kuschku

38 ms·

631.
by kuschku 3y ago
Then they'd still need to sleep at some time ;)
632.
by kuschku 3y ago
> Also, I'm not "Jia Tan"! You're just going to have to trust me on both of those claims. :-/ No need to trust – it's actually easily verified :) Your activity pattern (blue) is entirely different than jia t
633.
by kuschku 3y ago
HN "intentionally" breaks all unicode URLs as HN approaches the tradeoff between i18n and confusability from a very US-centric PoV
634.
by kuschku 3y ago
Even if it hadn't been loaded by libsystemd, liblzma is also loaded by SELinux, which would have allowed the same vulnerability via a different vector. Personally I think projects like fedora silverblue/kinoite and other container
635.
by kuschku 3y ago
I've spent a lot of time analysing activity patterns, it's not as simple as you think, especially once you combine IRC, GitHub interactions and commits themselves. These are my own hours for example (from a few years ago): https:
636.
by kuschku 3y ago
That's exactly what Jia Tan did, but this failed a few times during rebases as well as with commits done from the web UI. Additionally timestamps from comments on GitHub itself are trusted information and match the UTC+2/UTC+3 dat
637.
by kuschku 3y ago
> Re the falsifying working hours, wouldn’t these boffins be able to automate Git commits at certain times or even pass instructions to another team who is working the late night shift to post these changes etc. Is it possible? Definitel
638.
by kuschku 3y ago
It's not that simple. You can falsify a lot of things, but you can't easily falsify the working hours at which you reply to issues or push commits without taking a lot of care. Especially when DST has to be considered. Sure, the +
639.
by kuschku 3y ago
libsystemd had already removed the lzma dependencies last week, before the backdoor became public, to reduce external dependencies.
640.
by kuschku 3y ago
It is. Other european mail services, e.g. DHL, have been offering tracking for every new stamp for a while now.
641.
by kuschku 3y ago
See https://github.com/justjanne/stickers/blob/main/designs/ssl%...
642.
by kuschku 3y ago
My father just had a heart attack, caused primarily by red meat and stress (as he's already living very healthy except for these two factors). The current recommendation is down to 50g a day. If we look at how prehistoric humans actual
643.
by kuschku 3y ago
What? Laptop + 32G RAM is Laptop + 100€. With a refurbished thinkpad you can get reasonable compile times for as little as 600€. Stop buying macbooks if you want lots of RAM and performance for a low price.
644.
by kuschku 3y ago
So how do I get one of these with my colo'd machines?
645.
by kuschku 3y ago
> Public keys have another problem: people lose them. Google had to give up on letting developers manage their own keys eventually. The OS still understands that, but most apps are distributed through the Play Store and when you do that
646.
by kuschku 3y ago
Different stores can have different rules and moderation. I'm not going to argue about the signal to noise ratio between e.g. fdroid vs Google Play, but it should be obvious that while the signal looks the same for both, the noise is v
647.
by kuschku 3y ago
Apparently F5 shipped it in production in their proprietary version, while it was not compiled into the free version. So technically the CVE should be filed against NGINX Plus, not nginx ;)
648.
by kuschku 3y ago
Whether you develop new features on main gated by compile flags or on separate branches shouldn't have an effect on CVE assigments. I'm pretty sure that setting arbitrary compile flags is enough to cause vulnerabilities in most so
649.
by kuschku 3y ago
And this is the cause of the conflict. Nginx, the open source project, was safe. No CVE should be assigned to it. NGINX PLUS, a separate and independent corporate product, was vulnerable. A CVE should be assigned specifically to it. The iss
650.
by kuschku 3y ago
These bugs only occurred if you compiled nginx yourself with custom flags during build. Should you be able to file CVEs against code posted in GitHub comments? StackOverflow Answers? Experimental branches on a maintainer's personal for
651.
by kuschku 3y ago
Luckily that's a rare thing and the vast majority if commercial real estate has no such rules whatsoever, even on main street.
652.
by kuschku 3y ago
Kotlin has basically replaced java for many spring shops. It's really common in backend nowadays.
653.
by kuschku 3y ago
How do I manually setup WebAuthn 2FA with this project? Please give me a guide. Because afaict, the only way to get proper 2FA with this project is by paying them for SSO.
654.
by kuschku 3y ago
And that's how I ended up forking dozens of projects spending a lot of my free time just maintaining my patches. Still better than having to give in to this open core enshittification.
655.
by kuschku 3y ago
If only enterprises need SSO, please tell me how I'd set up WebAuthn 2FA for these services without SSO. Also, please explain how I'd change my password across this project, miniflux, seafile, postfix, dovecot, radicale, quassel,
656.
by kuschku 3y ago
For software to have secure authZ/authN, it should have robust 2FA mechanisms including WebAuthn, properly integrate with access tokens, and support scoped third party access. Most software only offers simple username/password aut
657.
by kuschku 3y ago
The only one giving stuff away for free is the author of the PR. And yet, you're calling that person entitled.
658.
by kuschku 3y ago
"get" "for free"? Where do users expect to "get" something for free? In fact, users are offering something "for free".
659.
by kuschku 3y ago
If someone builds a feature faster, better, and more open than the paid alternative and gives it away long before the enterprise version even announces the feature, where is the entitlement?
660.
by kuschku 3y ago
If the community is able to implement new features better, faster, and more open than the company, then the company probably should be pushed out of the project. If that has to happen via forking and directly competing with them, so be it

More ›