rb12345

9 ms·

31.
by rb12345 6y ago
In the case of DOIs, https://dx.doi.org/${DOI} should also return the target article with no need to search.
32.
by rb12345 6y ago
That's true, but a lot of software standardised on RabbitMQ specifically, including its client libraries. That means there's still a lot of demand for AMQP 0.9.1 over 1.0. (RabbitMQ does have a plugin for AMQP 1.0, however.)
33.
by rb12345 6y ago
That's most likely from donations in Bitcoin. The PACs actually want real-world dollars, so sell any cryptocurrency recieved immediately. i that case, there's an entry for the "x.yyyzzz bitcoins were donated" part, and
34.
by rb12345 6y ago
If GitHub's been migrating to Azure infrastructure on the backend, it's possible that everyone else moving to all-WfH helped to cause it. Teams use massively increased during lockdown for obvious reasons and that's definitel
35.
by rb12345 6y ago
A lot of the details are covered in https://ocw.mit.edu/courses/electrical-engineering-and-compu... .
36.
by rb12345 6y ago
I'd assumed that the main difference between the capitalised version and uncapitalised version was being potentially able to trademark the former, so you could get the distinction in free-ness that way. I'm not aware of the FSF a
37.
by rb12345 6y ago
I think the argument of the article is to pick the right language in the beginning so you save both developer time and runtime and don't have to rewrite in a better language later. For example, Python is a lot slower than threaded C,
38.
by rb12345 6y ago
CredentialGuard uses Hyper-V, so it could be that.
39.
by rb12345 7y ago
> What the article is saying is a bit nuanced in that the IDP can theoretically provide a different user identity for each service, but in reality, does that really happen? Seems like if you're doing that you're starting to mix
40.
by rb12345 7y ago
Usually you'd either track known errors in the dataset (implying that the companies had either bought it from PDL or copied the leak), or you'd ask the banks (who do have a presence) which accounts were paying them and who owned
41.
by rb12345 7y ago
One obvious answer in that case would be to establish who is buying the data from them and treat any PDL data as potentially tainted. If you find a downstream customer who does have a presence, then investigate accordingly. You might no
42.
by rb12345 7y ago
I doubt it would be either ethical or useful to deliberately overload translation tables. That said, I would imagine that the migration to QUIC and HTTP/3 would increase pressure on NATs. QUIC's use of UDP means that it's h
43.
by rb12345 7y ago
You can pretty much get away with just a Kerberos KDC (and optionally pam_krb5) if setting up user accounts on the servers by hand/via configuration management is a practical option. At scale, you'd want LDAP to set the user IDs
44.
by rb12345 7y ago
> "There is an antique router configuration out there that creates a peering arrangement between the University of California and Amazon that's not authorized!" Guess what guys, they'll probably shut down the arrange
45.
by rb12345 7y ago
To expand on this from a non-US perspective, the advice to join a federation also applies to working with universities elsewhere. Having joined one federation (e.g. InCommon or the UK Access Management Federation ( https://www.u
46.
by rb12345 7y ago
The main things to remember about certificate rollover from experience are: - Publish the signing certificates ahead of time in the metadata before using them. - Install any new encryption certificates on your service (supporting old and ne
47.
by rb12345 8y ago
It's probably blanket blocking of imgur as opposed to the image itself.
48.
by rb12345 8y ago
It's not even a compliant banner at that, given the opt in is a requirement for viewing the site...
49.
by rb12345 9y ago
I don't think OAuth requires third-party cookies, and SAML definitely does not. The authentication parts use HTTP POSTs or redirects from the IdP to SP. You probably do want cookies to track the sessions on each end, but those would
50.
by rb12345 9y ago
Shibboleth should cover the "decent" side of your question, given it's pretty heavily used in academia. The SP side of things is fairly straightforward to setup; whether the IdP counts as easy to deploy is probably a matter
51.
by rb12345 9y ago
Having run into similar issue to this in the past, this is most likely caused by caching of group data by the backend servers, possibly coupled with multiple servers answering queries.
52.
by rb12345 10y ago
The most likely reason is ASLR support, since you have more address space available for randomisation. Other than that, you can probably get a slight boost in performance from the differences between x64 and x86, but lose out if the code i
53.
by rb12345 10y ago
Frankly, about the same number of people as the number checking the HTTPS certificates are as expected. GPG does have the advantage though that once the public key is known and trusted, the package can't be tampered with on the server
54.
by rb12345 10y ago
It's worth noting that it's safer to use Kerberos for the actual authentication part over LDAP and/or NTLM. In the event of the servers being hacked, you avoid leaking your password (but may leak some form of ticket, of cour
55.
by rb12345 10y ago
The downloads are all GPG-signed, so that shouldn't be an issue. You have the issue of the initial trust, but that applies to HTTPS too to a lesser extent.
56.
by rb12345 10y ago
Surely that's BNF rather than XML?
57.
by rb12345 11y ago
The older versions are out of support though, aren't they? It's possible that variants of this might exist in those too if the sibling comment is correct.
58.
by rb12345 11y ago
Actually, this may be even worse than described. The UUID digits all amount to the hex digit of hi in the 16 3 place (i.e. the 4th least-significant nybble). However, it also turns out that hi[init]*0xFFFF will give the same digit sequen
59.
by rb12345 11y ago
On recent Ubuntu releases, you can enable DNSSEC resolving by adding the following to "/etc/NetworkManager/dnsmasq.d/dnsmasq.conf": dnssec #dnssec-check-unsigned conf-file=/usr/share&#x2
60.
by rb12345 11y ago
You could probably do that relatively safely with bit operations, but I expect to be proved wrong. Something like this should work: /* Swap char for uint<register_size> for speed */ #define CMP_TYPE char &#x2F

More ›