lol768

81 ms·

871.
by lol768 8y ago
> How mature is this project? For some reason (possibly just scars from years past), I'm pretty wary of IRC clients that aren't mature, due to concerns around security. I've reviewed this from a security perspective and wa
872.
by lol768 8y ago
> I'd be interested to know if anyone actually seriously uses something like this. I can't imagine there is much crossover in the irc audience and the people who would want to use a web based client. Even less so when you need
873.
by lol768 8y ago
> For beta user, back when Monzo wasn't yet a bank account, the only to put money on it was to pay by card. This is incorrect - it was possible for a long time to top-up via bank transfer. Certainly during beta. It simply required u
874.
by lol768 8y ago
I see an update 7 minutes ago. >12:56 British Summer Time >The majority of restore processes have completed. We anticipate all data stores will be fully consistent within the next hour.
875.
by lol768 8y ago
Or use CSPv2's frame-ancestors.
876.
by lol768 8y ago
> Then the LEO just asks for the second password. But it's entirely _optional_ to use. They cannot prove there is a second password.
877.
by lol768 8y ago
>DNS over HTTPS is a great idea Why is it better than DNS over TLS? All I can see here is increased overhead.
878.
by lol768 8y ago
> I tried Flow with VSCode and found it rather flaky. Had to open up files to get autocomplete etc. Sounds like an editor issue. Have you tried it with something like IDEA/WebStorm where there's a bit more code intelligence?
879.
by lol768 8y ago
> Don't presume anyone writing PHP is a trainwreck. I'm unsure anyone here is disputing this - my original comment said as much: > Can you write secure code in PHP? Absolutely. But it's more effort and easier to get wro
880.
by lol768 8y ago
>No cutting edge incomplete frameworks So what, you rewrite a templating engine every time you want to make an application that outputs user data? Or are you reliant on making damn sure you always call htmlentities every time you echo
881.
by lol768 8y ago
If I may give some feedback: I took a look at the https://serverjs.io/ page. The only text is "server.js for Node" which literally just tells you the package name and the product it's for (which I could'
882.
by lol768 8y ago
> I feel like fail2ban failing open is a good thing. If it fails closed you can't SSH into the server. If it fails open it's just as though you aren't using fail2ban. But it fails open whilst you think there's a lay
883.
by lol768 8y ago
It's the UK's effective implementation of it.
884.
by lol768 8y ago
https://services.parliament.uk/bills/2017-19/dataprotection.... Hasn't received royal assent yet?
885.
by lol768 8y ago
Hadn't heard of unroll.me prior to this, but it looks like nothing of value was lost. GDPR doing its job and it hasn't even come into (en)force(ment) yet! Do they do anything that a quick grep for "Unsubscribe" can'
886.
by lol768 8y ago
Fairly standard stuff, definitely interesting to see all the IoT credentials attempred. I'd recommend SSHGuard over fail2ban though, I seem to remember the version of fail2ban in the Debian repos completely choking on IPv6 and failing
887.
by lol768 9y ago
Agreed, not personally a fan. Maybe I've just been using MVC for too long to appreciate the benefits, though..
888.
by lol768 9y ago
>Plus, 2% cash back on all purchases is pretty nice. This rate of cashback seems to be a very America-centric concept. You're unlikely to get above 0.5% with a Visa Credit card in the EU.
889.
by lol768 9y ago
Is there any evidence for this (e.g. response headers from a site using cURL on and off Vodafone's network)?
890.
by lol768 9y ago
1.1.1.1 supports DNS over HTTPS (and TLS). You generally need a local tool running though which acts as a local resolver and does the DNS lookups for you (using HTTPS).
891.
by lol768 9y ago
Whitelisting entire CDNs like that is incredibly dangerous, see https://github.com/cure53/XSSChallengeWiki/wiki/H5SC-Minicha...
892.
by lol768 9y ago
My browser at least seems to struggle to download the file at https://ai.danruta.co.uk/webassembly/mnist.js - how big is this file in total?
893.
by lol768 9y ago
This is disappointing. Why isn't there a public blog post about this? Why is the "more information" page behind an auth wall?
894.
by lol768 9y ago
> Does anyone have an example of this webpage? It's a requirement when a CloudFlare'd site is in "I'm under attack" mode.
895.
by lol768 9y ago
Unsure if it's just me, but the article doesn't seem to render the text properly: https://i.imgur.com/donfa0W.png With that said, definitely an interesting read and reassuring to see that you don't need a mil
896.
by lol768 9y ago
The default referrer policy is "no-referrer-when-downgrade", so it won't send a Referer header to a "less" secure destination (HTTPS -> HTTP), but it will send one to an "equally" secure destination (HT
897.
by lol768 9y ago
Sounds like wildcard certs have effectively been delayed a month until late February, then? The original blog post: > Let's Encrypt will begin issuing wildcard certificates in January of 2018 I guess it didn't say from their re
898.
by lol768 9y ago
And on the flip-side, we have MathML which the Chromium team decided to drop, fighting against an incredibly useful and performant (in comparison to other Javascript-based implementations) feature supported by Firefox and Safari which made
899.
by lol768 9y ago
> That said I switched to firefox and this (and lack of U2F 2nd factor auth) is the only pain point so far You should be able to flip "security.webauth.u2f" depending on your release channel. If not available yet, I think it wi
900.
by lol768 9y ago
As someone who's not really used Chrome aside from browser testing (which used to involve a lot of cursing because flexbox min sizing was broken), can you explain what Chrome profiles offer over e.g. container tabs? Are you using them

More ›