patrakov

13 ms·

181.
by patrakov 2y ago
It does not matter in the real world whether the vendor declares it secure. Did it help anyone pass any kind of security audit? In other words, do auditors recognize it as a valid environment for working with potentially malicious documents
182.
by patrakov 2y ago
I think I know what has happened. The PSU manufacturer has cheaped out on the capacitor in the input, in hope that the circuit which switches the primary coil would still be able to extract enough power even if the instantaneous mains volta
183.
by patrakov 2y ago
Nodex is not only an internet provider, but also a hosting provider. For example, you could (before the attack) rent a VPS from them.
184.
by patrakov 2y ago
Pixel Experience was not based on LineageOS. And Pixel Experience is dead and unsupported now. While there is no official direct successor, EvolutionX offers a comparable feature set.
185.
Xiaomi global bootloader unlock policy has changed(xiaomitime.com)
64 points by patrakov 2y ago|64 comments
186.
by patrakov 2y ago
Unconventional opinion here. Passwords in the password manager are not "something you know" anymore. They are "something you have". So, no matter whether the TOTP codes are stored in the same app or a separate device, yo
187.
by patrakov 2y ago
Exactly what I am saying. Users don't need passkeys. Auditors and other guys from the checkbox compliance department on the opposite side do, for "security posture".
188.
by patrakov 2y ago
The problem that passkeys solve is not that of their user. It is that of the website that authenticates its users. With mere passwords, there is no way they can be sure that the user follows the required password hygiene. With passkeys, the
189.
by patrakov 2y ago
(2009)
190.
by patrakov 2y ago
Previous discussion of the same article published elsewhere: https://news.ycombinator.com/item?id=41893200
191.
by patrakov 2y ago
That's quite an unexpected piece from APNIC. Basically, they openly question the need for unique addressing and end-to-end communication given today's market shift from the network itself to apps as the valuable thing, and they co
192.
by patrakov 2y ago
I have no Roku stick, but reviews mention that BluRay players and Apple TV work fine.
193.
by patrakov 2y ago
Big monitors (e.g., Gigabyte AORUS FV43U) are today's best dumb TVs.
194.
by patrakov 2y ago
Leadership/management positions are not your only option. Try a "customer success" role or a support position.
195.
by patrakov 2y ago
I have read the proposed amendment, and it still looks woefully insufficient. It changes the rules from "software is presumed to be reliable" to "software previously certified by any government authority is presumed to be rel
196.
by patrakov 2y ago
802.11r is useless on a typical home network, as Windows does not implement it for WPA2/WPA3 Personal. It is only useful on WPA2/WPA3 Enterprise networks; sadly, OpenWrt fails at that: https://forum.openwrt.org/t&#
197.
I Stopped Using OpenBSD(dataswamp.org)
54 points by patrakov 2y ago|78 comments
198.
by patrakov 2y ago
I guess it is not about renewal but about certificate deployment.
199.
by patrakov 2y ago
Bloat. The /usr/lib64/librpm.so.8.2.0 file is 2.0 megabytes in size on OpenSUSE 15.5. Now consider that some of the still-supported devices have a total of 8 MB of flash.
200.
by patrakov 2y ago
Well, this also needs to be on website publishers who use ads from vendors that don't guarantee that the ads are not scams. Bad ads on any site should have equal treatment to bad content, and should be considered as published by that s
201.
by patrakov 2y ago
If the original author reads this comment, I have a question. One of the problems highlighted was that the documented teardown procedure did not properly delete the OpenSearch domain. Would AWS Nuke ( https://github.com/ekris
202.
by patrakov 2y ago
It's a chain. Take PCI DSS v4.0 for example. Requirement 2.2.1 says: "Configuration standards are developed, implemented, and maintained to <...> Be consistent with industry-accepted system hardening standards or vendor hard
203.
by patrakov 2y ago
Here is my experience in the Philippines: In 2022, I imported a Samsung Galaxy A02 phone from Turkey, which I bought there in a retail store. It works, but could use VoLTE with Globe or SMART, and the operators' personnel provide confl
204.
by patrakov 2y ago
Rules like https://cisofy.com/lynis/controls/AUTH-9282/ are something that NIST calls outdated and dangerous password practice, but foreign security bodies mandate. Go figure. Also, the suggestion from https
205.
by patrakov 2y ago
uBlock Origin with Firefox on desktops, DNS66 (was AdAway in the past but it started crashing) on Android, and I don't have any other devices.
206.
by patrakov 2y ago
This is not limited to science. This is a consequence of people relying on automated grammar and style-checking tools. For example, Grammarly always highlights the words and phrases indicating uncertainty in blue and suggests they be delete
207.
by patrakov 2y ago
I don't know for Japan, but it did work during my previous trip to the Philippines (November 2017 - August 2018). The only problem is that you will not be able to pay the exact amount if the source bank does not support the destination
208.
by patrakov 2y ago
My preferred solution for that would be a VNC server (so that it shares the whole screen) installed in a VM.
209.
by patrakov 2y ago
This sounds like a machine for creating patents that are known in advance to be invalid because of the prior art from which the machine mechanically derives its allegedly sellable proposals. In other words, patent fraud.
210.
by patrakov 2y ago
Well, the whole point here is that somebody else (not you!) runs it, at which point open or closed source is irrelevant as long as it works.

More ›