robertlagrant

6 ms·

91.
by robertlagrant 4mo ago
> While common JWT libraries have now mostly got their stuff together, this has not always been the case. There were plenty of libraries accepting the "none" algorithm [1] or allowing attackers to forge tokens by using a public
92.
by robertlagrant 4mo ago
I don't know why you're surprised; you didn't specify you meant historically.
93.
by robertlagrant 4mo ago
Microsoft have not maintained a monopoly on search, mobile, or maps, and they seem to mostly maintain their large market segments based on familiarity, not hype.
94.
by robertlagrant 4mo ago
How are you sandboxing your Pi coding harness? Directly only mounting certain folders, using capabilities to kill the network and not giving it all your shell env vars, that sort of thing? Or do you use a tool?
95.
by robertlagrant 4mo ago
I prefer KDE (on Ubuntu, because I tried it and it's good enough) - it's got more stuff built into the OS in terms of settings. I tended to find that Gnome needs you to install more things to expose configuration settings, whereas
96.
by robertlagrant 4mo ago
I agree that integrity can be done by secure boot, but HTTPS does mean that someone can't intercept your request and serve you valid, signed, older software that has a known security flaw in it.
97.
by robertlagrant 4mo ago
I'm not an expert in database hints, but the syntax looks very readable and composable. That's great thing to have got right.
98.
by robertlagrant 4mo ago
Most people have laptops now, in my experience of large corporations.
99.
by robertlagrant 4mo ago
Hm - I think I follow. But say I push a commit on a branch, then realise I messed up the commit message, so I --amend and push. I know that git push will fail, but if I git push -f then it won't detect that someone else pushed to the
100.
by robertlagrant 4mo ago
Oh dear. That is tricky. It must be a rare enough combination that it looks like automation.
101.
by robertlagrant 4mo ago
Well, that was terrible searching by me! Thanks. @dang could you update it please?
102.
by robertlagrant 4mo ago
All force-with-lease does it stop you from clobbering rather than you having to realise somehow that you did that. It seems like a no-brainer. What's the problem with it?
103.
Proton Mail adds support for Gmail account syncing and sending(cyberinsider.com)
7 points by robertlagrant 4mo ago|3 comments
104.
by robertlagrant 4mo ago
(I couldn't find this announced on the Proton website - apologies if there was a page, Proton!)
105.
by robertlagrant 4mo ago
I haven't ever noticed Cloudflare having any issues on Firefox, so presumably that implies any unilateral actions in web standards have been worked around by CF to provide the service to Firefox as well.
106.
by robertlagrant 4mo ago
> and if you're lucky Firefox I haven't had any problems with Firefox so far. Why do you say this?
107.
by robertlagrant 5mo ago
I was reading things[0] about sugar a lot earlier than that - maybe 2007? And it made a lot of sense back then. [0] https://nosdiet.com
108.
by robertlagrant 5mo ago
Thank you! I will have to give it a try.
109.
by robertlagrant 5mo ago
> As if megacorps somehow don't have inefficiencies No one is saying megacorps don't have inefficiencies.
110.
by robertlagrant 5mo ago
I have a Reolink but haven't got to Home Assistant yet. I'm happy switching to that, but for less technical (though still digital savvy) spouses - how would you say the switch would be for them?
111.
by robertlagrant 5mo ago
No, many of them fold, and even those that don't close departments and make redundancies. Companies can only grow if they're serving their customers with value, or if someone believes that they will do in future and puts money in
112.
by robertlagrant 5mo ago
> you simply stated but haven't explained why bloat is inevitable in the government except to say there is no market pressure applied in government. Whereas the parent is literally talking about employing people using market rates,
113.
by robertlagrant 5mo ago
I agree, but also a civil servant has incredible pension opportunities, and defined benefit as well, and is hard to remove if they turn out to be bad. A contractor is a fixed cost, and individuals can be rejected with far less ceremony and
114.
by robertlagrant 5mo ago
Ah great! Best of luck. They're a nice bunch.
115.
by robertlagrant 5mo ago
Well, it was surprising at the time. I agree that the public should care about this, and I'm glad the specifics of Palantir are helping bring the issue to light, but it was still very odd. I think non-technical leaders are seduced by w
116.
by robertlagrant 5mo ago
That part was referring to the air-quotes here: > but at least you won't have "inefficient civil service bloat" to have to manage.
117.
by robertlagrant 5mo ago
The problem is that the civil service is inefficient and will bloat, because the only pressure on it to not is the individual good practice of leaders. There's no competitive/market pressure on it to naturally cap spending based o
118.
by robertlagrant 5mo ago
I was part of a UK company that did sovereign data work on NHS data. They would give NHS trusts equity in the company in return for the data, and the data wouldn't leave the company; only results of paid research studies. The idea was
119.
by robertlagrant 5mo ago
Hi Ben - how are you positioning yourself vs LocAI? I had a few chats with them and they have a fairly similar pitch.
120.
by robertlagrant 5mo ago
This is my instinct too. I've had the pleasure of using DataDog and the pain of negotiating with their salespeople!

More ›