rakoo

47 ms·

631.
by rakoo 4y ago
> I appreciate your advice. I regularly voice concerns about security and let management make decisions. From my perspective I've done my due diligence and my hands are clean. I feel like the best you can do unironically is the fir
632.
by rakoo 4y ago
1. Ask management to write in full letters and sign a paper basically saying "I acknowledge that not maintaining software up-to-date is a security risk and opens the company to substantial financial damage" 2. Hire a Pwn-As-A-Serv
633.
by rakoo 4y ago
Twitter chooses what to push in front or not, it absolutely is a publisher
634.
by rakoo 4y ago
It's not so much part of the language but it's an idiom that is said by one of its authors ( https://youtube.com/watch?v=PAAkCSZUG1c&t=9m28s ). "Code reuse" always has some non-compressible context: an
635.
by rakoo 4y ago
Are you looking for pony ( https://www.ponylang.io/discover/#what-is-pony ) ? Never tried it, but it does have actors, reference capabilities (in short, "who can get this piece of memory and what can they do with it
636.
by rakoo 4y ago
> So with this, the last thing Go had going for it over Java is gone, right? Go still has composition over inheritance, which is vastly more flexible. Go favors explicit (verbose copy-paste, redundancy, use stdlib first, libraries secon
637.
by rakoo 4y ago
> and are unlikely to successfully navigate Mastodon onboarding That's the point: take your community with you on your own instance and recreate your AFK network inside computers. Don't let them go through the hassle of choosin
638.
by rakoo 4y ago
Have you not read the too many stories of open source developers struggling to make ends meet ? Of the gpg guy saying he might give up because it's just too much ? Of all the devs on the edge of burnout because of all the stress and th
639.
by rakoo 4y ago
> 1. Instead of being blocked or shadowbanned by Elon Musk, you can now be blocked or shadowbanned by the Mastodon instance admin Don't pick random instances, get together with friends and family on a community-owned instance. Or ru
640.
by rakoo 4y ago
> To build things freely and openly to make the best possible software that we (humans) can make. This only works in a system where humans do not need money to live. This is not our system. In a capitalist system, for better or for worse
641.
by rakoo 4y ago
You cannot remove politics from IT infrastructure. Politics is everywhere. Politics is deciding how we live together as a society; the very fact we're having this discussion is politics. It's the fable of being apolitical that i
642.
by rakoo 4y ago
Thanks for adding references ! I am also thrilled by how nice bird.makeup ux is, although it's a bit unnerving to go to an account from your mastodon client, click on the "open in browser" and land on the homepage, not the pa
643.
by rakoo 4y ago
For reference, here are two similar projects: - one by Darius Kazemi, the creator of Hometown, a fork of Mastodon with a focus on local community: https://github.com/dariusk/rss-to-activitypub - my very own, assuming o
644.
by rakoo 4y ago
How many times have we complained the state of the infrastructure is bad and we should spend some time to fix it, but business imperatives prevent us ? In your story the team was given time and resources to actually do it, at last. If it wa
645.
by rakoo 4y ago
Let's have reasonable goals, shall we ? "Their shit doesn't stink as bad as others'" is nothing commendable, especially after souch publicity.
646.
by rakoo 4y ago
There are multiple "root" CAs. CA compromises happen all the time, and it has always been dealt with because the fact that multiple "roots" exists means each one has to be kept in check. It's also possible for you (
647.
by rakoo 4y ago
DNSSEC relies on a hierarchy of trust, with a single root zone at the top. If the root zone has issues, the whole system breaks down. In contrast, there is no unique "root CA" that can fail.
648.
by rakoo 4y ago
No, because if one CA is broken only the certificates it authored are vulnerable. It takes more to break the entire system.
649.
by rakoo 4y ago
The issue with DANE is that now the DNS becomes a new point of failure, which means higher attention to details, more scrutiny, heavier and more secure processes for the root signing ceremonies that require more activity. It recentralizes e
650.
by rakoo 4y ago
That's why you need certificates and not just a key pair. Certificates make key rotation easier, and you want key rotation to be easy. I guess the proper way forward is a small utility that gets the latest signature through http+tls,
651.
by rakoo 4y ago
I have ~200 lines of scripts that use fzf and mblaze ( https://github.com/leahneukirchen/mblaze ) as the ui for my very own mua. It's all Unixy and lovely. I should write a page about that
652.
by rakoo 4y ago
So you went from archlinux, a system explicitly telling you you have to get involved in your own computer to make sure it works, to a macbook where everything is taken care of for you. What did you expect with archlinux exactly ?
653.
by rakoo 4y ago
Yeah that's my point: that would be like saying cURL supports XMPP because there are HTTP/web socket bridges, but that's not the point. I guess cURL could connect, with, send a message and leave, or list rooms, but that'
654.
by rakoo 4y ago
How would that work ? cURL is built for request-reply usecases, with potentially long-lived connections, but once connected the handling happens outside of curl. irc is an interactive protocol, meaning that requests and replies would be han
655.
by rakoo 4y ago
Because XMPP doesn't have a commercial entity doing all the marketing work, and that's the only way to propel a type of communication when people don't have the time to choose
656.
by rakoo 4y ago
For the n-th time: the Fediverse is _not_ a commercial product. It is a tool. A tool needs only be useful to its users and doesn't care about extracting the most revenue. It is exactly this sick mindset of profit-making that made Faceb
657.
by rakoo 4y ago
Why does it matter how fast it is growing ?
658.
by rakoo 4y ago
XMPP
659.
by rakoo 4y ago
S3 is straight HTTP, the most widespread API. It can be directly used on the browser, has libraries in pretty much every language, and can reuse the mountain of available software and frameworks for load-balancing, redirections, auth, distr
660.
by rakoo 4y ago
The pirate zone is very much against private property and ownership, it is probably the last place crypto will work. Cyberpunk is the denunciation of the ravages capitalism does, I don't think you will sell them NFTs in the next 1000 y

More ›