chips (or knock-offs from the same factory) end up in stripping devices (or devices that are marketed as having another function like display cloning but also effectiv
384.
by kevincox 1y ago
E2E means that the messaging provider can't read the messages. The receiver can still see the messages and do whatever they want with them.
385.
by kevincox 1y ago
I agree that having so many sites behind one CDN (and related services) is a problem, but I don't think it is the elephant in this room. Even if there were 100 very popular CDNs having 1% of sites blocked because one user was streaming
386.
by kevincox 1y ago
For example DC Police may have confidential informants who would be best to use Signal because that isn't unusual. But the people there are communicating need to retain the communication.
387.
by kevincox 1y ago
In theory nothing. If you have complete confidentiality you only enough entropy to ensure that the attacker can not guess it. But in practice things get logged, people mess up their DNS and send the request to a different party (potentially
388.
by kevincox 1y ago
Because the whole business of scalpers is exploiting the difference between the list price and the price people are willing to pay. If this gap didn't exist scalping wouldn't be profitable. (As far as this article as discussing. T
389.
by kevincox 1y ago
This is my favourite model. Provides a recommended price but doesn't lock out those who can't afford it. It also means you can try it as long as you want at your own pace. And most importantly the software is fully open source and
390.
by kevincox 1y ago
I generally say something like "You can use whatever libraries you like but I reserve the right to ask you to implement them yourselves". This allows them to focus on the part they want to focus on and shows good decision making a

More ›