pilif

49 ms·

571.
by pilif 9y ago
A phishing dialog could fake the drawer. Apps can and do regularly use the full screen which is something web pages don't do and which will require extra user confirmation for precisely this reason. Denying apps full screen access is v
572.
by pilif 9y ago
Yes. This is the most horrible UX I have ever seen, especially from a company as security-sensitive as Apple is. In my experience, none of the mitigations given by the article are actually helping in some of the cases: > Hit the home bu
573.
by pilif 9y ago
A built in web browser that’s newer than IE11?
574.
by pilif 9y ago
>We are working to fix the issue that allowed this to happen This is not some issue that you can fix. This is not some color being off, or some chat message appearing out of order. This is about AI in its continued infancy that’s now b
575.
by pilif 9y ago
But people with old IE won’t get a favicon that way
576.
by pilif 9y ago
Because of lacking SNI support? You can try an Ajax request or loading a picture over SSL and then redirect with JS if it doesn't fail. If the SSL site serves HSTS headers, all SNI supporting browsers will in the future default to HTTP
577.
by pilif 9y ago
It didn’t. The new feature is to ask for user confirmation before loading even a properly signed kext. This is the feature that doesn’t work at the moment. Or rather it works, but it can be bypassed
578.
by pilif 9y ago
> The office worker running VMWare Fusion to run an old Windows program or any Dropbox user with the Smart Sync feature are all semi-technical audiences that need kernel extensions for their programs to work VMWare Fusion's .kext
579.
by pilif 9y ago
>Of course if Apple’s ultimate goal is simply to continue to wrestle control of the system away from it users, under the guise of ‘security’, I’m not sure any of this even matters I disagree with this conclusion. All of these features
580.
by pilif 9y ago
> IP reputation while not perfect is still a useful layer of lipstick on the SMTP pig. just use the prefix for reputation. You can assume that each user will have received a /48. Yes. There are some ISPs out there handing out &#x2
581.
by pilif 9y ago
> It is not recommended to expose unsecure Unit API why do people always use "not recommended" when they actually mean "do not ever do this or you'll end up the laughing stock in the tech press" Exposing this o
582.
by pilif 9y ago
Reminds me of the feature phones in the early 2000s that all had an 'online' button that would bring up the mobile operator's WAP portals. The only reason why you'd ever press that button is by accident (these WAP pages
583.
by pilif 9y ago
My ISP runs plain Gbit Ethernet over Fiber. I'm using my own PFSense based router (actually, a VM on a MacMini running VMware ESXi). These ISPs exist, but as smaller companies, they often serve a small subset of the population. As the
584.
by pilif 9y ago
Back in 2001 when I was investigating the dependencies I wanted to take on for a webmail service, qmail was on my list of possible candidates, also because of this security guarantee. However, I quickly learned that while that security guar
585.
by pilif 9y ago
When it cannot reliably detect lanes, it disengages autosteering while making a very obvious warning sound that you cannot possibly miss.
586.
by pilif 9y ago
What would these circumstances be? I have never seen my car do this.
587.
by pilif 9y ago
Carrot weather is my favorite. Nothing beats a weather app planning to kill you behind your back and being snarky about it. It’s not the most detailed weather app, but certainly the funniest.
588.
by pilif 9y ago
the firewall is probably blocking ICMP. For a long time, it was considered best-practice to blanket-block ICMP and for a long time you could mostly get away with it. But over time some really useful stuff has been added to ICMPv4 (early con
589.
by pilif 9y ago
The comment I was responding to asserted that IPv6 in general is unfixable whereas the article was only talking about IPv6 fragmentation where I'd say it's totally correct. But in general, fragmentation is a bad idea and we should
590.
by pilif 9y ago
The comment I was responding to asserted that IPv6 as a whole is unfixable which is not true. With regards to fragmentation, I would say "fragmentation in general is unfixable", no matter the protocol. Thankfully with IPv6, the gu
591.
by pilif 9y ago
if it's unfixable, why is 40% of our in-office internet traffic running over IPv6? Why is 100% of our LAN traffic over IPv6? Why is 30% of the traffic to our sites running over IPv6?
592.
by pilif 9y ago
Yes. But that would break all existing tools wrapping around apt-key. That's the downside of everything-is-just-strings in Unix
593.
by pilif 9y ago
So it's not just me? I thought I must be doing something wrong between all these people talking about using their iPads as their main work machines and then text selection just doesn't work for me most of the time. I really wonder
594.
by pilif 9y ago
the same people who are most vocal about this are the same people that are most vocal about not having multi process support and about having compatibility issues with extensions when the browser updates or when one extension steps onto ano
595.
by pilif 9y ago
> An interface on linux has only one ip address. absolutely not true. Neither for IPv4 nor IPv6, where it's even the default to have a multitude of addresses on an interface. > The "localhost" interface will either d
596.
by pilif 9y ago
The internet doesn't just consist of Firefox and Chrome. There's mail servers, mail clients, FTP clients, etc. And Firefox and Chrome can be behind middleboxes and/or personal firewalls that only talk TLS 1.1 on the public-fa
597.
by pilif 9y ago
Company regulations require all communication to be encrypted, but they don't specify the protocol to use, so TLS 1.1 is fine but no TLS is banned. I'm not making this up.
598.
by pilif 9y ago
That depends on the daemon software. It might compile-time feature-check OpenSSL
599.
by pilif 9y ago
I agree that there is the absolute need for advocacy. I agree that we need to get rid of old TLS. But I disagree that it’s up to the OSes to make this a compile time issue. If Debian comes out in 2019 in a state where 30% of the internet ca
600.
by pilif 9y ago
(Edit: this reply is a reply to a your comment before your edit that stated I was at risk because of non-mitigatable issues in 1.1) My 1.1 supporting customers are at risk. I'm not at risk. If they take the (unwise) decision that the r

More ›