qmarchi

7 ms·

61.
by qmarchi 1y ago
Disc: Former Visa Employee Generally, these devices will use the mp1 to do all of the cryptographic operations around the devices. The biggest part of this is the keys defined between the terminal and the acceptance gateway (something like
62.
by qmarchi 1y ago
To play devil's advocate: The hypocrisy that was pointed out in the post are post "post compile" events. If you want to setup Play Services, that's on the onus of the user, same thing with distribution of GPLv3 applicati
63.
by qmarchi 1y ago
Am I the only one that got, "This article smells like it was written by an AI told to 'compare these two products'"? Something around the sentence structure just is offputting.
64.
by qmarchi 1y ago
Most responsible orgs do TLS termination on the public side of a connection, but will still make a backend connection protected by TLS, just with a internal CA.
65.
by qmarchi 2y ago
Does my cell plan cover roaming on the moon?
66.
by qmarchi 2y ago
This is an pre-publishing excerpt from "Mornings Without Mii", coming out on the 25th. https://us.macmillan.com/books/9780374614782/morningswithout...
67.
by qmarchi 2y ago
Shibuya usually has parties going all night, but it was all pushed back into clubs holding events, nothing on the streets.
68.
by qmarchi 2y ago
One of the biggest things for events like this are: - Regulatory Restrictions, many jurisdictions have limit on how to treat accounts like this - Repeat behavior from others that have breached this segment of the ToS. A good automation woul
69.
by qmarchi 2y ago
Except for that you risk breaking laws in several jurisdictions if you don't. And you can't fall back to "manual" enforcement think of the massive capital of human resources you'd have to invest in to make it keep u
70.
by qmarchi 2y ago
Disclaimer: Former Technical Solutions Engineer for GCP, aka Support for Customers. Also Former Engineer on YouTube Caching. To get it out of the way, I do not agree that it should've taken a journalist to get involved to have this sit
71.
by qmarchi 2y ago
If you can make it, checkout Super MAGFest. They host a OpenTTD tournament every year.
72.
by qmarchi 2y ago
There's a huge difference in what GDC-Airgapped runs on and what is actually running in GCP. Airgapped is based on top of Kubernetes, and it's using mostly off the shelf components for networking and compute. GCP is based on top o
73.
by qmarchi 2y ago
BattleDash - "Here's XSS, Account Takeover, Ban Reversal, and a heads up before I publish it" EA - "So here's $0." If anyone is at EA, this man just saved the integrity of your entire empire, you might want to
74.
by qmarchi 2y ago
How does this compare against something like Wanderlog? Would be nice to see a little more detail on the individual features on the main page. Oh and your copyright is out of date.
75.
by qmarchi 2y ago
You can set your clipart to an end time rather than a count down. "Busy until 16:00"
76.
by qmarchi 2y ago
As is the risk of over subscription. However, most game services tend to schedule their downloads in the middle of the night, and video stream is very "bursty", and downloads chunks of data every few seconds. Also, with people&#x2
77.
by qmarchi 2y ago
Tangential to the post: Was going to toss an application your way since it sounds like interesting work, but it looks like the Google Form on your Careers page was deleted.
78.
by qmarchi 2y ago
Thus far, nope.
79.
by qmarchi 2y ago
Yes and no, they may have been informed in a non-public setting on _why_ DEFCON has refused to pay. DEFCON themselves is likely to not state a reason publicly, so getting a "here's what I was told by DEFCON" is likely the clo
80.
by qmarchi 2y ago
There's a larger risk that if someone breaches a system with a wildcard cert, then you can end up with them being able to impersonate _every_ part of your domain, not just the one application.
81.
Show HN: Honeydo - A task list for two.(gethoneydo.app)
10 points by qmarchi 2y ago|2 comments
82.
by qmarchi 2y ago
Devices in my house are prefixed with the owner of the device (CRDNL- or CZZN-) then generally around the reason on why the device was built/upgraded. For example, I've got CRDNL-NIPPON for a machine that I was intending to take w
83.
by qmarchi 2y ago
Just note that without evidence, it becomes he-said-she-said, and a chargeback doesn't negate a contract to pay.
84.
by qmarchi 2y ago
In this particular case, they're the air-gapped product is singly dependent on HPE servers, mostly for compliance reasons. Same reason on why it uses Palo Alto firewalls. Though in the case of the GGC nodes, having multiple vendors was
85.
by qmarchi 2y ago
Meta Conversation: The fact that X has a "Show Probable Spam" and both of the responses were pretty valid, with one even getting a reply from the creator. I just don't understand how they still have users.
86.
by qmarchi 2y ago
There's a bit complexity there as the system is designed to be modular based on requirements. GPUs? Raw RAM? DC or AC? All different compoents that you can swap in/out.
87.
by qmarchi 2y ago
In this particular case, no, they're unbranded HP boxes, though some that have been deployed have GCP logos on the racks themselves.
88.
by qmarchi 2y ago
CYBS Engineer here. We're already working on it. Keep an eye for merchant notifications if you use certificate pinning. Now, back to rotating certificates....
89.
by qmarchi 2y ago
Excellent question, it should probably be changed to https://flipdisc.io/ (truncating everything after the first /)
90.
by qmarchi 2y ago
SponsorBlock works by telling the video player to skip to certain timestamps within the native video player. YouTube however knows the exact offset of the ad that it sent, and this can offset its timestamps.

More ›