pipo234

12 ms·

151.
by pipo234 3y ago
...or Digicert, Globalsign, the Hongkong post office, whichever CA is in your truststore. I just mentioned LetsEncrypt because it's free and exceptionally easy to use. I'm not implying in any way they aren't providing a great
152.
by pipo234 3y ago
Spotted typo: "hints" -> "hits"
153.
by pipo234 3y ago
Or get someone to click on a spoofed domain, certified by our beloved LetsEncrypt! Apparently al that is needed is an HTTP 302/307 redirect response (or html redirect payload, maybe even DNS?) pointing the client toward c.betly[.]me
154.
by pipo234 3y ago
Asking for 7% pay raise + lift hiring freeze doesn't sound unreasonable if inflation in France is at 4.9%, IMHO. Even if Apple is likely to have a couple of bad quarters ahead.
155.
by pipo234 3y ago
> The performance difference comes from the fact that Fortran says aliasing is not allowed [...] This is one of the legacies modern C++ is still wrestling with today, supposedly solved by Rust, Zig, Val and the likes.
156.
by pipo234 3y ago
I suppose building running trains across railway lines autonomously is simpler than running trucks across highways.
157.
by pipo234 3y ago
Isn't this just like netcat?
158.
by pipo234 3y ago
This resonates with the UK discussion about backdooring/golden keying/breaking/prohibiting encryption, to save the children . Yes, unbreakable encryption is potentially a perfect weapon for terrorists and threatens safety of
159.
by pipo234 3y ago
In case of Red Hat? Given their substantial contributions to Linux, primarily funded by support contracts, certification and consultancy I think they deserve to be profitable. At the same time, I as a user, also prefer to not pay them and
160.
by pipo234 3y ago
Hmm. Let's add some fringe functionality to extend our browser's attack surface. Will surely make 0.01% of our customers happy, while demonstrating our devs are committed and have their eye on the ball.
161.
by pipo234 3y ago
There are a lot of issues with FSF's perspective and the way they were written down. Running GNU derivative in a proprietary cloud is one of them. RedHat (in)ability to make a fair profit is another. Still Google's Linux "the
162.
by pipo234 3y ago
The OP sounded like he was actually interested in putting security concern's on the company's strategic agenda. So the "trouble" might be beneficial.
163.
by pipo234 3y ago
Could be a winning move, but it's also common for whistleblowers to end up under some bus at some point. Turning against your director (and colleagues, etc.) will most certainly cost you your job. A lawsuit for disclosing secrets is al
164.
by pipo234 3y ago
It would be in customers interest for organize products by category, but large AAA brands (Unilever, PepsiCo, Proctor Gamble) often bully shops into brand-designated floor space. Large supermarkets (Carefour, Intermarche, Ahold Delhaize) bu
165.
by pipo234 3y ago
Also, French supermarkets have a long history of bullying AAA labels, nudging customers to buy their "home label" copy cat alternatives instead.
166.
by pipo234 3y ago
Before considering what makes "the best game console", consider what makes "a good game console". * does it run majority of existing game titles? * if no, are a large number of game-changer titles expected any time soon?
167.
by pipo234 3y ago
> WhatsApp messages are end to end encrypted, so in theory they can't use your message data to make money, even if they would like to. They've probably realized the message payload isn't very valuable to mine. The metadata
168.
by pipo234 3y ago
Small steps. Norway population (5.5 million) is equivalent to 0.07% of the total world population. Meta's revenue would be proportional, and so would be the fine. To avoid inconveniencing foreigners, Norwegian advertisers would have
169.
by pipo234 3y ago
Indeed. So far TPMs so far have proven "useful" mostly in the restricted domain where the user is the threat vector. Ie. anchoring/hardening DRM. Swiss cheese, disguised as protection against hackers , is merely great prot
170.
by pipo234 3y ago
Lamenting. The idea with TPM was KISS/separation of concern/"do one thing only and do it well". That is: guard a secret and use it as a trust root. For some reasons — unrelated to this mission — that simple concept led t
171.
by pipo234 3y ago
> Informing companies about the flaws in their products is one of the major things a security professional van do to fix some of these problems. Yes, but it is a common misconception that "informing others" is at the core of th
172.
by pipo234 3y ago
Moreover, it's a sad security blog. I always think it's sad when security professionals limit themself to talking/writing/teaching about security, pointing out problems. The happier security blogs are those that then g
173.
by pipo234 3y ago
Indeed. From the article: > Linux phones lack any significant security model [...]. They do not have modern security features, such as full system MAC policies, verified boot, strong app sandboxing, modern exploit mitigations and so on,
174.
by pipo234 3y ago
That sounds very familiar. ;-) (For the similar reasons I learned Pascal, Modula 2, Ada when I ought to have learned about C++, Java) If you were a teacher now, having to explain about predicate logic and proof automation, would you choos
175.
by pipo234 3y ago
IMHO Prolog is mostly a way of thinking, of designing your software. Making a blazingly fast compiler is an art, but the basic interpreter at the heart of prolog is fairly straight forward to design yourself. Prolog isn't as old as LIS
176.
by pipo234 3y ago
I've worked a couple of years developing supply chain optimization software in C++ using ILOG constraint propagation software (Solver, now owned by IBM). At the time we considered BinProlog. It had built range propagation, compiled to
177.
by pipo234 3y ago
Curious to learn whether Prolog is still an integral part for contemporary CS (proposition, predicate) Logic curriculum, natural language parsing, etc. I suppose that the built-in backtracking was the most controversial aspect, so maybe att
178.
by pipo234 3y ago
I guess that the difficult part when trying something genuinely novel is finding funding. If you can't point at competitors, because there aren't any that proves that either you have a brilliant idea and you're the first. Or
179.
by pipo234 3y ago
> Indeed, Musk has publicly cited concerns that Ukrainian efforts to reclaim the peninsula could prompt a nuclear response from Russia, a fear that, according to Isaacson, was heightened by conversations he had with senior Russian offic
180.
by pipo234 3y ago
Presumably, the extension binaries plug into the FOSS Apache licensed product using some kind of API and therefore might better be shipped and sold separately. This, for instance works with proprietary httpd Apache Webserver modules (shared

More ›