lol768

33 ms·

391.
by lol768 6y ago
> Element is less polished than Signal app To be fair: I've been pleasantly impressed with Element actually from what I've seen of Mozilla's set-up. I can format my text, I can run it in my browser and it starts up very qu
392.
by lol768 6y ago
> For anyone interested, such a binary ends up at least 50MB .. if you don't make any use of assembly optimisation/trimming, sure. $ dotnet publish -c Release Microsoft (R) Build Engine version 16.8.3+39993bd9d for .N
393.
by lol768 6y ago
> And you end up with a console app that is 20-100MB What are you talking about? It's 1.4MB. This is the easiest thing in the world to verify: $ dotnet publish -c Release Microsoft (R) Build Engine version 16.8.
394.
by lol768 6y ago
This is a disruptive mess - cert bundles with the wrong (now revoked) intermediate were being provided to subscribers as recently as yesterday despite the new intermediate being minted last September.
395.
DigiCert and QuoVadis revoke intermediate certificate without notice(auscert.org.au)
6 points by lol768 6y ago|2 comments
396.
by lol768 6y ago
I think it's completely unrelated to Signal, to be frank. > Naomi Wu has expressed recently that she feels totally ignored in this issue. Yeah; I'd ignore it too if it was reported in a bug bounty programme. It'd obviously
397.
by lol768 6y ago
They've been using these lateral flow tests in the UK quite a bit - particularly for university students returning home/to campus (or at least, that was the plan!). But I'm not convinced the data on their effectiveness really
398.
by lol768 6y ago
> With respect I think you're speaking outside the bounds of your knowledge of these systems. I'm not going to argue with you on this; you're entitled to your opinion :) > That is just table stakes. Have you ever found
399.
by lol768 6y ago
> Security through obscurity isn’t an invalid technique if you also are doing security through cryptography too It becomes a distraction vs actually writing a secure set of endpoints in the first place.. Folks get a sense of security fro
400.
by lol768 6y ago
> Disagree that hardening the API server is any better. This is the approach common in the US market, and my team has broken everything available there too. Also disagree with insinuations that these banks don't have good, modern st
401.
by lol768 6y ago
There was a UK retail bank that tried a strategy like this. I maintained (and still do maintain) it was security through obscurity and a waste of engineering effort that should've been spent on actually hardening the banking API server
402.
by lol768 6y ago
Sounds like there is already a working patch on GitHub, but it's not been reviewed because an MR wasn't opened on GitLab?
403.
by lol768 6y ago
So, January 2019 in London Commissioning Region hospitals: 1033 open adult critical care beds; 882 in use. 85% utilisation. Best-case forecast Jan 2021: 2078 critical care beds required, 1,661 available (increase of ~600). Forecasted 125% u
404.
by lol768 6y ago
Is there any published technical evidence to look at which actually implicates JetBrains? CVE or a POC? Publication of the poisoned build of the CI software? Indicators of compromise?
405.
by lol768 6y ago
Is there any published technical evidence to look at which actually implicates JetBrains? CVE or a POC? Publication of the poisoned build of the CI software? Indicators of compromise?
406.
by lol768 6y ago
Yeah, I was thinking this. Is it not possible to vouch for a post? It's a bit more important than the usual "political" posts that get flagged.
407.
by lol768 6y ago
These events seem to be happening almost on a monthly basis now. IRC was never this unreliable and at least with netsplits it was obvious what had happened because you'd see the clients disconnect. IME messages just fail to send with S
408.
by lol768 6y ago
Monzo do this as their primary authentication mechanism. No complaints with it.
409.
by lol768 6y ago
Reading the judgement the key points are on pages 116 onwards and the extradition is denied under section 91(3) of the EA 2003 which reads: > The condition is that the physical or mental condition of the person is such that it would be u
410.
by lol768 6y ago
Is there a defence to using the code because you had a good faith belief it was licensed in such a way that would have been fine, if the original author did have the right to grant said license?
411.
by lol768 6y ago
> Yeah, credit history is something I never really cared about as I don't have any interest in getting a loan or touch anything else related to credit histories, so I'm probably a bit biased in that. Fair enough! I wish that w
412.
by lol768 6y ago
> This is location dependent though Definitely true. > Meanwhile in Europe, there is no reason to have a credit card instead of debit Ehh, I'm not sure I'd agree 100% with this one. You can certainly get by with just a debit
413.
by lol768 6y ago
This depends upon the geographical location and indeed, the amount you're spending. I'd definitely use my Amex for items over £100 (for Section 75 protection) but under that amount my understanding was that you're reliant on
414.
by lol768 6y ago
We need to protect the integrity of the information so that kit's not abused to serve malware or pages that exploit zero-day vulnerabilities to the end-user when they browse on an insecure network (which, if Snowden's publications
415.
by lol768 6y ago
> So, the toxic dose of Tylenol is only 2.5X the active dose The effective dose starts at 500mg. Most people are likely going to be taking 1 or 2x 500mg tablets for acute issues - and I'd argue that's often enough for most case
416.
by lol768 6y ago
This is a case that has interested me for a while.. Photos definitely look the same. It seems a bit odd that Collier County sheriff's office haven't been able to confirm this yet, though?
417.
by lol768 6y ago
> I've posted elsewhere that my cynical view of the UK gov approach is that they are talking tough and doing nothing. So maybe I'm biased? It's felt like this with all of the tiers to be honest. They just don't go far
418.
by lol768 6y ago
So it's completely ineffective on any site with a half-decent CSP? Neat.
419.
by lol768 6y ago
> I guess they either don’t want to start the repo with a gazillion commits They could've cut it down to e.g. the last n changes to a page if this was a concern. Honestly the whole migration feels like it has happened before things
420.
by lol768 6y ago
All of the contributor names, edit descriptions etc have been lost. It's not history, it's just snapshots of content.

More ›