kiallmacinnes

13 ms·

91.
by kiallmacinnes 8y ago
Exactly :)
92.
by kiallmacinnes 8y ago
Wrapper or not, building a wrapper that works for as many use cases for as long a time as Shorewall has is something. Frankly, it sounds like your suggesting that because he didn't invent the underlying network stack, or network protoc
93.
by kiallmacinnes 8y ago
Back when I worked at HP, our anti-phishing training even had a joke in it about how, yes, all HP URLs look exactly like the phising URLs they were describing... What's with https://h20195.www2.hpe.com/ ? Why?
94.
by kiallmacinnes 8y ago
Sure.. but Phone, Tablet, Laptop, Desktop, Office Desktop, etc. I want my chat apps to work on all, be sync'd on all, and be secure. (Though I'm not convinced the proposal in the article is all that secure - as others have pointed
95.
by kiallmacinnes 8y ago
I don't even know what to make of this comment. Nobody is forcing you to interact with those "new users", if you don't like them, ignore them. Frankly, if everyone had your attitude, your Linux community will be dead and
96.
by kiallmacinnes 8y ago
I agreed, right up until the unnecessary second paragraph!
97.
by kiallmacinnes 8y ago
Probably just timing & competition from other articles... Often an article is submitted twice, and the second attempt gains traction.
98.
by kiallmacinnes 8y ago
The bank still controls this delay, and deems it acceptable - you can't extend the delay, and use the extension to withdraw thousands and thousands of extra euros! Chances are, the costs of a real-time system, vs the cost of unauthoris
99.
by kiallmacinnes 8y ago
You're absolutely correct, but change semantics changes how you deal with network failure, there not entirely independent - and I'm aware my example is likely too simple, but typing a better one on a phone is hard :)
100.
by kiallmacinnes 8y ago
I'd much rather see my edit form shown again, with my content still in it, and a conflict warning... Nothing worse than loosing that 20 minutes of typing to a conflict!
101.
by kiallmacinnes 8y ago
Yes, In my opinion, you're missing the user experience aspect. Two of the three should be rejected - not overridden. - so the users get the feedback they expect, rather than reloading the page and seeing something totally different. A
102.
by kiallmacinnes 8y ago
ATMs are a great example of a system that really don't need a two phase commit protocol. You have an account, it has a balance, and the transaction is a subtraction from the balance. A dumb ATM would read the balance value, subtract, a
103.
by kiallmacinnes 8y ago
I see an issue with that - but it's possible I'm too paranoid when it comes to many third parties being able to issue certificates for my domain on names I wasn't expecting.. Each to their own! Either way - assuming restricti
104.
by kiallmacinnes 8y ago
I think the parent poster was referring to the fact that Cron jobs can act purely on local state, and that's OK. For example, if I had a traditionally deployed (i.e. not in K8S / a PaaS / similar) backend app that accepted fi
105.
by kiallmacinnes 8y ago
I love how complex this has become. Debian now needs to build a custom API, or use DDNS secured just right for LE verification records (which would give mirrors full access to obtain any debian.org cert, as the DNS-01 challenge doesn't
106.
by kiallmacinnes 8y ago
That's not always true though, and it can be really hard to tell if a particular combination is going to make things better or worse. e.g. the "Breach" HTTPS+Compression vulnerability. To continue your analogy: The rope gets
107.
by kiallmacinnes 8y ago
ftp.<COUNTRY>.debian.org is unique per country, however in many cases, there are multiple mirrors in a given country.
108.
by kiallmacinnes 8y ago
The signature method used by Linux mirrors has existed longer than HTTPS has, there's nothing homebrew about it.
109.
by kiallmacinnes 8y ago
One thing that wasn't touched on - the mirror network. There are 100's of mirrors for all the major distros ran by third parties, if e.g. Debian wanted apt over HTTPS, they would need to hand out a debian.org SSL cert+key to all o
110.
by kiallmacinnes 8y ago
In fairness, this is an understandable mistake for any automated system to make, even more so when compared to Amazon thinking everything is a consumable I repurchase every month. Hint to Amazon: not everything is a consumable ;)
111.
by kiallmacinnes 8y ago
According to your own linked article, target does not store the PIN numbers. What happens is, the PIN pad encrypts the PIN code and other payment info, using a key known only to the card issuer (i.e. VISA). This encrypted data then finds it
112.
by kiallmacinnes 8y ago
CRL and OSCP have been asked for for a very long time! I don't see them coming anytime soon. The golang TLS library author has a thing against them, so chose to not implement them[0]. Personally, I think he's wrong. He's desc
113.
by kiallmacinnes 8y ago
Oh wow, I forgot about shoutcast and icecast, it's been a while! Looking around, I see those stations still exist!
114.
by kiallmacinnes 8y ago
Serious question, I know, I know, everyone is sick of the word .. I'll not use it! .. but: How does the UK leaving the EU affect it's ESA membership? Can the UK continue to use the French territorial launch sites as easily as they
115.
by kiallmacinnes 8y ago
While I'm sure restrictions like this exist in government contracts everywhere, I suspect companies working government contracts are a tiny proportion of the whole. i.e. in the general case, these restrictions don't exist & co
116.
by kiallmacinnes 8y ago
> issues closed with no linking comment to where the actual solution is This does annoy me. I'm not sure theres a great solution though. Should the maintainer create a new forum post of behalf of the user? Probably not, often with s
117.
by kiallmacinnes 8y ago
Completely agree. Doing a few of these is fine, but for most people, it'll get pretty boring pretty fast. Add in the business side - finding clients, chasing bills, and the small 3 page sites won't be making you any money unless y
118.
by kiallmacinnes 8y ago
The specs define the ratings in terms of length though, don't they? That suggests to me the tester takes the cable length as an input, and gives a valid rating for the length?
119.
by kiallmacinnes 8y ago
It doesn't, it queries the local assets of installed extensions. Chrome (and I guess other browsers?) provide a way to do this, so the HTML etc injected by an extension can reference assets shipped with the extension.
120.
by kiallmacinnes 8y ago
C&D letters are written by lawyers. They don't appeal to your empathy over the PII of other users, they state facts and appeal to the legal standing LinkedIn (or $company...) has over the data being used. That said, I have no idea

More ›