mcpherrinm

15 ms·

1. 181.▲
   by mcpherrinm 3y ago

   They will ship images using a probably old kernel with various patches and drivers which may not be in suitable shape for simply including upstream. The vendor may ship this initially, but often won't work on upstreaming the changes or
2. 182.▲
   by mcpherrinm 3y ago

   Sibling comments have already addressed the fact that Filippo is one of the people you're probably "best leaving" cryptography implementation to. The author has actually talked explicitly about "Don't roll your own
3. 183.▲
   by mcpherrinm 3y ago

   Google's CRLSets don't cover nearly the full set of revocations (AFAIK). I don't know the details of how "valid" works, but as the Apple root program has recently required CAs to publish full CRLs, I assume they&#x2
4. 184.▲
   by mcpherrinm 3y ago

   I recently gave a talk on this topic (sorry, haven't written as a blog post yet) https://www.youtube.com/watch?v=4TbtL73ibh0 I do believe revocation in the webpki is important to implement, but it's not great toda
5. 185.▲
   by mcpherrinm 3y ago

   Let me quote two of the entries from the "In Comments" section of https://news.ycombinator.com/newsguidelines.html > Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes.
6. 186.▲
   by mcpherrinm 3y ago

   > Work with code on any machine This is referring to remote editing support. Platform support is in their FAQ, but I agree it should be a bit clearer on the homepage. Perhaps the download button should say "Download for MacOS"
7. 187.▲
   by mcpherrinm 3y ago

   The Arduino is a single-threaded microcontroller running a single code loop, plus interrupts. delayMicroseconds is a busy-wait loop, so is relatively precise (to within a few instruction's execution time. However, interrupts can happen
8. 188.▲
   by mcpherrinm 3y ago

   If files are overwritten or removed in a lower layer, there can be size savings from that.
9. 189.▲
   by mcpherrinm 3y ago

   It sounds like (from the shout-out in the post) they're using https://math.nist.gov/~BMiller/LaTeXML/ to convert the paper's LaTeX into HTML, not from PDF. The most versatile tool I know of for convertin
10. 190.▲
    by mcpherrinm 3y ago

    They are used for many things, like fire, ambulance, railways, harbour operations, police, military, coast guard, and so on. The weaker cipher mode, TEA1, is used when selling the radios to anyone who may not necessarily be an ally or highl
11. 191.▲
    by mcpherrinm 3y ago

    You can install it from their binary releases: https://support.mozilla.org/en-US/kb/install-firefox-linux#w... I think if you do the "system" install, it won't be able to update itself, but the user
12. 192.▲
    by mcpherrinm 3y ago

    my understanding is: Cypress bought the embedded/IoT wifi department from Broadcom, including a bunch of IP, and uses a shared wifi driver with other Broadcom wifi chipsets, with some shared maintainers. The driver in question is brcm
13. 193.▲
    by mcpherrinm 3y ago

    I think they're distinguishing from synthetic benchmarks
14. 194.▲
    by mcpherrinm 3y ago

    You buy a KVM device like the raritan kxiii. That’s a rack-mount unit that’ll support a bunch of connected devices. For each connected device you need a dongle, which is what will plug into the display and usb ports of the server.
15. 195.▲
    by mcpherrinm 3y ago

    These only apply to the new generic TLDs. Country codes can basically do whatever they want.
16. 196.▲
    by mcpherrinm 3y ago

    Running http://whois.nic.$GTLD/ is required, but I believe it's fine to have nothing on nic.$GTLD directly. Some examples: https://whois.nic.sharp http://whois.nic.amazon https://whoi
17. 197.▲
    by mcpherrinm 3y ago

    I use Google DNS because it’s fast and reliable, and close to me. I’m not sure what else I’d use that’s more trustworthy. Certainly my ISP isn’t. Their DNS privacy policy seems acceptable to me, as they’re not using it for ad data: https
18. 198.▲
    by mcpherrinm 3y ago

    Let’s Encrypt publishes legal transparency reports on what law enforcement asks us. https://letsencrypt.org/documents/ISRG-Legal-Transparency-Re... We’ve never been ordered to issue a certificate. While I am a Let’s En
19. 199.▲
    by mcpherrinm 3y ago

    At least for Let’s Encrypt, you can also use CAA to require a specific account as well or validation method. This could prevent your hosting provider from issuing on your behalf if they don’t control DNS. https://letsencrypt.org&
20. 200.▲
    by mcpherrinm 3y ago

    DJB is obviously a talented cryptographer, but he’s also clearly got a big ego. He’s drawing unfounded conclusions to discredit the work of other cryptographers whose work was chosen over his own.
21. 201.▲
    by mcpherrinm 3y ago

    If you have an LTE modem or hotspot with a removable antenna, you can do this sort of thing nearly exactly the same, just need to tune the antenna for different frequencies. Phones tend to not have swappable antennas so you’re limited to do
22. 202.▲
    by mcpherrinm 3y ago

    They've been around for a very long time for medium and large format cameras: https://en.wikipedia.org/wiki/Digital_camera_back This product definitely looks like it would be challenging to design an manufacture.
23. 203.▲
    by mcpherrinm 3y ago

    You can plug a USB HDMI capture dongle into tablets and do this. Any webcam viewer would probably work to view it, though there's dedicated apps intended for this like https://orion.tube/ on iPad. I know there's o
24. 204.▲
    by mcpherrinm 3y ago

    I'm one of the people contributing to the bounty because if it really is a password-crackable phrase, it would be of significant historical impact to know.
25. 205.▲
    by mcpherrinm 3y ago

    Dns over Quic is RFC 9250. Quic is RFC 9000. Quic is the transport that underlies HTTP/3. While it started at Google, many others were involved in its design and deployment, including the browsers, web servers, and large parties like t
26. 206.▲
    by mcpherrinm 3y ago

    Growth, plus reliability by reducing the SPOF. We are beginning to hit the limits of what we can do with the current single-writer database in this hardware. As well, the size of the data is larger than I’d like for a single MariaDB cluster
27. 207.▲
    by mcpherrinm 3y ago

    Yes. Let’s Encrypt has two locations, each of which has fully redundant hardware, so that’s a minimum of 4. We actually have a few more. (I work at Let’s Encrypt)
28. 208.▲
    by mcpherrinm 3y ago

    The same hardware is still in use today, and I expect will continue to be used for some time. The biggest thing that’s happened in the meantime is reducing load on the databases by pushing some of the OCSP load out to redis caches: https:&
29. 209.▲
    by mcpherrinm 3y ago

    Some hotel chains like Hyatt support nfc keys in Apple Wallet. Because whatever microcontroller runs that is low-power, it can continue working after your phone battery is (nearly) dead too. I know other locks use Bluetooth from an app whi
30. 210.▲
    by mcpherrinm 3y ago

    This article is very vague, but I’ve heard complaints on HN before about Starlink cgnat not working well with Cloudflare. Is this just announcing Starlink is peering privately with Cloudflare now, perhaps solving some of those issues? Or is