sarnowski

9 ms·

31.
by sarnowski 5y ago
Dealing in absolute terms does not help security. It depends entirely on your threat model. If you consider NSA or similar agencies a problem then you are in a world of pain anyway and using an entry level guiding blog post is certainly not
32.
by sarnowski 5y ago
Not all cookies require consent. There are many legitimate reasons to collect personal data - consent is only required if you cannot find another legitimate reason. For cookies that mean: technical cookies that you need to technical provide
33.
by sarnowski 6y ago
Sounds like I2P[0]; what are the differences? [0] https://geti2p.net/en/about/intro
34.
by sarnowski 6y ago
The cookie banners come from the ePrivacy Regulation and are supposed to inform you that the website is storing data on the your device and that you can opt out (not in) of it. Consent is required by GDPR but not for the technical circumsta
35.
by sarnowski 6y ago
My vague understanding is, that the tests can also test positive for antibodies from other similar viruses. They have a significant false-positive rate that you should not rely on a positive („you are immune“) result but overall they will p
36.
by sarnowski 7y ago
As one step to raise awareness about the differences I really like this overview: https://fpf.org/wp-content/uploads/2017/06/FPF_Visual-Guide-...
37.
Twitter Android client code execution discovered(privacy.twitter.com)
2 points by sarnowski 7y ago|0 comments
38.
AWS Nitro Enclaves(aws.amazon.com)
6 points by sarnowski 7y ago|1 comments
39.
by sarnowski 7y ago
Living in Germany/Berlin and can confirm. Our tap water is excellent and is way cleaner than all bottled water you can buy. Keep in mind, bottled water is also kept around way longer and has the time to „breed“. In tests, the tap water
40.
Dragonblood – Analysing WPA3's Dragonfly Handshake(wpa3.mathyvanhoef.com)
1 points by sarnowski 7y ago|0 comments
41.
by sarnowski 9y ago
Wait, what? > git was invented before continuous delivery git was invented 2005. So you mean when people used the term Continuous Delivery more frequently? Because using CI and automatically deploy is not "new" and was surely d
42.
by sarnowski 9y ago
Wondering if the following feature is enabled by default: "Wi-Fi Assistant Auto-connects you to high quality open WiFi and secures your connection with a VPN back to Google." I really do not want to tunnel my whole traffic thr
43.
by sarnowski 9y ago
I don't know but assume its a similar issue as with Google Analytics. In Germany, you are not allowed to use default configured Google Analytics. User IPs are PII for our data protection laws (it is possible for someone on earth to kno
44.
by sarnowski 9y ago
> Make sure to install http://www.oracle.com/technetwork/java/javase/downloads/jce8... . to allow 160-bit cryptography Or don't use the Oracle proprietary distribution but the OpenJDK of your oper
45.
PostgreSQL in a time of Kubernetes(tech.zalando.com)
8 points by sarnowski 9y ago|0 comments
46.
by sarnowski 9y ago
Somehow the actual EU states aren't really behind this. Germany's interior minister just recently proposed a new attempt at legalizing spying citizens devices. http://uk.mobile.reuters.com/article/idUKKBN1951V
47.
Microsoft Quietly Patches Another Critical Malware Protection Engine Flaw(threatpost.com)
3 points by sarnowski 9y ago|0 comments
48.
by sarnowski 9y ago
In Germany, you can take several years parental leave in which you are protected against being fired. But you only get paid up to 14 months and only up to 60% or ~2000$/month after tax. This gets completely paid by your health insuranc
49.
by sarnowski 9y ago
Great, and now let me add my kids and have some parental control features based on their voice recognition ;-)
50.
Container-Optimized OS from Google is generally available(cloudplatform.googleblog.com)
2 points by sarnowski 10y ago|0 comments
51.
by sarnowski 10y ago
Containers are just advanced chroots. They do the same with the network interface, process list and your local user list as chroot is doing with your filesystem. In addition, containers often throttle resource consumption of CPU, memory, bl
52.
by sarnowski 10y ago
We don't have a separate internal version. We are already running some hundreds PostgreSQL clusters in AWS + etcd with Spilo/Patroni. The Kubernetes variant is not used yet in production but we plan to migrate the first datasets s
53.
by sarnowski 10y ago
Yes, we are currently developing a PostgreSQL operator for Kubernetes. We are heavy PostgreSQL users. Spilo[0] supports all kinds of slave configurations, backups, monitoring tools[1] and all advanced capabilities. [0] https://gi
54.
by sarnowski 10y ago
That is the same trust boundary as in Kubernetes currently: https://kubernetes.io/docs/user-guide/secrets/ It is the most important step that you can package containers without having to know the production s
55.
by sarnowski 10y ago
A single software piece can't be PCI compliant but only how you use it. You have to argue that Docker uses the Linux isolation mechanisms that make those containers virtual machines in the sense and spirit of PCI. Treating containers a
56.
by sarnowski 10y ago
Sounds like you described https://www.jetbrains.com/upsource/ (I am not affiliated with Jetbrains in any way)
57.
by sarnowski 10y ago
For Reference: https://en.m.wikipedia.org/wiki/General_Data_Protection_Regu... This directive will drastically increase fines for data leaks in the EU.
58.
by sarnowski 10y ago
Interestingly, the german preliminary constituion (we don't have a real one) that was written by the WWII allies also is about people but unambigously means all people on earth. 'Article 1 of the Basic Law (in German legal shortha
59.
by sarnowski 10y ago
Not arguing that the following method can be trusted as much as in Haskell but properly used also prevents this kind of scenario: https://clojuredocs.org/clojure.core/io℅21 The 'io!' macro marks a code block
60.
by sarnowski 10y ago
Actually this is how the chromecast works. You never interact with the chromecast directly to configure your Netflix account for example. I assume (hope) they send a URL to the movie it should play with a one-time token to access the movie

More ›