pricechild

10 ms·

61.
by pricechild 5y ago
It's currently in preview, but https://docs.microsoft.com/en-us/azure/app-service/quickstar... doesn't look bad.
62.
by pricechild 6y ago
I think it's the opposite. I understand that if Sony go ahead with server shutdowns, there's a risk that when your PS3/4 battery fails and is replaced, you still won't be able to play games you've paid for offline.
63.
by pricechild 6y ago
One of the issues is that it is HackerOne making the demand, not Valve. I have been involved with other bounties on that site in that time, related to other companies & products. I suspect if I had "broken their (Hackerone) policy&
64.
by pricechild 6y ago
> There are also other reports of Valve not reacting to HackerOne reports appropriately I'll second that. I discovered and reported a vulnerability with the Steam client's Bluetooth pairing process via hackerone. The issue was
65.
by pricechild 6y ago
I don't think this is true. The GPL allows you to copy & modify code for your own desires very generously. The limitations you fear apply if you distribute the code (in source or other forms) or modifications yourself.
66.
CVE-2020-15228 redux: Azure DevOps Pipelines RCE(pricey.uk)
5 points by pricechild 6y ago|0 comments
67.
by pricechild 6y ago
You can work around this by sticking rclone in the middle which does support soft delete: https://pricey.uk/blog/restic-backups-without-delete/ In short, give rclone your keys, (small ~/.rclone config file) t
68.
by pricechild 6y ago
Plus I believe there is at least one way in which forks may be removed en masse if the original is removed.
69.
by pricechild 6y ago
Valve seem to have been addressing that with their runtimes. See https://github.com/ValveSoftware/steam-runtime
70.
by pricechild 6y ago
See also: https://www.theverge.com/2020/12/10/22168295/cyberpunk-2077-... > ... a certain song (CDPR didn’t say which one) during the game’s “Braindance” sequences might trigger a Digital Millennium C
71.
by pricechild 6y ago
I think that's a perfectly reasonable stance for more physical businesses, e.g. shipping products. Really though, how does it work for a business like this? How do you not serve a specific country on the internet? I'm not aware of
72.
by pricechild 6y ago
Should they also comply with $pick_a_dictatorship_you_find_reprehensible 's laws? Edit: The comment I replied to has been edited and originally explained the owner was Canadian but serves US customers and so should abide by US law. I d
73.
by pricechild 6y ago
Yep, might also need to set the browser agent to a chromebook. Haven't tested it recently but it worked well enough a few weeks ago.
74.
by pricechild 6y ago
Cool, sorry to put words in your mouth. I guess the simple answer to the GP is "Availability is likely sacrificed", and the clue's in the submission title being all about consistency. I haven't looked too deep into it an
75.
by pricechild 6y ago
"almost certainly not fully partition tolerant at the node level" Whoa hang on! You can't just say you're not tolerant of partitions... I'm struggling to find the best post on aphyr.com about this but https:/&
76.
by pricechild 6y ago
Probably best you don't look into the security of other manufacturer's keyless entry systems... Many people refer to it as "relay theft" since historically it's often just a matter of relaying/repeating a signa
77.
by pricechild 6y ago
I've been a (sometimes leading) member of multiple groups with "counter bad speech with good speech" ideals and have often wondered whether it really is the best way. As time goes on it feels ever more futile? I guess the gro
78.
by pricechild 6y ago
I bet we'd both seriously consider (if not prefer) sqlite over postgres in a bunch of scenarios?
79.
by pricechild 6y ago
I'm assuming you've seen https://addons.mozilla.org/en-GB/firefox/addon/multi-account... ? It doesn't work in exactly the same way - you don't by default get a different window per-profile
80.
by pricechild 6y ago
It's been a while... but I'm pretty sure the opening of the book explained that there was a theory that should both the question and the answer exist in the same universe, it would instantly collapse on itself and begin anew. Ther
81.
by pricechild 6y ago
The number seemed to reduce from his reporting on day 9 but day 10's report gives a clarification that there's another room with a few more.
82.
by pricechild 6y ago
On iOS maybe, but there's no problem installing 3rd party app stores on Android without rooting. See for example F-Droid. Recent versions of Android have also improved the permissions model... you can specify what apps (e.g. F-Droid) a
83.
by pricechild 6y ago
Which RFC spec? Not 2822?
84.
by pricechild 6y ago
> providers/servers should ignore everything from the + to the @ Why? I'm not sure it has ever been a standard and it's certainly not a default implementation for most providers?
85.
by pricechild 6y ago
Related, though not necessarily in reply: HSBC in the UK have a system they call "Voice ID" which claims to authenticate you by your voice: https://www.hsbc.co.uk/ways-to-bank/phone-banking/ I've no
86.
by pricechild 6y ago
Also a massive fan of this project - seems a no brainier compared to the original for personal use. My big recommendation is to backup the binary at the same time as your sql backup. They've got a github sponsors link too FWIW.
87.
by pricechild 6y ago
The UK PM did tweet images of cabinet meetings containing the id, albeit after the meetings were finished. This turned into a few security stories e.g. https://www.theverge.com/2020/4/1/21202584/zoom-secu
88.
by pricechild 6y ago
I would be more sympathetic to this plan if it were also tied to update status. Imagine manufacturers having the incentive to issue monthly security updates, else their users get very angry they can't watch Netflix/log into their
89.
by pricechild 6y ago
Would I be right if I guessed you have a development background? For reference, I have an ops background.
90.
by pricechild 6y ago
I think the point was that most u2f implementations around don't just allow OTP as backups... they require you to set up OTP first before u2f can be enabled. It does make a bit of sense. Users can't be trusted not to lose their si

More ›