pilif

48 ms·

451.
by pilif 8y ago
The blog post says it's coming to all supported versions of windows. Until 2020, that includes Windows 7 and 8
452.
by pilif 8y ago
That's what I mean. Yes. But when the caller missed checking some error code, then nothing won't notice it has failed and now you have corrupt data to deal with. That's why I think blowing up at the time when something goes
453.
by pilif 8y ago
That depends on whether you are going to be the person who has to find out why corrupted data has been written, when it was corrupted, what the original value was or even worse, whether a given record is corrupted or not because the corrupt
454.
by pilif 8y ago
Not if my caller forgets to handle my error at all
455.
by pilif 8y ago
> Nothing explodes, the code keeps running in my book, this is not a good thing but a very bad thing. If I'm a library function somewhere all the way down the stack and I'm at a point where something about the state I'm
456.
by pilif 8y ago
> The problem is that the mechanics used for corporate monitoring are almost exactly the same mechanics used for your ISP spy on you or censor things. I disagree. With SSL getting more and more widely deployed, corporate monitoring has
457.
by pilif 8y ago
Also, if a package installed a suid binary, I would still have no recourse nor ability to audit and it would have full root rights. And blanket warning about such packages would lead to a slew of false positives and warning fatigue (heck, e
458.
by pilif 8y ago
I'm having slight trouble understanding the threat vector this is supposed to be protecting against. If you don't trust a package's install script, why would you trust any of the binaries installed by that package? If you&#x2
459.
by pilif 8y ago
This reads like a problem with the POSIX libraries and not with the C language itself, so it‘s probably not up to the language to fix it. C actually comes pre-equipped in a pretty nice position with its default 8 bit char data type (which i
460.
by pilif 8y ago
They did that for TLS 1.2. It took the better part of a decade before it became usable and could be enabled by browsers as a version to try. Being able to use the improved protocol now is very nice.
461.
by pilif 8y ago
> Once these middlebox vendors catch up to TLS 1.3, what's to stop them from breaking the supported versions extension the same way they broke the client version field Nothing. It will happen just the same, so TLS 1.4 will have a
462.
by pilif 8y ago
The configuration PFSense uses for Strongswan works without requiring you to install a mobileconfig file on iOS. This has rapidly become my favourite solution for a VPN setup because it uses only built-in software on the client and it'
463.
by pilif 8y ago
The one under discussion here isn’t open-source
464.
by pilif 8y ago
It’s fine in landscape
465.
by pilif 8y ago
Swipe left to advance a slide. Swipe right to go back.
466.
by pilif 8y ago
Personally, I think it's a good thing it forces MITM. Either you monitor your users browsing habits or you don't. If you do, it's only fair if they have a chance to know that you do and seeing an SSL connection be "prote
467.
by pilif 8y ago
>also force me to install certs on everything I own before I can comfortably let those things on the network I'm curious: How is TLS 1.3 different from TLS 1.2 in that regard? How would you implement an intercepting proxy with TLS
468.
by pilif 8y ago
This isn’t as much about stopping middleboxes on your perimeter that you fully control, but a lot about middleboxes between you and the destination that are outside of your or the destinations control. Those are often used to add ads rath
469.
by pilif 8y ago
And the same goes for whoever steals/subpoenas your machine. Shit like this is why I only buy Apple products. The data I care about I have (encrypted) backups of. Not having backups and hoping that a specific hardware failure will not
470.
by pilif 8y ago
Will be the default in 5.0 of which Beta 1 has just been released (which probably prompted this submission)
471.
by pilif 8y ago
Here in Europe, the Dark Sky based forecasts are really bad, whereas the weather underground ones are in line with other local forecasts. Now in case of carrot, I guess having unreliable forecasts is totally in line with the other tangentia
472.
by pilif 8y ago
What a shame. Carrot Weather is by far my favorite weather app ever, but here in Europe, its forecast is useless unless you pay extra to get the weather underground data. Then it’s in-line with what all other local weather forecasts produce
473.
by pilif 8y ago
> ISPs are happily using CG-NAT I wonder how "happily" they are using CG-NAT. NAT is inherently stateful and keeping track of that state becomes more expensive as the amount of hosts behind the NAT is increasing. Running CG-N
474.
by pilif 8y ago
if you rate-limit, you should probably be rate-limiting on the /64 prefix and those are about as hard to get as individual v4 addresses.
475.
by pilif 8y ago
I'm a huge fan of IPv6 as it's a huge contributor to ensure the continued openness of the internet. Also, I'm in the privileged position of having a native dual-stack provided by my ISP, so I have native IPv4 and IPv6 both at
476.
by pilif 8y ago
Seeing that IPv4 and IPv6 aren't interoperable and seeing as 75% of the internet is still running on IPv4 and assuming that the amount of v6 only hosts is absolutely minuscule, I would say that adapting and then running a bot on v6 is
477.
by pilif 8y ago
Isn’t that a good thing? You don’t want to be able to export keys from a HSM.
478.
by pilif 8y ago
They had to limit this quite a bit because it was abused for tracking. SFSafariViewController now has its own cookie store too unless you use a specific API for authentication purposes, but that will also open a modal dialog the user has to
479.
by pilif 8y ago
> My ad blocking app uses a VPN configuration so it works in every single app on my iPhone. I would never trust an ad blocking app with all my traffic data and who the hell knows what else besides the VPN configuration it's instal
480.
by pilif 8y ago
On iOS, there can’t really be an alternative to Safari because there is no way to change the default browser system wide. No matter how careful you are, eventually some app somewhere will open an URL, causing Safari to open, but now that it

More ›