raggi

60 ms·

691.
by raggi 8y ago
Once you identify a privileged user like this reusing credentials the steps to rooting their box and stealing everything else aren't far away. In this case it wasn't needed, but in any case the threat model and recovery model for
692.
by raggi 8y ago
And this is a critical point. Gpg comes up constantly. It's a waste of everyone's time alive for this use case. If a developer with publish access is compromised, it doesn't help. If the infrastructure is compromised only has
693.
by raggi 8y ago
We are writing a lot of things in Rust for Fuchsia. We are also incestung in Rust to get it to where it needs to be for such usage.
694.
by raggi 8y ago
Instead the plate embeds "targeted messaging" and makes tracking even easier. Cheap at only $7/mo!
695.
by raggi 8y ago
[[ alone is reason enough to prefer bash over sh on teams where you inevitably have non-experts making changes. Safe Bash is hard to teach, posix is far harder.
696.
by raggi 8y ago
> By and large, it doesn't, very well. Compared to what? It may be easy to provide evidence for: * Time and resource intensive prebiased word of mouth has a higher conversion rate. * Conversion rates for mass advertising are very lo
697.
by raggi 9y ago
Some of the things you mention already do the multi encode trick and get a resultant bad rep for cpu and battery load. The real trick is balancing all such product concerns in any next gen.
698.
by raggi 9y ago
That last sentence
699.
by raggi 9y ago
Not one mention of Adobe here after 12 hours. Y'all ain't seen nothing yet. https://www.adobe.com/marketing-cloud.html
700.
by raggi 9y ago
Clearly you're not aware of e.g. apple maps says collection, iPhone defaults, or the apple maps business model. This rhetoric that Apple is special in this context is just the reality distortion field still rippling.
701.
by raggi 9y ago
You can cope with more than 1ms to the data center, latencyphile.
702.
Zero to Driver(frotz.net)
3 points by raggi 9y ago|0 comments
703.
by raggi 9y ago
You can fill GB/s with net/http. You could do so easily with 1.9. The GC shouldn't be a problem unless your object graph is very complicated.
704.
by raggi 9y ago
Not unless they switch to http/1.0. in 1.1 you need one of: content length, connection close, chunked encoding.
705.
by raggi 9y ago
Bringing agpl into a banks systems would cause lots of fears. Adoption there is unlikely.
706.
by raggi 9y ago
And while we're at it https://issues.apache.org/jira/plugins/servlet/mobile#issue/... Also, if you read the docs you'll notice that the deploy plugins encourage users to put their central passw
707.
by raggi 9y ago
Npm being split means more metadata, not necessarily more code. You admit to not reading your code or inspecting your dep, and you assert that you have no problems - based on what? Your deps.txt is barely different than a lock file here. Re
708.
by raggi 9y ago
2. If you don't whitelist your deps, then your dep chain can change with any update. Signing keys prove only that the publisher held the keys, not that they aren't malicious, or that the keys aren't stolen. 3. Fat fingering y
709.
by raggi 9y ago
So you use https://github.com/whispersystems/gradle-witness , and you manually verify everything you whitelist right? And you never typo, right?
710.
by raggi 9y ago
Name one.
711.
by raggi 9y ago
Request a meeting, and make sure the subject demonstrates that it is about feedback and/or an offer of mentorship/assistance, but do not add specific details. Pick the term based on their personality. If they refuse, that's o
712.
by raggi 9y ago
Is the scanning engine sandboxed in any way, or is the stack protector all there is between a scanner bug and a remote exploit?
713.
by raggi 9y ago
Starts out by pointing out that exporting encryption software is illegal, and then recommends that you export encryption software in unencrypted form.
714.
by raggi 9y ago
Look at them. 6c does not apply. No such offer was made, nor were the preconditions met. 6d is the only option that applies, and while those copies had the standard links to upstream, they had no links to downstream. See https://
715.
by raggi 9y ago
If you look at some of the installations listed in the wiki they have clearly been modified. They do not provide their modifications publicly, and are in violation of section 5. This is the core challenge with user modified agpl over user m
716.
by raggi 9y ago
What projects have been taken over like this and still exist?
717.
by raggi 9y ago
Does this mean we can teach auditors to look beyond nist now too?
718.
by raggi 9y ago
I think the weatherization is under the tiles. I'm not sure what they'll be doing, but I imagine there will be forms of some kind under the tiles to cope with wiring concerns and alignment, and there will be weather protection und
719.
by raggi 10y ago
In a decent phone it puts the key in the tee/se
720.
by raggi 10y ago
Ask Maher Arar what CBP is allowed to do, or better just read up on the case. Don't assume the laws in this area have any relation to what you would hope they are. They're not.

More ›