slrz

18 ms·

121.
by slrz 8y ago
> forced the developer to adopt a specific folder organization Well, so does C (and basically everything else). Alternatively, you can pass tons of -I and -L flags to your compiler calls but you can do that with Go, too. The point of GOP
122.
by slrz 8y ago
GCP as well as Digital Ocean definitely allow for configuring PTR records. AWS does too, I think. At least with GCP, you have to demonstrate ownership of the domain.
123.
by slrz 9y ago
I don't think that loading up a debug build with your dev certificates builtin is too much of a hassle for enabling MITM hooks.
124.
by slrz 9y ago
Sure, and Go's most prolific users are in infrastructure software for distributed systems. You seem to agree with the quoted statement.
125.
by slrz 9y ago
You generally setup the reverse proxy to pass the required information to the backend via some trusted mechanism (e.g. HTTP headers not settable through client requests).
126.
by slrz 9y ago
Why wouldn't you be able to export the key? Is this something that is "enforced" by the user interface of some browsers?
127.
by slrz 9y ago
Sure, if you're going to use non-portable constructs, there're better alternatives to the self-pipe thing. Linux has something roughly similar with signalfd. The nice thing about the write-a-byte-to-the-pipe thing is that it works
128.
by slrz 9y ago
No server-side code. No mobile apps. No public word on when this is going to happen. Yet, this proprietary technology is further integrated into Firefox.
129.
by slrz 9y ago
Bugs are also marked private without any security angle involved whatsoever. Often, these are related to initiatives done in cooperation with so-called "partners". For an open source project, Mozilla appears to constantly settle o
130.
by slrz 9y ago
Names like brelse, bread, namei and so on have a long history in Unix kernels and file systems. That history forms people's expectations. If you provide a namei operation in your code, you better call it namei and not make up some ot
131.
by slrz 9y ago
I haven't seen an off-the-shelf x86 machine that actually requires binary-only drivers for essential functionality in a very long time. Sure, there is lots of specialized hardware that no one wrote an open source driver for but you don
132.
by slrz 9y ago
Ed is the standard text editor.
133.
by slrz 9y ago
While there was no world-destroying core meltdown, it was still super-annoying to deal with. Lots of code needed to be touched. I'd really like a comeback of a fixed TLS-SNI challenge as running a port 80 HTTP server just for LE sucks
134.
by slrz 9y ago
In the most common setups, the reverse proxy usually terminates the TLS session and uses a different connection to make requests to the backend servers (e.g. nginx proxy_pass directive). This means the backend server certificates are only e
135.
by slrz 9y ago
Why does it have to be the same cert on every host? Use a separate cert for each and automation will be much easier. With Let's Encrypt, you don't need to minimize the number of certs just to save some money.
136.
by slrz 9y ago
Of course not. If there was a domain reserved for internal use and everyone could get a cert for it, everyone would be able to impersonate your internal hosts. I don't think there's a way around coming up with a reliable process f
137.
by slrz 9y ago
Plaintext HTTP being fine for delivering public documents might have been true 10 or 20 years ago. Sadly, attacks on and uninvited mutation/corruption of plaintext content has become that super-common (at least in some parts of the wor
138.
by slrz 9y ago
You can use Let's Encrypt certificates for non-publicly reachable hosts by using the dns-01 challenge type. That, of course, means that you need some way of properly automating your DNS infrastructure to add the necessary TXT recor
139.
by slrz 9y ago
It's an improvement because middleboxes can't mess up your packets when you're using authenticated encryption. Sure, they can still drop all of them, but that's a much easier problem to debug than otherwise. We have all
140.
by slrz 9y ago
I doubt this is very relevant in the case of Chrome compilers. It's more about the huge investment/expertise in Clang- or LLVM-based dynamic analysis and development tooling. It's just the better platform for writing these th
141.
by slrz 9y ago
No, it wouldn't. At that point you already lost lots of information and your only option is to faithfully reproduce the behaviour of the x86 machine. You can still do it, of course and performance isn't even that bad. See Fabrice
142.
by slrz 9y ago
Seems to be a solid product, according to the reviews: > So when i first received this product i thought it would be just another dongle like chrome cast. But oh boy was i wrong!!! This is such an amazing product and the video quality is
143.
by slrz 9y ago
Why would it be? It's going to end up in lots of places it's not supposed to be. Better generate the private key where it's needed and never have it leave the system.
144.
by slrz 9y ago
Replace your key by signing a message announcing your new key?
145.
by slrz 9y ago
They could just put the relevant information on all their communications, your credit card, statements and so on, also accounting for future rotations. For banks, it could work quite well. Most other people and organizations aren't tha
146.
by slrz 9y ago
Ah, ok. In your scenario, the assumption appears to be that by issuing a (Bob, A) certificate, Charlie asserts that key A belongs to Bob. For some reason, I never thought of DV certificates that way. I always took (Bob, A) to mean "I c
147.
by slrz 9y ago
All those TLS/SSL implementation vulnerabilities with fancy names like POODLE, for example. https://www.oracle.com/technetwork/topics/security/poodlecve... There's a lot more but it of course depend
148.
by slrz 9y ago
File locking basically being the antithesis to a distributed version control system, I can't really see how it would fit into Git. How would it work for a system with no central repository? It might make more sense to implement this wi
149.
by slrz 9y ago
> but that's not true; it selects the "latest semver-compatible minor version", which is a pretty different thing. No, it's exactly the same thing. Russ already established that an incompatible module is not just a la
150.
by slrz 9y ago
If you assume that conventions don't work as people will just run whatever crap as root, I don't think you can solve the problem without taking away that right from the user (as is customary on mobile devices). At that point, solv

More ›