peanut-walrus

9 ms·

91.
by peanut-walrus 2y ago
No. No. God no. Do not ever do that. The email address you get from an oauth provider should never be trusted.
92.
by peanut-walrus 2y ago
> Data are data, but programs—entities that we can run—seem to be a separate thing. Is this a view some people actually hold? Would be interesting to see some argumentation why someone would think this is the case.
93.
by peanut-walrus 2y ago
Building a system to write logs is easy. Getting something to actually read and process them is difficult.
94.
by peanut-walrus 2y ago
I love AoC, but I hate the timing. December is always the busiest month of the year, so I really almost never find the time for it :(
95.
by peanut-walrus 2y ago
Ah yes, rebranding, what the marketing department does every few years to justify their existence.
96.
by peanut-walrus 2y ago
Can we please stop naming things after directions? I don't want to shift left/right/up/down and my data center has no north/south/east/west. Just say what you actually want to say without obfuscating.
97.
by peanut-walrus 2y ago
Not to downplay this vulnerability, but I feel like relying on (valid tls cert+domain name) combination as the only line of defense for code paths which allow remote code exec is a recipe for disaster. At a minimum, if your application is d
98.
by peanut-walrus 2y ago
So what? Do you keep secrets in your domain names?
99.
by peanut-walrus 2y ago
This site is about securing consumer level routers. Nobody using one of those has a network where the internal layout is valuable to a bad guy.
100.
by peanut-walrus 2y ago
There are ways a bad actor can get enough temporary control of your domain that they can issue a domain-validated certificate without actually breaching your service (BGP, DNS hijacks, Cloud provider vulnerabilities, etc). These cases you r
101.
by peanut-walrus 2y ago
Surprisingly low quality article from Cloudflare. None of the solutions offered address the risk that pinning tries to mitigate, namely that you have a client who trusts a misbehaving/rogue/malicious CA (perhaps you installed a VP
102.
by peanut-walrus 2y ago
Tried it out, looks like at least on Debian the filter gets invoked with limited user privileges, so not world-ending, but still bad. And it does require user interaction, but my gut feeling is that this can be bypassed with some cleverness
103.
by peanut-walrus 2y ago
I do not ever use any OS or other software in my native language, however I do want most non-technical websites to display in it when possible. How do I communicate that?
104.
by peanut-walrus 2y ago
These are all extremely good suggestions. Especially the flattening bit - yes, it's verbose as hell, but it just makes so much sense whenever you have to deal with the code any time after writing it. Helm charts, please take note, the
105.
by peanut-walrus 2y ago
"Calls are ephemeral" is a feature, not a bug. Real-time chat should be as well. Slack storing messages until the end of days is an anti-feature.
106.
by peanut-walrus 2y ago
They have positive cash and are paying their employees well. That's what a company should be doing rather than paying peanuts and hoarding wealth like a dragon. Especially as it seems they are actually profitable, just hiding it with a
107.
by peanut-walrus 2y ago
Honestly, the only way I see forward is FIDO with dirt cheap NFC cards as keys. Need to log in to somewhere? Get the card from your wallet and touch it to your phone/laptop. It has to be cheap enough that for any company with paying cu
108.
by peanut-walrus 2y ago
The times where malicious software was served from a sketchy .ru domain or a naked IP address located at some bullet-proof hosting provider are long gone. The threat actors use the same infra as everyone else - GCP, AWS, Azure, Cloudflare,
109.
by peanut-walrus 2y ago
It's for military applications so it's quite obviously green.
110.
by peanut-walrus 2y ago
I feel we are at a point in the evolution of our digital society where relying on general purpose OS-s is just not an option when moving forward.
111.
by peanut-walrus 2y ago
I think the enterprise software ecosystem currently is not really "all eggs in one basket", but rather you have a whole bunch of baskets, some of them you are not even aware of, some are full of eggs, some have grenades in them in
112.
by peanut-walrus 2y ago
Vapes are proven to be highly effective at getting people to quit smoking. All the lives saved are definitely a good reason for them to exist. But yeah, disposable vapes are stupid.
113.
by peanut-walrus 2y ago
Not every user who uses sudo is admin or elevates to root.
114.
by peanut-walrus 2y ago
Could someone explain what a hammerlock is and why it is significant? Searching just said it's a type of joint lock in wrestling which doesn't make sense to me in this context. Then again, I have never danced.
115.
by peanut-walrus 2y ago
You absolutely see star trails on iphone night mode photos when setting exposure to 10s or more. For aurora, 10s is way too much though, 1-3s seems right and is what the iphone allows to do when not on a stable surface or tripod.
116.
by peanut-walrus 2y ago
The developer experience when trying to maintain a Python codebase the size of an average enterprise Java codebase is pretty...abysmal.
117.
by peanut-walrus 2y ago
The solar output for Nordic countries during the winter is basically 0. Which is a massive problem, because winter is also when you need the most energy. During the summer, Nordics are already at solar capacity with electricity prices often
118.
by peanut-walrus 2y ago
How often should the key be rotated? How is the rotation done? How are body and headers normalized? Which header determines who sent the email? How do you know the email was sent to you? Where do you store the on-path routing information?
119.
by peanut-walrus 2y ago
In this case an activist in the oppressive regime of...Spain?! Opsec is hard and most activists in western countries don't take it seriously. It's not like we live in PRC or DPRK right? Ironically, it is likely far harder for PRC
120.
by peanut-walrus 2y ago
That poll shows exactly the problem with rebase workflows. 41% say they mostly rebase but 48% do not know that merge/rebase conflicts have swapped order of local/incoming changes. Granted, the percentages are exactly right that th

More ›