predakanga

17 ms·

121.
by predakanga 10y ago
An additional safeguard against this exploit would be using the `secure_file_priv` option, which restricts the location that queries can write to. According to the docs[0], this has been configured to '/var/lib/mysql-fi
122.
by predakanga 10y ago
As far as I'm aware, it always has been. They link to their source code from the footer of their homepage, licensed as GPLv3: https://adblockplus.org/en/source
123.
by predakanga 10y ago
In the past 12 hours, I started a new Python project. I can't agree with the sentiment - the most I can say is that Python packaging isn't terrible now. My intention was to create a Python 3 package using best-practices, a nice di
124.
by predakanga 10y ago
I like the idea of a client-specified HSTS header - allowing users to control their risk directly (albeit through a browser extension) would definitely be a good thing.
125.
by predakanga 10y ago
It's worth noting that "Flexible SSL" is the lowest security option available - Cloudflare provide access to a free private CA ( https://blog.cloudflare.com/cloudflare-ca-encryption-origin/ ) in order to e
126.
by predakanga 10y ago
I've just spent some time experimenting with the state of X-on-windows. It seems that there are two main options: - Rootless mode (the default install for VcXsrv), in which your windows are managed by the Win10 WM and integrate quite n
127.
by predakanga 10y ago
I'm curious, have you tried viewing the streams or VODs through an alternate player? I've found that I can almost always improve the smoothness of their content by using Livestreamer[0] to play it in VLC (or Kodi, more often) [0]:
128.
by predakanga 10y ago
I'm not entirely familiar with sub-CA specifics, but CloudFlare (at the very least) has developed a system for deploying SSL with off-site private keys[0]; I imagine that could be used in a situation like this. [0]: https://
129.
by predakanga 10y ago
Their "Risks and Challenges" section spells it out: Pebble 2 and Time 2 is nearly complete. We’re currently ramping up at our factory and are ready to meet the estimated delivery times.
130.
by predakanga 10y ago
The Core is also advertised as lasting through "5 days of 45 minute workouts" - I imagine that 3:45 battery life isn't too tough to achieve
131.
by predakanga 10y ago
The Kickstarter claims that it has 4GB of internal storage that you can load podcasts/audiobooks on. Besides that they say the Core runs "unlocked" Android 5.0, so I'd imagine you can load it up with whatever you like.
132.
by predakanga 10y ago
Besides the usual public/private key system, OpenSSH supports a less-used system called user certificates. User certificates achieve the same purpose as your normal key but instead of pre-installing your public key on the server, you p
133.
by predakanga 10y ago
It's definitely been discussed[1]. I last read about it when investigating the use of splice(2) in nginx; seems there are a few use-cases, but nothing really compelling. [1]: https://lwn.net/Articles/666509/
134.
by predakanga 10y ago
I'd certainly be interested - Docker ID: predakanga Specifically, I'm interested in exploring integration with JetBrains IDE's docker plugins
135.
by predakanga 11y ago
Grandparent - the comment two posts up
136.
by predakanga 11y ago
Aye, it's called Device Firmware Upgrade (or DFU) mode, and it's specifically mentioned in the FBI's request: > "The SIF will be loaded via Device Firmware Upgrade (“DFU”) mode, recovery mode, or other applicable mode
137.
by predakanga 11y ago
You're right in that the system is vulnerable, but this doesn't mean that it's not "secure" in practical terms. One could argue that the phone is secure because even Apple has no way of recovering your passcode, nor
138.
by predakanga 11y ago
Over the past few years, there have been a number of deaths caused by unprovoked one-punch attacks ("king-hits", or now "coward punches"), possibly the highest profile being the death of Daniel Christie[0] after being at
139.
by predakanga 11y ago
There are a great many factual errors in this article and I'm sure someone will write a proper response, but I thought someone should address the most glaring: - The repeated assertion that you can only use one process container is fal
140.
by predakanga 11y ago
I can't speak to the others that have been mentioned in this thread (tini in particular seems to be identical), but the solution used by phusion/baseimage is written in python[0] - a C-based solution allows for lighter-weight cont
141.
by predakanga 11y ago
I've love to see CloudFlare enable admins to utilize Server Push without extra configuration on their backend. My ideal situation is one where I can have my webapp specify it's dependencies through a spec such as Server Hints[1],
142.
by predakanga 11y ago
Definitely the preferred approach - it's worth noting, though, that you might provide access to the docker daemon over other transports as well. Regarding the question of bind-mounting docker, it's worth knowing that there are sti
143.
by predakanga 11y ago
While I agree with you generally, the linked script isn't really a fair criticism of Spinnaker. The linked script is just a standard bootstrap script, used by Gradle - I won't defend the logic behind it (they have a page for that
144.
by predakanga 13y ago
Because the hashes that are stored in the .torrent operate on that unaligned data. In practice, what this means is that you can't verify that two files of the same name and size but at different alignments within the consolidated data
145.
by predakanga 13y ago
Unfortunately it's not as simple as that - when asking each other for data, the individual peers ask for a particular 'piece' of the torrent, where that piece isn't relative to a given file, but the torrent as a whole. T
146.
by predakanga 13y ago
There are many types of private tracker that would love to see this - for instance consider gaming trackers, where you may have a single .torrent for a large collection of ROMs, or DLC for a game. Consider TV trackers, tracking a whole TV s