oneplane

6 ms·

31.
by oneplane 1y ago
You don't need to be in the Apple ecosystem to buy an Apple TV and only use non-Apple services. The only thing that will probably suck is the lack of things like MiraCast and Google's Casting stuff, but you could use third party A
32.
by oneplane 1y ago
If the long-lived token is actually a private key that is non-retrievable and the secrecy and origin is attested by a HSM, I'm fine with that.
33.
by oneplane 1y ago
That's not the argument; the argument is that this would be some form of "there is only one method and it is being withheld", which simply isn't the case.
34.
by oneplane 1y ago
It's not withholding, it's just not part of the AppStore if you do it. There are plenty of other ways to distribute your software, and yes, Apple will also still co-sign it or provide entitlements if you need those. Just not in th
35.
by oneplane 1y ago
AWS has no such thing. It also is not an alternate either way since the owner of the first payment method would have this in an MPA, not in a member account, and in AWS, member accounts are not considered payers and any payment methods are
36.
by oneplane 1y ago
The article says so: > AWS blamed the termination on a “third-party payer” issue. An AWS consultant who’d been covering my bills disappeared, citing losses from the FTX collapse. The arrangement had worked fine for almost a year—about $2
37.
by oneplane 1y ago
It's not sudden, the account owner disappeared and the account user (the one making all the noise) did not get ownership transferred. Is this a great situation? No. It's also not "I did everything right and boo hoo AWS did a
38.
by oneplane 1y ago
Both are legacy dinosaurs, it makes sense they start eating each other.
39.
by oneplane 1y ago
Yep, but you still can't say "compile and link everything in this tree". Technically, the language can, but the framework assumes specific compiler, linker and layouts on the filesystem so at that point you can't. It rea
40.
by oneplane 1y ago
It's still stuck in weird formats and monoliths. A lot of GUI-only stuff has been ported to the mega CLI, but it's still the weird Visual Studio format plus XML files that you cannot replace with a simple Makefile. You still can&#
41.
by oneplane 1y ago
Meanwhile, Citrix has been on fire causing much worse things (you can just grab any session you want and become anyone who's already logged in). Who needs to break into SharePoint when you're becoming someone who's already go
42.
by oneplane 1y ago
TL;DR: not really all that exciting. Apple also publishes a list of domains, ports and protocols and what they are needed for. The side-effects of filtering them usually means something doesn't work right or doesn't work at all (p
43.
by oneplane 1y ago
Effectively, yes.
44.
by oneplane 1y ago
Unless Krogers maintains the Xbox software and Xbox servers and Xbox business processes so it can keep functioning.
45.
by oneplane 1y ago
Do ordinary people side load at all? Assuming most people use the phone to do something else, and not for the sake of using the phone, after you get the apps you want/need, ordinary people are likely to just do the same thing/cons
46.
by oneplane 1y ago
TL;DR: profit (direct and/or indirect). I don't know if they do, but I do know the universal answer to all of it: because that's what makes the big bucks. While there will always be inefficiencies and weird situations, multin
47.
by oneplane 1y ago
Maybe this iteration it won't be a bolt-on, who knows. Because of the origin of C# (Microsoft Java replacement) it's all still very MSBuild/IDe-magic-ish instead of being its own thing where you can decide your own dependency
48.
by oneplane 1y ago
I'm agreeing with you in agreeing that the author is complaining too much. I suppose I could have worded it better.
49.
by oneplane 1y ago
Imagine writing your own security software when there are proven systems that just take that problem out of your hands so you don't need to complain about it.
50.
by oneplane 1y ago
It's bonkers if you don't need it, just like JSONx (JSON-as-XML) is bonkers if you don't need it. But standards aren't for a single individual need, if they were they wouldn't be standards. And some people DO need t
51.
by oneplane 1y ago
I personally don't see the overengineering in JOSE; as you mention, a JWK (and JWKs) is not much more than the RSA key data we already know and love but formatted for Web and HTTP. It doesn't get more reasonable than that. JWTs, s
52.
by oneplane 2y ago
He's not wrong, but he's also not right. I suppose it mostly comes close to screaming into the void and not helping with anything. The way things are is also a mirror of large society. It takes a lot to keep it all going, combined
53.
by oneplane 2y ago
So the hierarchy looks a bit like this: Top level = Keychain Access.app or the security CLI tool Mid level = keychains (in flavours of files, core storage, data protection-enabled, and iCloud) Item level = an entry inside a keychain There i
54.
by oneplane 2y ago
Yeah, it's a bit overloaded. There are keychains (.keychain files) and keychain items (secrets inside of them). The keychains are visible in the Keychain Access app, but also available in the 'security' command line. And then
55.
by oneplane 2y ago
Yeah so it really depends on the local setup. Here's a wall of text if you're interested: Say you do software development with a platform engineering and cloud flavour on top, you might be using aws-vault to keep access keys and S
56.
by oneplane 2y ago
TBH this is still possible in some scenarios, mostly when someone isn't using data protection and manually unlocked a local Keychain. It's pretty much the same as dumping LSASS memory on Windows when IOMMU isn't used, and in
57.
by oneplane 2y ago
Yes, there was a post recently about moving more and more parts out of Mach. Some of it to L4, some of it to user space. Technically, this might actually increase the potential attack surface (due to more different components existing toget
58.
by oneplane 2y ago
Proxmox runs fine on M-series Macs. macOS also runs fine with no GUI. Either way, it wouldn't be a good fit when Ampere exists. For low power modular compute, the way GitHub and Amazon re-package Mac Minis is not the moest efficient wa
59.
by oneplane 2y ago
Didn't Samsung try to do the same? That'd be a Korean option if amelius has that in scope. Unless they are using Snapdragon for those of course.
60.
by oneplane 2y ago
I suppose that's true. My mind was already on the likes of Qualcomm, Apple, Ampere and Broadcom but the base ISA and some of the reference designs used in public are indeed pure ARM (the company). Ideally there'd be a player like

More ›