nneonneo

23 ms·

211.
by nneonneo 2y ago
DigiCert posted a message fifteen days ago saying that "We have not used a legal team as a shield against accountability." ( https://bugzilla.mozilla.org/show_bug.cgi?id=1910322#c74 ). This is clearly contradicted b
212.
by nneonneo 2y ago
Whoops, sorry, should've said legal threat not filing - fixed.
213.
by nneonneo 2y ago
DigiCert probably should have revoked every cert they could within 24 hours. Instead they just pushed the revocation of all 80,000+ certs out to five days. It's quite likely that many of their other clients pushed back on the 24-hour
214.
by nneonneo 2y ago
DigiCert's legal threat, while obviously biased towards DigiCert, gives some context: https://bug1950144.bmoattachments.org/attachment.cgi?id=9468... For further reading, consider these two incidents which resulted in
215.
by nneonneo 2y ago
In a nutshell: DigiCert has delayed revocation beyond what's allowed in the Baseline Requirements a few times; most recently, https://bugzilla.mozilla.org/show_bug.cgi?id=1896053 and https://bugzilla.mozilla
216.
by nneonneo 2y ago
This does not work when there are parts of the political spectrum that won’t even believe there’s a problem, and which reject the scientific consensus out of hand, and which even threaten to defund the scientific research entirely.
217.
by nneonneo 2y ago
USAID was a target of Project 2025, which Trump is following quite closely - yes, he absolutely lied about not knowing about this during the campaign.
218.
by nneonneo 2y ago
This infinitely recursive Game of Life by saharan is pretty dang cool: https://oimo.io/works/life/
219.
by nneonneo 2y ago
NSF grants are already hard enough to get as it is. A reduction of the budget to this extent would just make it a total waste of time to apply for NSF grants. It would have the effect of pushing academics further towards industry funding -
220.
by nneonneo 2y ago
I don't use ST3 as my daily driver (I use BBEdit instead - still not on the VSCode train), but I do use it for lots of random editing and scratch needs. Shameless plug - I wrote a plugin ages ago which makes it possible to replace and
221.
by nneonneo 2y ago
Really? That seems like a fantastic way to fingerprint people. I would be a bit surprised if that was the case... (Fingerprint usage: have https://myfingerprint.example.com 301 to https://myfingerprint.example.com&#x2
222.
by nneonneo 2y ago
Or, try a mobile user-agent. I've seen loads of phishing pages that will only serve their malicious payloads to phones - this is especially common with the scams that are sent via SMS.
223.
by nneonneo 2y ago
The idea here is simple: get users to commit to clicking twice, but the pop up page only accepts a single click before closing. Their second click goes to the page underneath the pop up, which is e.g. an authentication button.
224.
by nneonneo 2y ago
The most literal translation of 小红书 is “Little Red Book”, which recalls the famous book of quotes from Mao Zedong: https://en.wikipedia.org/wiki/Quotations_from_Chairman_Mao_T...
225.
by nneonneo 2y ago
They announced the details at the gate. They even told us they were trying to get a new battery in from Cleveland (we were in Pittsburgh). I didn’t find out which battery was discharged though.
226.
by nneonneo 2y ago
Because adding a battery backup means one (or two!) more batteries that have to be tested and certified to fly; more batteries that have to be checked before flight; more points of failure that could ground an aircraft or cause incidents th
227.
by nneonneo 2y ago
For whatever reason, it was far easier to do this on my phone than on my laptop, even after trying to fiddle with various combinations of zooming in/out and adjusting my distance to the screen. In some cases, it can also be easier to d
228.
by nneonneo 2y ago
I bet -2 is way less common than -1 in a typical codebase, particularly a C one.
229.
by nneonneo 2y ago
Naturally, this extends to custom types: >>> class X: ... def __hash__(self): return -1 ... >>> hash(X()) -2
230.
by nneonneo 2y ago
I used Bing on mobile for a while, and I quickly noticed a horrible dark pattern: the mobile website has a little banner that pops up at the top prompting you to download their app, but this banner only loads in after a short delay (maybe h
231.
by nneonneo 2y ago
Yes, that's exactly it. My authorized_keys line looks like this: command="${HOME}/bin/fromvm vmname",no-port-forwarding,no-x11-forwarding,no-agent-forwarding ssh-ed25519 ... I give each of my VMs a different
232.
by nneonneo 2y ago
Yep - good point. Another option would be to set a confirmation in front of every paste attempt - for example, putting Touch ID in front of any pbpaste call from the guest (which you can enforce with the authorized_keys command). That shoul
233.
by nneonneo 2y ago
Please read the second part - I use a command restriction in authorized_keys so that the guest can only call certain commands. Yes, the guest has “unlimited” access to the pasteboard, which does introduce some risks. For example, the guest
234.
by nneonneo 2y ago
VMWare has an excellent implementation of this which can selectively connect devices to the guest, and it properly remembers the action for each device you connect to your computer.
235.
by nneonneo 2y ago
You can use pbcopy/pbpaste in a Linux VM on Mac by making a shell script wrapper in the VM that calls “ssh mac-host pb{copy|paste}” - that is, basically ssh back from the guest to the host to use its clipboard. It’s seamless and fast s
236.
by nneonneo 2y ago
I think this misunderstands how Rust enums work. The discriminator is separate from the payload, unless niches are involved (they probably wouldn’t be here - note that -2 is a valid pid_t). You cannot go and pass a Rust enum to any FFI func
237.
by nneonneo 2y ago
Proper enum types would have solved this problem; e.g. in Rust enum ProcessHandle { Pid(pid_t), Invalid, Terminated } There is no way to pass a Terminated or Invalid process handle to kill, since there is no numer
238.
by nneonneo 2y ago
Assuming you ignore or amortize the time necessary to create the table in the first place, of course. This is the basis for rainbow tables: precomputed tables for mapping hashes to passwords, with a space-saving “hash chaining” trick to eff
239.
by nneonneo 2y ago
That’s not quite accurate. Big O notation and Theta notation are different ways of expressing the growth rates of functions - the choice of using Big O or Theta is independent of whether you’re trying to specify total space complexity or au
240.
by nneonneo 2y ago
Yes, very common. You've seen "time complexity"; it's very common to talk about "space complexity" as well.

More ›