psanford

15 ms·

151.
by psanford 4y ago
GCP's biggest problem is trust. People (rightfully) don't trust that GCP won't do a rug pull with their production workloads. GCP has done that with both pricing and killing off services. If you are an infrastructure provider
152.
by psanford 4y ago
Besides how great this blog post is, I really can't get over what the author of srandom did. Two weeks ago an issue was opened that pointed out xor-shift was not a secure PRNG. The srandom author replied by saying "prove it"
153.
Breaking a PRNG: Is It Called Xor Shift or Xor Shit?(tobtu.com)
5 points by psanford 4y ago|1 comments
154.
We need better support for SSH host certificates(mjg59.dreamwidth.org)
4 points by psanford 4y ago|0 comments
155.
by psanford 4y ago
I mean, of course he's going to drink a bourbon that was _bottled in bond_.
156.
by psanford 4y ago
You can register passkeys today on Github.com
157.
by psanford 4y ago
The vast majority of attacks these days are not via compromised desktop environments. They are from phishing, password reuse + third party password compromises, and weak passwords. Its these most common attacks that Github is addressing wit
158.
by psanford 4y ago
You can use a FIDO2 key, a built-in platform authenticator, or a desktop TOTP application.
159.
by psanford 4y ago
Well, to answer this question if someone comes looking: there's no official aarch64 widevine release, but chromeos just started shipping a 64bit arm version of widevine in the last month. But that version is incompatible with the 16k p
160.
Ad-hoc structured log analysis with SQLite and DuckDB(tersesystems.com)
5 points by psanford 4y ago|0 comments
161.
by psanford 4y ago
Where is the publicly available linux/aarch64 build of widevine drm? The fetch-latest-widevine.sh[0] script says 'Architecture not supported'. [0]: https://github.com/proprietary/chromium-widevine/bl
162.
by psanford 4y ago
Yes
163.
by psanford 4y ago
The web version of spotify doesn't work on my m2 air in either chromium or firefox. The Spotify website errors with: "Playback of protected content is not enabled." Slack works just fine from the browser on Asahi though.
164.
by psanford 4y ago
I've got an M2 Air. It is very usable, but its far from everything working perfectly. Builtin speaker support is still a work in progress. It works if you know what you are doing and are not afraid to damage your speakers if you make a
165.
by psanford 4y ago
There are a number of methods that "work" to varying degrees. For bluetooth, stores can install ble beacons that a phone app can detect (if it has permission) and then get a rough estimate of the general area in the store you are
166.
by psanford 4y ago
The blancolirio youtube channel covered this today[0]. His theory is that the autopilot was set incorrectly. When enabled shortly after takeoff it triggered the dive. [0]: https://www.youtube.com/watch?v=1B9mQQnZg_8
167.
by psanford 4y ago
No
168.
by psanford 4y ago
I can't see that and not think: base64 null byte padding.
169.
by psanford 4y ago
Matt Levine's most important lesson of "financial literacy," that is never taught in any "financial literacy" classes: > If I offer you a 20% annual risk-free return, am I lying? The answer is yes, of course.
170.
by psanford 4y ago
github does support ssh certs, but only for its enterprise offering.
171.
by psanford 4y ago
Before the proxy service that is what people did. Now we don't need to because the proxy service handles that automatically. You can run your own proxy service if you want. There's a large benefit to the go community as a whole fo
172.
by psanford 4y ago
You are basically arguing that sr.ht is taking a "principled stand" against google. If that is what they are doing they should just say that and not pretend like there were no other options. I'm ok with saying "google sh
173.
by psanford 4y ago
The go proxy won't save modules that don't have a permissive license.
174.
by psanford 4y ago
No. The Go team offered to add sourcehat to a list that would stop background refreshes. It would still allow fetches initiated by end users. The change sourcehat is making is to break end users unless they set some environment variables. I
175.
by psanford 4y ago
Why? If some open source maintainer goes off the rails and deletes all their packages, why should that break my builds? I still have a valid license to the code, I don't really care that a maintainer rage quit 4 dependencies down from
176.
by psanford 4y ago
Why did sourcehut not take the offer to be added to the refresh exclusion list like the other two small hosting providers did? It seems like that would have resolved this issue last year.
177.
What We Do in the /etc/shadow – Cryptography with Passwords(soatok.blog)
98 points by psanford 4y ago|29 comments
178.
by psanford 4y ago
Every rss reader should have a sandbox UI where you can at least get a sense of what it looks like and how it works without signing up. I suspect that would help your conversion rate too.
179.
by psanford 4y ago
A bit more details. I upgraded last week to enable the GPU driver (its just a nix config flag). The GPU driver works quite well given that its brand new and still quite experimental. I've had a few issues in early boot but once the sys
180.
by psanford 4y ago
I assume you mean the touchbar. The physical function keys work just fine on my m2-air running linux.

More ›