pilif

57 ms·

481.
by pilif 8y ago
I think it is relevant: back in february they made us believe that them using 2FA phone numbers for marketing purposes was a bug and today we learn that them using 2FA phone numbers for marketing purposes is a feature. So either they lied i
482.
by pilif 8y ago
Didn't we have this discussion already earlier this year and they told us it was an unfortunate bug and that it has been fixed? Yes. Yes. We did: https://www.theverge.com/2018/2/16/17022162/facebook-
483.
by pilif 8y ago
The cookies thing could be seen as a bug: the button does remove the cookies, but because your google sign in state is now tied to the browser sign in state, new cookies will immediately be set. To fix this, the “remove cookies” button woul
484.
by pilif 8y ago
And then you end up with people complaining about bloat because the browser contains code for every possible state of all these settings.
485.
by pilif 8y ago
Why does this add various flags an knobs to disable ipv6? Disabling ipv6 has nothing to do with de-googling Chrome. What is it with people disabling rather than fixing their ipv6 config (and then possibly complaining about slow adoption)?
486.
by pilif 8y ago
If they finally switched from the deprecated UIWebView to WKWebView, then chrome too gets to run JS at safari's speed. WKWebView runs out of process and thus can have the JIT entitlements.
487.
by pilif 8y ago
The X is too expensive to make for them to be able to significantly lower the price and keep selling it. This is mostly caused by the OLED screen which is why this years lower end introduction has an LCD screen
488.
by pilif 8y ago
You don’t need to nat for privacy. That was my point. If your machine uses a different outgoing address for every connection, it’s as well masked as if all your machines used the same address. The only thing that stays static across connect
489.
by pilif 8y ago
Crappy ones also sometimes leak UDP packets. Or all DNS queries or whatever. If you use crappy VPNs it's your fault if you then don't get the protection you want, no matter the transport protocol. Or rather: Using IPv4 doesn'
490.
by pilif 8y ago
> Yes, I've never been comfortable with the device specificity of IPv6 these days it's really not much different from IPv4: During the lifetime of a connection, the prefix stays the same, so that's equivalent to the IPv4
491.
by pilif 8y ago
>Too much of pain to figure out who is right and if/how ipv6 changed ICMP then let me make this easy for you: ICMP has become a vital part of the inner workings of an IPv6 network. You will break all kinds of functionality by drop
492.
by pilif 8y ago
> But, the last part took some time (not in the range of ms) for large tables create a temporary index covering that column. Then it will be in the range of ms.
493.
by pilif 8y ago
you can create a temporary conditional index on that table, then the check will be instantaneous. There is a `create index concurrently` that won't cause locks on the table. With this the re-check for nulls when adding the not null con
494.
by pilif 8y ago
You could certainly get the same effect without downtime prior to this. It just needed a few extra steps and some cooperation by the application: adding a null able column without default has always been instantaneous, so you would do that,
495.
by pilif 8y ago
Babylon 5 for example. It’s still some of the best Sci-Fi and I regularly rewatch it every few years.
496.
by pilif 8y ago
I agree with everything you say. But are you telling me that each developer should do this for their personal webpage project just because Chrome might decide to put HTTP-only pages behind a modal dialog?
497.
by pilif 8y ago
> To make it easier & cleaner in development, it's best to make yourself a Certificate Authority CA and issues local certificates sure. That's what I do on those sites where I absolutely need SSL even during development. Bu
498.
by pilif 8y ago
As somebody on the dev build train normally I've seen this change for quite a while now and my brain quickly stopped processing the warning on HTTP only sites. I hope that flipping the switch now will cause enough of the remaining non-
499.
by pilif 8y ago
> obviously the ban is via reviewing apps in the store, not on the software level it's also on the software level. If you are an app and want to mark parts of your memory as executable, you need a special entitlement that requires
500.
by pilif 8y ago
Even if you could sneak loading external code by app review, there's no way to have the OS execute code that hasn't been signed by Apple. You can't mark memory as executable and you can't have the OS load code not signed
501.
by pilif 8y ago
The strongSwan configuration generated by pfSense works out of the box with macOS and iOS IKEv2 support in its default config. This has quickly become my VPN solution of choice as it works without a third party app, it’s extremely quick to
502.
by pilif 8y ago
Either by pressing the virtual "Esc" key displayed on the TouchBar (that's what I do), or by using Ctrl-[, or by remapping any other key to ESC
503.
by pilif 8y ago
macOS comes with very good USB support in user-space that works without any drivers. https://developer.apple.com/documentation/iokit/iousbinterfa...
504.
by pilif 8y ago
a reason for banning namespaces is that they didn't want to add namespace support to their stripped-down RTTI solution and a reason for banning templates would likely be code-size concerns. I mean - I'm just guessing here, but I c
505.
by pilif 8y ago
> Yes, if the attack vector you're trying to close is a compromised keyboard/network/terminal and not a stolen-while-unlocked device. however, not having the TOTP key in your password manager would also protect against m
506.
by pilif 8y ago
> maybe if the quic people had built on it instead of udp Then QUIC would be as dead in the water as sctp is: between all the middleboxes currently running the internet it’s impossible to pass any low level protocol that wasn’t in use
507.
by pilif 8y ago
I know. And they even delegate the ip6.arpa domain so you can do reverse lookups with your own DNS server. source: I'm fiber7 customer since 2014 and they offered me to do the delegation when I asked them for the static prefix.
508.
by pilif 8y ago
oppressive regimes will assign people static IPv4 addresses tied with their legal identities.
509.
by pilif 8y ago
would you rather emergency security patch opensshd on 10 machines or one bastion host?
510.
by pilif 8y ago
> I can always ssh to any of my machines (or the VMs) from anywhere. It's just simpler. Exposing an sshd to the public internet seems very risky. IPv6 or not. Even with v6 in your LAN, you probably still want the firewall to drop

More ›