moviuro

21 ms·

181.
by moviuro 7y ago
Only massive packages (firefox, chromium, KDE, Gnome, etc.). The entire promise of gentoo is the opposite: fine-tuning and local ~~heater~~ compilation.
182.
by moviuro 7y ago
That snapshot[0] surely doesn't reflect the reality. Last Modified date is "today" for all snapshots when you advertize an immutable storage. You should also add the current date in the picture (just in case). [0] https:&#
183.
by moviuro 7y ago
> setting it up to be conservative just like OpenBSD Meh. Probably for superficial stuff, yes. But would Linux kill cat(1) if it did some network calls? I bet not. See https://www.openbsd.org/innovations.html
184.
by moviuro 7y ago
According to the French ministry of health, "the elimination of measles requires a 95 per cent immunization coverage level for young children." [0] I've tried finding some good resource about mathematical modelling of infecti
185.
by moviuro 7y ago
LEGO bricks are known for their very precise shapes ( Only the best is good enough ); I doubt they will ever change said shapes without good reason (a green 4x2 has no reason to be shaped differently than a red 4x2, and if they were, it wou
186.
by moviuro 7y ago
Isn't this a serious safety hazard? I can't avoid a car I can't see.
187.
by moviuro 7y ago
> disavow the ones they lost track of So as an individual, I have to trust the originator to keep the whereabouts of my kilobar private?... This is most probably a very bad idea.
188.
by moviuro 7y ago
I didn't understand that from the article. I understand that while counterfeits are getting better, they are still not perfect imitations. > “The level of counterfeit is becoming really good. Even for us it is hard to tell,” said a
189.
by moviuro 7y ago
If the fake bars still don't meet the purity standard but are getting close (in the article: 99.90, 99.97 or just short of 99.99), maybe up the standard? Jump to 99.995 if technology allows. For banknotes, regular rollout of new format
190.
by moviuro 7y ago
1. Without giving it much thought, it's probably impossible to prevent "replay" attacks. If I have listed tens of valid signatures, I can use them on my new fake bars on the other side of the world, hoping my fake bar with go
191.
by moviuro 7y ago
I don't get how this could happen. Why would anyone trust their build server to package the release tarball? Were they ever signed and checked by the devs? The way I understand releases and tarballs, I'd do it like this: - git on
192.
by moviuro 7y ago
- Keep up with the latest trends (supply chain, credential leaks, etc.) and published CVEs (a CERT can help) - Risk analysis with business stakeholders (maybe they care nothing for confidentiality, but tons for integrity, or there are marke
193.
by moviuro 7y ago
> One small caveat is this script creates ‘secrets.txt’ in the same directory so anyone can open that file and access your codes. I am planning to add some level of encryption to that in future. If you have any idea/suggestions se
194.
by moviuro 7y ago
That's not true about Paypal though: "Use lower case, upper case, a number, and a special character [like ~!@#$%^&*()_+=?><.,/]." [0] And even if the character subset is quite small (26 lower case, 26 upper cas
195.
by moviuro 7y ago
I'm fiercly in favor of 2FA, and with DSP2[0] coming soon(TM), I have been pushing for sane 2FA at my place, in some select projects where it can be done with as little friction as possible. I'm very interested in your bank and ho
196.
by moviuro 7y ago
I really don't understand why. Please explain.
197.
by moviuro 7y ago
Currently at a bank's security team, here's what I gathered so far that explains (but doesn't excuse) the current state of affairs: - there are millions of customers who hate having to use their brains (or get their phone to
198.
by moviuro 7y ago
I prefer to use the autotype function of password managers (Ctrl-V on Keepass[0], and rofi-pass[1] for pass(1)); there are other issues with them though (such as "modern" login pages [2]) [0] https://keepass.info/h
199.
by moviuro 7y ago
Unison's cool, but I hit some major roadblocks with it, namely: it can't run on an heterogeneous network [0,1]. As many others have already suggested, syncthing[2] is the new best tool out there for multi-directional sync. [0] ht
200.
by moviuro 7y ago
> I doubt they can do it for €5k. They don't. They do it for 8300€, of which 3300€ are (re)funded by the French tax office/Ecology Ministry. So it's 5000€ from the driver's pocket (in the end). See https://
201.
by moviuro 7y ago
Le Canard Enchaîné disagrees [0]. Still stuck in the old ways of paper printing though. [0] https://en.wikipedia.org/wiki/Le_Canard_encha%C3%AEn%C3%A9
202.
by moviuro 7y ago
FWIW, when entering my CPGE [0] in France, our math teacher asked we forget everything about math except: natural numbers (0, 1, etc.), addition and multiplication. Everything needed to be scraped and "taught correctly", and it to
203.
by moviuro 7y ago
Put it wherever in a "secret.zip" file? If you have the logs, just add a dummy page that they usually scan (/wp-admin or whatever) that automatically makes the client download the file. SSH however works with zero trust. Clie
204.
by moviuro 7y ago
That's in the TODO list. Though I'm still looking for a 100% technology-agnostic guide of what mail is, how it works, what I need, etc.
205.
by moviuro 7y ago
NFS is kind of horrible. Last time I used it, I had hard lockups when I unplugged my machine from the network. SSHFS however works wonders, and doesn't require the VPN at all.
206.
by moviuro 7y ago
Along with all other suggestions: - Syncthing node https://syncthing.org ; - WireGuard server https://wireguard.com ; - Pi-hole or just lying DNS Server https://pi-hole.net , https://gitlab.com&
207.
by moviuro 7y ago
https://twitter.com/rdonoghue/status/1144011630197522432 and discussion: https://news.ycombinator.com/item?id=20297331
208.
by moviuro 7y ago
> Use of Kindle Content . [...]. Kindle Content is licensed, not sold, to you by the Content Provider. The Content Provider may include additional terms for use within its Kindle Content. Those terms will also apply, but this Agreemen
209.
by moviuro 7y ago
> going through AA's at a horrible rate in our house You can buy rechargeable AA batteries[0,1] though. I only have those at home (toothbrush, remotes, etc.). [0] https://www.energizer.com/batteries/energizer-re
210.
by moviuro 7y ago
That's new to me. I thought Android Wear was a "slave" device. Would be fun to have some pictures/videos :)

More ›