pilif

44 ms·

421.
by pilif 8y ago
By making it possible to disable it, you are adding fingerprintable bits of entropy to your browser. Concerns about this were also the reason why toggling the sending of the DNT header was removed for example.
422.
by pilif 8y ago
Mainly because it's somewhat of a convenience feature for which a viable workaround exists: do a normal update, concurrently add a conditional `where ... is null` index, repeat in a loop (begin transaction, normal update, add constrain
423.
by pilif 8y ago
the spec says "[…] the image dimensions can be decoded from the first 2KB of the image". It doesn't say anything about when the dimensions are known and I would assume it's using those in that case. However, loading 2KB
424.
by pilif 8y ago
At least the means of production of the energy can be updated without needing to replace the car. In an ICE, every car comes with its own power plant burning gasoline to produce energy. With electric cars, power generation is distributed am
425.
by pilif 8y ago
Can't decide whether this is an unprecedented display of lack of professionalism or a trick to get people to purchase more cars nearing the end of the quarter (because they are dangling the "prices will go up" sign in front o
426.
by pilif 8y ago
> higher overall resiliency. yes. because making a page render dependent on the availability of 10s of independent network services is going to greatly improve your resiliency. I guess it's a matter of perspective. If you are will
427.
by pilif 8y ago
Even if FB was not allowing Google Voice, you could give FB the real number and give throwaway GB numbers to recruiters. That would solve the issue voiced by OP
428.
by pilif 8y ago
> This can be a security risk as a data URI is considered to be equivalent to the unsafe-inline source. wow. This is absolutely as insecure as `unsafe-inline` IMHO. I wonder why the spec doesn't mandate the `unsafe-` prefix for `d
429.
by pilif 8y ago
What they mean is that for years, Postgres had the most advanced support for window functions among the common databases. Then they lost that crown due to an update to MySQL, but now with 11, they are back to being the leader as they have b
430.
by pilif 8y ago
> How do I store it? To me, NoSQL seemed like the choice in the past. If you're using postgres, you could use a column of type jsonb. Postgres comes with many operators and functions ( https://www.postgresql.org/doc
431.
by pilif 8y ago
I have a feeling the reason Edge isn't available on Windows 7 is not because it doesn't run but because they intended for Edge to be one more reason to upgrade to Windows 10. If that's the case, there's zero reason to as
432.
by pilif 8y ago
If that's the case, then they should probably start by offering something better for all currently supported OSes and versions. Windows 7 is still supported and only runs IE11, no Edge Windows 10 LTSB is still supported and only runs I
433.
by pilif 8y ago
White-listing hardware to the point of bricking a device when non-listed hardware is present is plain user-hostile and seves no purpose but revenue generation for the device manufacturer. I don't buy the "but it's for your se
434.
by pilif 8y ago
> Goodbye, IE 10. Hopefully IE 11 will soon follow. IE 11 is still part of Windows 10 and it's in fact the only browser shipping in the long-term support version of Windows 10 Expect IE11 to be around for the duration that Windo
435.
by pilif 8y ago
> No cert chain for starters. why would the person who arp-spoofs the gateway in the Starbucks not be able to fetch your self-signed cert chain and mint their own matching chain with the exact same metadata (but of course differing keys)
436.
by pilif 8y ago
> (which isn't actually true) how would I discern your self-signed certificate from the one served by the person arp-spoofing the gateway in a Starbucks?
437.
by pilif 8y ago
it was in a secondary package for a long time though (until apt 1.5 in 2017) So in order to get the HTTPS transport, you needed to first download the required package over HTTP.
438.
by pilif 8y ago
likely your DNS server is using PowerDNS. Versions before 4.1.0-rc1 had a bug with the query cache: https://github.com/PowerDNS/pdns/issues/6806 This issue isn't affected by the configuration change on f
439.
by pilif 8y ago
No. Before I could use the OS built-in MongoDB and get 10 years worth of security update for that version. Now I need to fetch the version packaged by MongoDB of which I don’t know the release cycles and years of included support. Plus, it’
440.
by pilif 8y ago
Because as I said later in my post, sometimes a vendor's response to a security issue is "please update to the latest major release". Let's say you're using version 1.1 of some software and you're hit by a remo
441.
by pilif 8y ago
> The installation instructions I've always followed for MongoDB start with importing a key, and adding their official repo to my source list. Going with the maintainer's repo means that you trust the maintainer with providin
442.
by pilif 8y ago
Also * they actively promote network neutrality * their fiber offering is just plain ethernet, so if you have a switch with an SFP slot, that's all you need (well aside of whatever you use as a router - but in my case, that's a VM
443.
by pilif 8y ago
Are you sure this was a Roland SC? This sounded pretty close to just plain old Adlib. Of course any sound font would sound better than fm synth. What would be helpful is to have the track played on an MT32 or a Sound Canvas to do a proper
444.
by pilif 8y ago
It allocates on the stack which is inherently of limited size and allocations grow in the direction of the “juicy” stuff. As so often with the C library, there is little bounds checking going on either (in fact, the behavior once you overfl
445.
by pilif 8y ago
you can tell macOS to use AAC using an Apple tool called "Bluetooth Explorer". Also, Macs equipped with a T2 chip default to using AAC even without the manual intervention. You can check what codec is used by alt-clicking the blue
446.
by pilif 8y ago
How would that work with some third party uploading (and registering on the blockchain) something to youtube they ripped off another place?
447.
by pilif 8y ago
Yes. I was just responding to the claim that with IPv4, thanks to NAT a malicious packet would not be able to be routed anywhere unsafe. A NAT router without any kind of firewall functionality is incredibly unsafe too so even the cheapest o
448.
by pilif 8y ago
To the various remote management ports listening on the DSL modem itself. Between RCE vulnerabilities, accidentally unauthenticated management features or even just upnp listening on the WAN port, there are infinite means for owning the net
449.
by pilif 8y ago
H.265 is a much worse patent minefield than h.264 ever was: the h.265 patents are owned by different patent pools with different licensing terms, some of which even without revenue cap. The only way to relatively safely produce h.265 conten
450.
by pilif 8y ago
> into the IE6-of-the-interwebs category Does it though? Chromium or rather the Blink engine is very different from IE6: It's in active development, it's available for multiple platforms, it's open source and it follows

More ›