mzajc

14 ms·

211.
by mzajc 1y ago
> SECURITY.md Never change, bureaucracy :)
212.
by mzajc 1y ago
That's a much better option since the LLM is no longer the source of truth. Unfortunately, it only works in cases where the feature is properly documented, which isn't the case here.
213.
by mzajc 1y ago
Yup, it's undocumented for some reason. I don't remember where I saw it used, but as an example [Service] ExecStart=/bin/echo $PATH Will log the environment variable, while [Service] ExecStart=:/bin&#
214.
by mzajc 1y ago
> I ask follow up questions to make sure I understand why the AI's answer works. I've tried a similar approach and found it very prone to hallucination[0]. I tend to google things first and ask a LLM as fallback, so maybe it&#x
215.
by mzajc 1y ago
> This license is almost identical to the MIT license but with the stipulation that the software cannot be provided as a hosted or managed service Note that while the original change was an additional clause to the MIT license, it was qu
216.
by mzajc 1y ago
> Plenty of banks will say "only available in Chrome" or "you must be running version xyz of your browser". Despite bogus requirements like these, websites have to rely on hacks to figure out what browser you're
217.
by mzajc 1y ago
AFAIK none of these check for changing fingerprints. Your browser could report a very unique screen resolution, but could be configured to change it periodically. How much does that fool fingerprinting algorithms?
218.
by mzajc 1y ago
Bear in mind that while most questions are language-agnostic, some require the knowledge of the English alphabet and definitions of uncommon English words.
219.
by mzajc 1y ago
> The first is that a user has no right to run anyone else's code, if the code owner doesn't want to make it available to them. Consider a bank which has an app. /../ I think the bank has the right to say "your m
220.
by mzajc 1y ago
As far as I understand, verification is tied to the package name (or at least the prefix). Since F-Droid packages thousands of applications from different developers, I don't see how they could reasonably get verified.
221.
by mzajc 1y ago
> Why is end-user choice and consent not considered? The elimination of user choice was very much considered. In fact, it's the primary goal.
222.
by mzajc 1y ago
How long until Google decides to lock it down because "scammers" can "abuse" it?
223.
by mzajc 1y ago
> Every app store that exists would classify this as malware Considering Facebook ([0] and [1] to name a few) is still available, I think that's a pretty high bar to clear. [0] https://news.ycombinator.com/item?id=44
224.
by mzajc 1y ago
These protocols or revisions already exist - DNSSEC at the site level and DoT/DoH at the user level prevent this kind of malicious tampering with responses by the ISP. The issue is that they're not commonly used, and even if that
225.
by mzajc 1y ago
I don't know about the "no judges" part, but considering you put "no transparency," I assume you're trying to dispute that part too. In that case, could you explain the lack of a first-party list of blocked dom
226.
by mzajc 1y ago
I believe it's fine, as long as you get a sublicense: https://www.linuxfoundation.org/legal/the-linux-mark
227.
by mzajc 1y ago
Same for 1.1.1.1 and 9.9.9.9. My ISP's resolver also returns NXDOMAIN immediately. Quick way to test: dig 'test~!*_' @resolver-ip
228.
by mzajc 1y ago
Considering femboy.cat is still making thousands of claims per minute, shouldn't the header spoofing theory be easy to check? Just run tcpdump on the server, get a few claimed IPs, and see if they made any TCP handshakes in the packet
229.
by mzajc 1y ago
Could you explain? I thought all nodes except bridges were public.
230.
by mzajc 1y ago
> There are currently 13'797 Tor exit nodes < https://www.dan.me.uk/tornodes > As far as I'm aware, this is off by a magnitude, and I'm not sure where the number comes from because the linked website l
231.
by mzajc 1y ago
How do I know I'm connecting to the WireGuard instance being attested and not something else? Could the host run one attestable instance, but then have users connect to a separate, malicious one?
232.
by mzajc 1y ago
Also known as the freenode Andrew Lee/rasengan.
233.
by mzajc 1y ago
The last thing I want on the web is the normalization of cryptominers.
234.
by mzajc 1y ago
2 months ago: https://news.ycombinator.com/item?id=44169115 . Of course Facebook's JS won't add itself to websites, so half of the blame goes to webmasters willingly sending malware to browsers.
235.
by mzajc 1y ago
> An installation of Debian 13, by default, uses DNS servers of your local ISP which are usually very slow. I hear this a lot, but I wonder how often it's actually true. Ping-wise I get sub-millisecond time to my ISP's resolver
236.
by mzajc 1y ago
The edit button is gone, sorry :)
237.
by mzajc 1y ago
If you can afford to add a little extra logic to your web server, you can solve this without JavaScript shenanigans (plus it doesn't leak your visitors' IPs to Google. On Nginx, for example: location ~ /vi/(.*)/
238.
by mzajc 1y ago
intel.com's <title> says "Simplify Your AI Journey - Intel". Their description meta tag says "Deliver AI at scale across cloud, data center, edge, and client with comprehensive hardware and software solutions.&quot
239.
by mzajc 1y ago
> This is such that only what's seen or about to be seen is put on the page This reads like it's a lazy loading library, but then the roadmap has features like > Assign Items to Users > Kanban View > Collaborative Edit
240.
by mzajc 1y ago
Apologies, I misunderstood the reply.

More ›