pilif

28 ms·

271.
by pilif 6y ago
> To be fair, they fully control the library they’re using, as they have their own x509 library and API in Core Foundation. But it also supports CRLs so I’m somewhat circumspect this is the reason. yes. if of course it's their lib
272.
by pilif 6y ago
The protocol in use is OCSP. The OCSP endpoint is part of the certificate. If I had to guess, I would say that they just relied on certificate validation features of the library they are using, not necessarily aware of all of the consequenc
273.
by pilif 6y ago
This doesn't happen to me, though admittedly, I'm using an iPad with SideCar as an external display. Whenever I connect to it, it restores the last window arrangement that was in use when the iPad was last connected.
274.
by pilif 6y ago
I wonder why that's the case. shell access is way more permissive compared to the sftp subsystem. Why would and admin enable full shell access but not sftp? What does sftp allow that shell access doesn't? Pure shell access clearly
275.
by pilif 6y ago
> It's really stupid simple to follow safe practices for absolute majority of apps. That’s what C programmers tell me about memory management and buffer sizing. And yet: https://www.zdnet.com/google-amp/articl
276.
by pilif 6y ago
> it's just an obscure way to hack yourself. that's only true for applications that strictly only ever work on and display content that the user has created themselves. This is an increasingly rare type of application in the ag
277.
by pilif 6y ago
I am well aware of the compatibility issues and the associated difficulties. I wasn't saying the option of turning it off shouldn't be given. I'm saying that the setting should have been mandatory. People wanting to do it the
278.
by pilif 6y ago
In the web context, iframes are reasonably safe (if you discount ad privacy issues). One of the touted advantages of Electron is that you can use web technologies and thus have engineers familiar with web technologies working on your applic
279.
by pilif 6y ago
My main takeaway from this article is the question why conextIsolation was introduced defaulting to false. This is one huge lever to help with the maxime “XSS is RCE in electron” and yet they default to not helping. I know this is about bac
280.
by pilif 6y ago
also, the implementation we're talking about is not a complete implementation of the PHP language. It's easy being faster when you're doing less.
281.
by pilif 6y ago
if it was great, they wouldn't need to push for it this much. This is about getting access to more tracking and more immersive ads than what a web browser allows, not about offering a good user experience.
282.
by pilif 6y ago
Unfortunately that doesn’t really help. We update an application about once a year but we get false positive alerts even months after AV programs have previously not complained about a binary. What’s worse is that not all AV vendors on Viru
283.
Google developer on why Chromium lost support for user styles(bugs.chromium.org)
1 points by pilif 6y ago|0 comments
284.
by pilif 6y ago
how would they maintain the root servers and correct issues without shell access or tcpdump? Make blind guesses and restart the server until the problem goes away (it won't)? No matter how high-profile the environment, eventually, the
285.
by pilif 6y ago
Kotlin is available in the free community edition of IntelliJ and in Android Studio
286.
by pilif 6y ago
Apple already pulled the Python 3 stunt twice with swift. Swift 1 to Swift 2 to Swift 3 were all very much incompatible. Of course the language wasn’t as broadly used back then and Apple is known for quicker churn than Python so the need to
287.
by pilif 6y ago
Amazon already got away with it with their video streaming service. You totally get away with it if you have something that Apple needs badly enough
288.
by pilif 6y ago
that's the attitude that brought us sites only working in Internet Explorer (and now Chrome) IE had many non-standard APIs that were much more convenient to use than what the standard was providing (innerHTML, document.all) And rather
289.
by pilif 6y ago
The problem with storing the 2FA keys in 1Password is that you're practically downgrading your account to 1FA because once 1Password is compromised, the second factor lost all of its value, though that compromise is much harder to achi
290.
by pilif 6y ago
To be snarky: A page titled "Laws of UX" probably shouldn't have black text on a dark grey background (the law numbers)
291.
by pilif 6y ago
That VMWare tech preview ran in Beta 2 already which didn’t have this framework yet. No kernel extension required
292.
by pilif 6y ago
https://isbgpsafeyet.com/ Half of the internet
293.
by pilif 6y ago
Backdate your self-signed cert. so far that works around any validity length restrictions.
294.
by pilif 6y ago
SQLite has encryption plugin support, or you could encrypt the file yourself at rest. However, no matter what you are doing, as the application needs to be able to decrypt the file, you have to ship the key and thus the protection will be a
295.
by pilif 6y ago
Many type systems are already Turing complete like C++ and indeed Rust as evidenced by the project linked here. It’s a valid point. Of compilation already is Turing complete, why not just drop the pretense and allow arbitrary compile time e
296.
by pilif 6y ago
But it happily sells GitHub enterprise to the ICE.
297.
by pilif 6y ago
Git just isn't the right tool for that. If I were to use this as a student, I would push nicely sanitized and consistent history after thoroughly rebasing, amending and fixup-ing my mistakes on my local clone. There's nothing this
298.
by pilif 6y ago
That already happened once with OpenSSL 1.1 which also wasn’t really backwards compatible. It was messy then, it will be messy now, though when you took the 1.1 opportunity to modernize your code to current best-practice as requested by the
299.
by pilif 6y ago
there also was no introduction of yet another networking library rewrite, so I would assume the iOS12 solution continues to work with iOS13
300.
by pilif 6y ago
seems to be an ok choice. It's maintained by a very capable team that has a strong security focus, it's in use on the largest mobile platform (Android) and the motivations and focus behind its maintenance align well with Apple&#x2

More ›