minitech

36 ms·

421.
by minitech 7y ago
Dynamic patterns require escaping, resulting in unnecessary complexity and overhead.
422.
by minitech 7y ago
This is exactly the opposite of a forcing HTTPS problem. When HTTPS isn’t everywhere, HTTPS gives a false sense of security. When it is, browsers can stop emphasizing it. We’re already well down that path, with padlocks no longer being gree
423.
by minitech 7y ago
So because you think it’s not a good enough defense against three-letter agencies, you’ll let everyone else continue to eavesdrop too? Controlling a CA isn’t even enough to strip confidentiality, there needs to be an active (private keys!)
424.
by minitech 7y ago
German quotation marks, so not really correct for English. And the backwards apostrophes I don’t think would even be correct in German?
425.
by minitech 7y ago
It does commit deletions. It doesn’t commit untracked files. If you really want to track every new file unprompted, an alias can be made for `git add --all && git commit`.
426.
by minitech 7y ago
It’s only useless if you don’t know what perfect forward secrecy is and would rather complain than look it up. Yes, this feature is provided by Telegram and Signal (probably WhatsApp too). It makes it so someone who compromises your key can
427.
by minitech 7y ago
> The idea behind the staging area is that you obviously need this all the time, because reasons, so let's force you to go through the hassle for every commit you might want to make. I do need it all the time, and simulating it with
428.
by minitech 7y ago
But only once before getting back to the same state, so it’s a bit confusing.
429.
by minitech 7y ago
It’s not wrong, just not as short as it can be. Comparing things that aren’t booleans with zero explicitly is a common style choice.
430.
by minitech 7y ago
And “Javascript would have categorically improved on this compared to more traditional multi-threaded solutions” remains true nevertheless.
431.
by minitech 7y ago
You can do that with any web server, just by serving trackers the same way as all other content.
432.
by minitech 7y ago
If you meant “some daily activities make more showers required”, you worded it in a weird way.
433.
by minitech 7y ago
It’s information for fingerprinting, sure, but not sharing the page you’re visiting from for every link click is much more important for privacy IMO.
434.
by minitech 7y ago
Bubblewrap ( https://github.com/containers/bubblewrap ) on Wayland. You might have to make a chroot sort of environment for it for it to be convenient enough to use in practice unless you’re okay with exposing the (read-
435.
by minitech 7y ago
Not running pasted commands automatically isn’t a security feature on its own, because the paste “brackets” of bracketed paste can be inside the clipboard. It’s kind of ridiculous that most terminal emulators don’t defend against that by de
436.
by minitech 7y ago
What does measles vaccination in Brooklyn have to do with syringe reuse in Ratodero?
437.
by minitech 7y ago
I’m pretty sure only administrators can Run as Administrator?
438.
by minitech 7y ago
Which UAC bypasses have they refused to fix?
439.
by minitech 7y ago
Likely? I’m inclined to believe that there’s something wrong with your addon, rather than Firefox being anticompetitive about an extension that doesn’t compete with a feature that doesn’t exist yet.
440.
by minitech 7y ago
Provide tools to anonymize writing, probably.
441.
by minitech 7y ago
I like how you’ve been saying for 3+ years that it’s possible to recover a SipHash key based on its output, something it’s specifically designed not to allow, but never given any evidence for it.
442.
by minitech 7y ago
That’s… plainly wrong. `npm unpublish --force your-package` would really just unpublish your package.
443.
by minitech 7y ago
What do you mean?
444.
by minitech 7y ago
> And enough people put it into eval that several companies started prepending while(1); to their JSON messages. while(1); existed to work around a browser vulnerability where the same-origin policy could be bypassed by including cross-o
445.
by minitech 7y ago
Can you explain why? (Not looking for any great detail, just a starting point.)
446.
by minitech 7y ago
> Why, on a seller standpoint, would it be a bad thing to know the demand curve ? Dunno, but it only makes sense to use “understate” if you think it is a bad thing. The comment is about a wording mistake.
447.
by minitech 7y ago
> How do you know that he deliberately tries to make women uncomfortable? He doesn’t do it deliberately (probably). The accusations are only that he does it. > I don't think any women is comfortable near a fat, bearded virgin tha
448.
by minitech 7y ago
Now it doesn’t work if the string you want to replace has any regex special characters. One JS idiom for replace-all is str.split(before).join(after)
449.
by minitech 7y ago
> But it can change under your feet – someone might change a function to be async, that used to be sync, and now your code is broken. Someone might change a function that returns a single value to return an array, and now your code is br
450.
by minitech 7y ago
> and the only way to know if you need await is to peruse docs (hoping that they're accurate) or judiciously sprinkle it everywhere. Knowing whether what you’re calling is async is part of knowing what you’re calling at all. Sprinkl

More ›