mnau

11 ms·

121.
by mnau 2y ago
Isn't that the the usual workflow of security researchers?
122.
by mnau 2y ago
we have attempted to use it for that, but it was really hard and we ended up rewriting from scratch. The activity graph on GitHub says it is mostly dead. There is some activity, but at best it is in maintenance mode. It used to be sponsored
123.
by mnau 2y ago
Didn't they fixed it? https://github.com/MicrosoftDocs/OfficeDocs-SkypeForBusiness...
124.
by mnau 2y ago
Moot point. I was born in Czechoslovakia (.cs). It had whooping few thousands registered names (the biggest of decommissioned TLDs). It was later discontinued and we have .cz and .sk instead. .cs was reborn for Serbia and Montenegro and dec
125.
by mnau 2y ago
What's your point? .io is operated by a Internet Computer Bureau, that is owned by Identity Digital. Identity Digital manages (sponsors/owns) ~30% of TLDs. > Identity Digital / Donuts is either the ICANN-approved sponsor o
126.
by mnau 2y ago
Here is the key thing from the article: > And ICANN typically doesn’t redelegate ccTLDs without the consent of the losing registry. [..] Niue, the Pacific island nation, has been fighting fruitlessly for control of .nu for two decades, f
127.
by mnau 2y ago
Open source projects on GitHub rely on D6 section of GitHub TOS. That is the part where a user declares that when s/he makes a contribution to a project, s/he does so under repository license. Also that you have right to do so (e.
128.
by mnau 2y ago
Pretty much all open source projects on GitHub rely on section D.6 of GitHub TOS (when you submit PR, it's licensed under project license and you have a right to do so). TOS are not just fluff and paper, but legally binding. Granted, w
129.
by mnau 2y ago
The whole point is to move from technical solution (i.e. current approach) to legal one. Not a single response had anything to do with either problem ITA or my comment. I am not sure if you are troll, 10 y/o or gpt1, but have a nice da
130.
by mnau 2y ago
No geolocation is needed. And even if it was, these are technical problems, inherently solve able. So far, we are building walls and replacing mortar with a new one, while attackers bombard us with complete impunity. This is never going to
131.
by mnau 2y ago
You don't need to bomb anyone. Add IP rules at cables inside and out of let's say EU and block it there. Same way we deal with any non-compliance thing. You can't import it. Your server/domain doesn't satisfy requir
132.
by mnau 2y ago
You can serve consent form only to the connections from EU. I have been part of se several GDPR compliance projects and it's the other stuff that's the problem. Data protection officer (recurring cost, even though it is only a par
133.
by mnau 2y ago
More like no will. Does the domain/server implements required level? No? Block connection. Dtto email with automatic response. Is your IP in a botnet? Cut it off. Edit: I already get blocked connection (on target site) because EU regul
134.
by mnau 2y ago
We are not not doing anything wrong, but we are completely neglecting the attacker side. All our actions are defensive. Look at our physical security. Basically nothing is reasonably protected. 99% of stuff (buildings, locks) can be broken
135.
by mnau 2y ago
How big percentage of customers even logged to their home router. It will be way below 10% (I would wager in lower single digit percents). So * manufactures open source it * "someone" is going to maintain it, for free * all these
136.
by mnau 2y ago
What would be the point of open sourcing it? Serious question. Custom DIY ROM might interesting to some geek out there, but it does nothing for security. There is no automatic update and some custom ROM is never going to get it anyway. Secu
137.
by mnau 2y ago
ASML follows US restrictions because of US power. That purchase is just convinient excuse. If they never bought it, US would force them other way (e. g. access to banking).
138.
by mnau 2y ago
They hired the lead prosecutor that cut them a deal. To be precise a Boeing criminal defence firma hired her after she left the Justice department. It's the American way.
139.
by mnau 2y ago
Competence or incompetence is not really relevant. Company as big as Boing gets employees on a bell curve, just like everyone else. They get average people in a profession and from there, it's on management. It's management job to
140.
by mnau 2y ago
I think the whole computer approach is doomed to failure. It relies on perfect security that is supposed to be achieved by SBOM checking and frequent updates. That is never going to work. Even log4j, 40% of all downloads are vulnerable vers
141.
by mnau 2y ago
Everything has at least a mirror on GitHub, but quite a lot of projects are either on GitLab (e.g. KiCad) or self-host (freedesktop). There is also a lot of stuff on Gitee (China), but due to langauge barrier, it's hard to judge.
142.
by mnau 2y ago
Yes, they were cool once upon a time. It the place to be, you didn't have to host your own CVS without charge (no git back then, hell, even SVN was released few years after SF). It was like geocities. It looks almopst impossible toda
143.
by mnau 2y ago
Seems like just some people wanting to merge stuff ASAP and others having other priorities/IRL stuff and some commenters shilling our unfounded conspiracy theories. Yes, the 3k+ LOC, 144 file PR is 1 year old and still not merged. Join
144.
by mnau 2y ago
> In some ways, the gatekeeping of healthcare should be met with more resistance than repair an item that someone else made but you now own. That is never the case. Humans are very risk averse and risk of broken product is infinitely sma
145.
by mnau 2y ago
Please stop trying to co-opt established term for your pet cause.
146.
by mnau 2y ago
> The US has to be sure it’s completely safe. That doesn't make sense to me, who does US refer to in this case? The manufacturer is the one that would be sued and they generally only want to expediate process. FDA is one that aprove
147.
by mnau 2y ago
Ultimately they rely on same principle: this is mine. I made this, it's product of my work. It's mine to do as I please. Government made laws to put this into practice. Edit: Ultimately, to say you don't protect IP in some re
148.
by mnau 2y ago
You can say the same thing about physical stuff. The whole ownership concept is a mental construct, enforced by our government.
149.
by mnau 2y ago
> I have trouble figuring out how they got themselves into this situation That's easy. This is the thinking process: By buying shared at that time, we increase the stock price and please Wall Street. I get a bonus. Not investing in
150.
by mnau 2y ago
On the other hand, Intel is small enough to rescue. $82bn (market cap) is not the amount of money it used to be.

More ›