metafunctor

33 ms·

301.
by metafunctor 8y ago
Do you keep your keys on the proxy host, then? Otherwise, "ForwardAgent yes" and you're back to the same situation.
302.
by metafunctor 8y ago
Here are a few ideas that might help. Use separate keyboard-interactive 2FA (I recommend google-authenticator) for production ssh access. Use a key system which requires confirmation or a PIN to authenticate (such as a Yubikey). Use a pers
303.
by metafunctor 8y ago
Not really. The GDPR is overridden by various laws relating to national security, terrorism laws, and whatnot. It does not prevent or forbid EU nations from collecting intelligence on their citizens.
304.
by metafunctor 8y ago
The first programming language I learned was Microsoft BASIC on an MSX. I then moved on to learn Z80 assembler, Pascal, X86 assembler, C, Scheme, Java, Python, Haskell, Standard ML, Objective C, Rust, and whatnot. I believe I'm a pre
305.
by metafunctor 8y ago
Neutral might not exist. > It seems to me that Facebook and Twitter are trying to have it both ways. Of course Facebook and Twitter are trying to have it both ways, and, indeed, all ways — there are many more ways for people to communica
306.
by metafunctor 8y ago
Thanks for pointing this out. The first entry on the Borg FAQ [1] is “can I backup from multiple servers into a single repository” and the answer is basically “yes, but it might be slow”. Seems to me like it should say “not really, it&#x27
307.
by metafunctor 8y ago
Can you give more details on how the encryption is weak?
308.
by metafunctor 8y ago
Unions have special protection under the law, which means they are more of a regulated market than a "free market". It's government (or corrupted politics, depending on your viewpoint) all the way down, man.
309.
by metafunctor 8y ago
Yeah, just had an amazing two years of trouble-free wireless audio conference calls. Never again!
310.
by metafunctor 8y ago
Not to put a too fine point on it, that’s bullshit. I can plug in wired audio on all of my Apple products, except the Apple TV. I did like the optical audio the older models had. By default, I much, much prefer wireless.
311.
by metafunctor 8y ago
I was kidding, of course. Profit margins, even for Google, let alone a small digital business, are a fraction of revenue, typically negative.
312.
by metafunctor 8y ago
Apple's insistence that I should use wireless for audio is a large reason I'm doubling down on Apple products. I don't need the tangled messes of headphone wires or the extra opportunities for water ingress. Please please l
313.
by metafunctor 8y ago
Nah, I think 10x the fine and you're really starting to hurt.
314.
by metafunctor 8y ago
According to Apple, “in order to provide useful location-related information in Maps, Calendar, Photos, and more. Significant Locations are encrypted and cannot be read by Apple”.
315.
by metafunctor 8y ago
There’s https://upcloud.com/ from Finland. They offer basic virtual machines at OK prices with some pretty fast disks.
316.
by metafunctor 8y ago
Probably “An evolved circuit, intrinsic in silicon, entwined with physics” [1]. They let a genetic algorithm come up with a better FPGA circuit, but it no longer worked when non-contributing parts of the circuit were pruned. [1] http:&#x2F
317.
by metafunctor 8y ago
You can compare the outputs of two programs. Sure, a TC program may not finish to produce output you can compare, but in my experience that's only a theoretical problem.
318.
by metafunctor 8y ago
Dhall appears to be expressive enough that I can't see why you wouldn't have to refactor and maintain the Dhall code? Writing Dhall code look exactly like programming to me, and the programmer must possess the necessary programmin
319.
by metafunctor 8y ago
What? ISPs, for example, eavesdrop us all the time, and they do it quite casually. They will modify your unprotected HTTP requests, inject ads, log everything they are able to, and sell the data if they can.
320.
by metafunctor 8y ago
Preventing script kiddies or dickhead ISPs logging your traffic is meaningful privacy. That is, in fact, the main threat everyone should protect against. Privacy against script kiddies and dickhead ISP is valuable. Not every scenario i
321.
by metafunctor 8y ago
The IT Crowd was great, I never knew there was a website for Reynholm Industries :) Sadly, the certificate on this website has expired last summer.
322.
by metafunctor 8y ago
Selling/customer development is a skill you can learn—and absolutely must learn if you want to hack it as a single founder. The real trap is staying in your comfort zone.
323.
by metafunctor 8y ago
You are misunderstanding how the same-origin policy applies to scripts. If a page on mysite.com loads evilsite.com/tracker.js, then tracker.js runs with the same "origin" as the rest of the page that loaded it. The script h
324.
by metafunctor 8y ago
No, I'm describing XSS. You know, where an attacker injects scripts on your pages, and the attacker's requests come from the same origin as your own requests. In CSRF, the attack is hosted outside the target site. I don't
325.
by metafunctor 8y ago
It seems that you are saying that cookies are more protected from third party code than your own code. That is incorrect. Let's get specific: let's say you have a page on mysite.com. When a user signs in, the server sets a HttpO
326.
by metafunctor 8y ago
The scenario is XSS, where the attacker manages to run their JS code on your page, and get all the same privileges as your own code on the page. Whatever mechanism your own JS code uses to perform authenticated requests, the attacker can d
327.
by metafunctor 8y ago
We are talking about XSS, where an attacker can run their JS code on your page. If the attacker can run JS on your page, they can already do whatever your signed-in user can do. No need to read the cookie to make authenticated requests, ju
328.
by metafunctor 8y ago
That's true, but if you run untrusted scripts on your site it's pretty much game over, anyway. Why should those scripts limit themselves to stealing tokens when they can send authenticated requests from the browser? To put it ano
329.
by metafunctor 8y ago
Stealing tokens from localstorage or cookies means the attacker can run code in the user's security context. Why would they limit themselves to stealing tokens? Using them outside of the browser would be stupid, anyway, as it would r
330.
by metafunctor 8y ago
If you mean that HttpOnly for cookies protects against XSS, you are mistaken. The attacker will simply generate requests to the secure endpoints rather than steal the token and use it from somewhere else. HttpOnly does not really protect

More ›