patrakov

34 ms·

541.
by patrakov 4y ago
Contact a lawyer. IANAL, but, from what I have seen in your post, this does not look like your fault - Apple wasted your time for appeals by slow answers, and just let the time for appeals run out while the ball was on their side. This is a
542.
by patrakov 4y ago
We are talking about different documents. I mention the privacy policy, which contains a "leaky" wording, likely unintentionally. You mention the audit report that plugs the leak and confirms that Mullvad protects customer data ev
543.
by patrakov 4y ago
I don't know if this happens at all. I am only pointing out that their privacy policy does not prohibit them from doing this.
544.
by patrakov 4y ago
Well, I have a blog post regarding audits: https://patrakov.blogspot.com/2020/01/vpn-privacy-policies-a... In short: auditors audit providers against their own privacy policies. If there is a loophole, the result,
545.
by patrakov 4y ago
The opposite of these terms are also null and void, because then Autodesk would not be able to impose any new government-mandated sanctions or other mandatory misfeatures.
546.
by patrakov 4y ago
It wasn't loaded because the CDN that hosts it redirects from HTTPS to plain HTTP.
547.
by patrakov 4y ago
Please watch my FOSDEM talk from 2020, it explains the similar effect in Russia: https://archive.fosdem.org/2020/schedule/event/sdnpof/ The most likely explanation is: the government does not want to blo
548.
by patrakov 4y ago
You did. See https://about.gitlab.com/handbook/security/approved_os.html
549.
by patrakov 4y ago
In the past, I was able to reproduce a supposedly Safari-only issue using Epiphany on Linux. This browser uses a closely-related engine.
550.
by patrakov 4y ago
Best security practices as defined by Microsoft = "You can't have a computer if your country is under US sanctions". Important word: US, a single country. I don't want to punch such a huge hole in any of my systems.
551.
by patrakov 4y ago
The problem with such lists is the inherent assumption that all ISPs block the same "bad stuff". However, in reality, this is not the case, because each ISP has to implement the blocking on their own, and there are multiple DPI so
552.
by patrakov 4y ago
SNI (the thing in the ClientHello packet which indicates the domain name for which to get a certificate, just in case if there is more than one SSL website on one IP) is not encrypted. DPI solutions (and even plain old Squid) can look into
553.
by patrakov 4y ago
SSH tunneling is encapsulating byte streams in TCP, not TCP (which means "packets with sequence numbers, acknowledgements, and retransmissions") in TCP, and therefore doesn't suffer.
554.
by patrakov 4y ago
Well, the good point of GoodbyeDPI is exactly so that it preserves your IP address. Normally, when trying to circumvent censorship, you would need a VPN server in a different country. But the downsides are that the bank will deny all transa
555.
by patrakov 4y ago
Really bad security. They still enable broken ciphers like RC4 via ssh on their shared-hosting web servers. BTW - these servers use CPanel, which runs on CentOS 6 (or a derivative), which is EOL. If your company uses any security scanner, i
556.
by patrakov 4y ago
Can it find and explain vulnerabilities such as SQL injections or buffer overflows?
557.
by patrakov 4y ago
> If you're in B2B, plenty of larger companies will disqualify for not having SOC2/ISO27001. And it's a good question whether you want such larger clients at all. At one of the previous places where I worked, we used to pu
558.
by patrakov 4y ago
> if you delegate your SOC2 to a person who doesn't deeply care, they'll eventually agree to put ClamAV on all the hosts Bingo. Just spell out the consequence: you no longer can optimize your compute costs by switching to a man
559.
by patrakov 4y ago
For those who don't want to give out their personal detail, here is the direct link to the original report that the article summarizes: https://cdn.wrike.com/ebook/The_Dark_Matter_of_Work.pdf
560.
by patrakov 4y ago
The problem with configuration expressed as a code is that it is not automatically auditable. With simple ini or json files, the auditing tool can just parse them, or, even worse, grep, and find out if a particular option has a certain lega
561.
by patrakov 4y ago
You have configured it as a router, by installing Docker.
562.
by patrakov 4y ago
I use them to reproduce bugs (both my bugs and bugs found by my customers), and give away the resulting disk images, if the software vendor has some difficulty reproducing the bug.
563.
by patrakov 4y ago
I think that if you want to go away from "proofs written in shorthand by humans for other humans", then you are talking about formal verification of proofs. So, you are talking about something like making your proofs understandabl
564.
by patrakov 4y ago
Is there any equivalent for any other human language?
565.
by patrakov 4y ago
Well - right now, the sanctions punish those who emigrated (e.g. me). I had trouble opening even a personal bank account in the Philippines, allegedly "because of EU sanctions" (c'mon, when did the Philippines join the EU?),
566.
by patrakov 4y ago
Third problem on cheap induction cookers: the power control via +/- keys is too coarse in the low region. E.g. for cooking buckwheat, 600W is too much (the water boils too intensively, especially near the end), while 400W is not really
567.
by patrakov 4y ago
The problematic word is "THE" database. The subsystem that you hit can be not stateless, but can use a separate database that doesn't contain authentication data.
568.
by patrakov 4y ago
Well, asymmetric cryptography is not even needed in the most common case, i.e. when you are using the client as a database. Symmetric crypto is enough, because it's your server that both encrypts/signs and decrypts/verifies.
569.
by patrakov 4y ago
This will be kept in the desired_state variable.
570.
by patrakov 4y ago
The pseudocode for the flight + hotel saga is quite long and messy and I would not immediately recognize that this exhausts all the possibilities that might go wrong. I am not sure here, but, instead of encoding the desired and actual state

More ›