merb

58 ms·

721.
by merb 6y ago
maybe that will help microsoft teams to implement that functionality under linux.
722.
by merb 6y ago
you basically told somebody to roll his own crypto. that is a stupid idea. using refresh tokens and access tokens in a standard way is way more secure than rolling your own, this stuff is already pretty hard. of course one could go with a s
723.
by merb 6y ago
which they also do for years.
724.
by merb 6y ago
3. use cross signing with name constraints to not have this problem https://tools.ietf.org/html/rfc5280#section-4.2.1.10
725.
by merb 6y ago
let's encrypt does not like that use case btw. because you would need to validate the cert and store it somewhere and then download it to the specified box, since the service can only be inside an intranet.
726.
by merb 6y ago
davmail is a huge waste of resources and in 2022 it won't work as well as it did on a server.
727.
by merb 6y ago
because it would've probably failed with other password managers and probably browers (if there are people who save their card details to a browser) and it would probably also fail with tab.
728.
by merb 6y ago
on hyper-v windows is kind of a vm aswell.
729.
by merb 6y ago
that is a security issue on it's own. you should never have an openredirect bug, that's why openid servers need to store redirect uris somewhere and validate them.
730.
by merb 6y ago
no referer is an important way to screw your security in an oauth2 flow. with oauth2 a correct configuration would be Referrer-Policy: no-referrer and enforcing a secure state param and csrf.
731.
by merb 6y ago
I'm not sure this is true... most tech channels had zero background with that. I mean linus tech tipps (one of the biggest), started to make youtube videos with limited resources and basically was asked by his old company to help out,
732.
by merb 6y ago
why evenn care about JMAP. better support EWS/ActiveSync. JMAP is still in such an early stage and no matter if proprietary or not, there is still no protocol out there that does the same things than EWS/ActiveSync.
733.
by merb 6y ago
well you can turn the header off pretty easily and you won't see many sites are breaking (alexa top 100), of course some wierd sites think it's important to use it, but because of the madness of referer there are so many things th
734.
by merb 6y ago
yeah, my company aswell, we only need 1 required reviewer, but paying for that like $19 per user (we are 5, so $95 for that per month) is a little bit ridiculous. granted it probably comes with support, but as a small company you do not car
735.
by merb 6y ago
why tf should removing Referer break sites? who uses Referer?! the only thing that Referer brought were privacy leaks.
736.
by merb 6y ago
actually under hyper-v windows is a vm aswell, it's just not visible. it's the reason why the hyper-v hypervisor platform was needed.
737.
by merb 6y ago
no not in wsl2. (you can, but there is no need for that) (btw. disk storage can be too small, but that is the only problem that can occur https://docs.microsoft.com/de-de/windows/wsl/compare-version... )
738.
by merb 6y ago
k3s supports that. in fact rke2 is basically driven by k3s
739.
by merb 6y ago
they aren't, everything from germany works.
740.
by merb 6y ago
which is also not true.
741.
by merb 6y ago
https://github.com/juicedata/juicefs has an index implementation and is backed up by object storage.
742.
by merb 6y ago
well somebody could sign the driver with an authenticode cert. just costs some bucks and need to rewrite the publisher.
743.
by merb 6y ago
I still miss thunderbold on the ryzen mobile laptops. I still hope that tb4 changes things.
744.
by merb 6y ago
sometimes waste is even dumped just into the earth: https://gizmodo.com/the-mob-is-secretly-dumping-nuclear-wast... https://www.theguardian.com/world/2007/oct/09/italy.nuclearp...
745.
by merb 6y ago
?! sso means no relogin between multiple applications/platforms which works since day 1 on mac and linux. what does not work is seamless sso over the os (logon+browser+logged into office 365), but even that works with a good configured
746.
by merb 6y ago
thats a fairy tail. mozilla killed ie for home users, but on the business side (a way bigger market) that was not true. mozilla also basically did not target that market that much, I meaan they had no adm/admx templates and msi files f
747.
by merb 6y ago
it's always a tradeoff between speed and quality. and most of the time cpu offers more quality while hardware encoders are faster, this is mostly because gpu encoders have a different use case than cpu encoders.
748.
by merb 6y ago
yes but its more like vitess. which is basically more like sharded masters, but most of the time this works way better than something like galera or bdr.
749.
by merb 6y ago
> i recently started diving into postgresql and it seems to me that there is a patchwork of HA solutions (with patroni being the most feature-full) but no real multi-master solution for postgresql released under an open source license. t
750.
by merb 6y ago
well because they are the only cloud vendor with a HA master-master postgresql database (citusdb managed) it probably is also a selling point.

More ›