progval

42 ms·

601.
by progval 5y ago
The distribution can alter your browser/kernel/...'s code anyway. So you are not adding a compromise vector by using one more package provided by the distribution, as opposed to getting the package from a third-party.
602.
by progval 5y ago
Cookies are only mentioned once in the GDPR, as an example in the preamble (paragraph 30). Article 4. defines personal data and identifiers without referencing specific technologies: > (1) ‘personal data’ means any information relating t
603.
by progval 5y ago
Built-in logging libraries offer more flexibility: you can set the log level of each module to avoid flooding your log files with everything's debug logs, for example. Or you want to write multiple log files with different settings. Al
604.
by progval 5y ago
It is addressed here: https://p2p.nat64.dk/v6peer but I find it very unconvincing. While the arguments are technically correct, operators of Tor exit nodes know from experience this does not prevent their homes being raided
605.
by progval 5y ago
They spoof the DNS to make you access a server they control (what they call a v6peer), that relays to another one (called a v4peer), that communicates with the v4 Internet. You can try it with github, for example (the real github.com does n
606.
by progval 5y ago
> It's for people on broken IPv6-only networks (i.e. basically nobody). It's for people on any IPv6-only networks. They are few, but are growing in numbers; ideally the whole internet will one day, and this could help. Not to m
607.
by progval 5y ago
Not these ones: https://p2p.nat64.dk/v4peer And also, https://p2p.nat64.dk/why mentions: "IPv4-only users contribute by providing a communication path to IPv4-only services. In return they get external
608.
Totally Safe Transmute(github.com)
1 points by progval 5y ago|0 comments
609.
by progval 5y ago
But the mirror may be less convenient. This works for OsmAnd+ for example: it's FOSS, free (as in beer) on FDroid, but costs 25$ on Google Play.
610.
by progval 5y ago
> I don't need the added burden of responding to issues and pull requests You don't have to. open sourcing does not mean putting it on Github with an open bug tracker, you could simply offer tarball downloads, mention you don&#
611.
by progval 5y ago
You get one /64 per server. How often do you need to divide a range within a server and run SLAAC for one of these subdivisions?
612.
by progval 5y ago
> We could trust nothing beyond our base system and our browser, and refuse to use any code we don't fully audit, but this would be an impossibly austere way to live. [...] > The alternative is sandboxing, using a lightweight opt
613.
by progval 5y ago
> At the very least, this would need some quantification of risk Yes, of course. And in the case of autoupdates: 1. the risk of finding a RCE in any random PC within the next few years is close to 100% 2. an unpatched RCE is strictly wor
614.
by progval 5y ago
> Not only is this seen as perfectly fine, it's widely regarded as a security best practice. It's not "perfectly fine"; but the alternative is millions of computers with known security vulnerabilities exploitable by a
615.
by progval 5y ago
Google Wave did this too, but it was enabled by default. It sure takes a while to get used to it.
616.
by progval 5y ago
Note that IRCv3 is backward-compatible, so you don't need a new client. Any existing IRC client can connect to it just fine; including multi-protocol clients like Pidgin. And if you do want a client with all the new IRCv3 features, tha
617.
by progval 5y ago
True, people on IRC usually don't mind conversations being public. Check out OTRv4 though, they are working on modernizing the encryption: https://bugs.otr.im/otrv4/otrv4
618.
by progval 5y ago
OTR is a de-facto standard for e2ee on IRC, it predates Matrix by a decade.
619.
by progval 5y ago
Minimalist and full-featured implementations can coexist and talk to each other, as all specs are designed with graceful degradation in mind. Minimalist implementations can also cherry-pick newer features they want. For example, this IRC cl
620.
by progval 5y ago
There is a draft specification to allow threading messages: https://ircv3.net/specs/client-tags/reply Not many clients are interested in implementing it, though.
621.
by progval 5y ago
OTR < https://otr.cypherpunks.ca/ > is the de-facto standard for encryption on IRC. It's also quite old, so it predates IRCv3.
622.
by progval 5y ago
"Clients are recommended to provide appropriate privacy controls when enabling this feature." https://ircv3.net/specs/client-tags/typing#privacy-considera...
623.
by progval 5y ago
There is a work in progress specification for push notifications: https://github.com/ircv3/ircv3-specifications/pull/471
624.
by progval 5y ago
> - use your preferred client to connect to your preferred server. I want to like Matrix, but this is currently the most painful point, for me. There are very few mature clients, so they don't serve as many niches or specific tastes
625.
by progval 5y ago
They could find it on StackOverflow and copy-paste it. Searching for "Javascript is array" on DDG or Google even returns the SO answer before the NPM package.
626.
by progval 5y ago
> Also, for example TGV requires you to be at the check in 20 minutes before. Where? For TGV Inoui (the main brand) you have to be in the train 2 minutes before (written on any ticket, also here: https://www.sncf.com/fr&#
627.
by progval 5y ago
It moves existing heat from the outside to the inside of the house. It works exactly like an air conditioner, but in the other direction. (And some heat pumps are reversible so they can be used as both)
628.
by progval 5y ago
On the contrary, the first bug happens because docker-compose tries to decode the path as UTF-8, but it is not UTF-8-encoded. ("'utf-8' codec can't decode byte")
629.
by progval 5y ago
> the top screenshot looks doctored rather than being a real screenshot It's SVG, so not a screenshot at all.
630.
by progval 5y ago
1. There are some documented here: https://en.wikipedia.org/wiki/Brave_(web_browser)#Controvers... 2. it's based on Chromium, contributing to the Blink monoculture 3. BATs are based on Ethereum, which has its own

More ›