smw

7 ms·

91.
by smw 1y ago
This seems to be a common misunderstanding. The major difference between passkeys and hardware 2fa (FIDO2/yubikeys) and TOTP/SMS/Email solutions is that the passkey/yubikey _also_ securely validates the site it's co
92.
by smw 1y ago
This is the way! Passkeys or FIDO2 (yubikey) should be required for supply chain critical missions like this.
93.
by smw 1y ago
"I mean, sure. So what does the solution look like? From my perspective it looks like a tool that is able to update your dependencies so that you can easily pick up bug fixes in your dependencies, which sounds an awful lot like a packa
94.
by smw 1y ago
"When using Go for example, you don’t need any third-party libraries to make a web server, Go has it all there and you are done." Fine, now what if you need to connect to a database, or parse a PDF, or talk to a grpc backend. Wha
95.
by smw 1y ago
Or just golang?
96.
by smw 1y ago
Better idea, use something that is able to authenticate the server and disallows fishing, like yubikeys or passkeys! Much less challenging to secure than showing something on the screen.
97.
by smw 1y ago
It's generally fine if you force push a branch that you're the only one working on. In many projects, there's an expectation that the 'PR Branch' you create in order to make a github pull request is owned by you, a
98.
by smw 1y ago
Yeah, in fact I'd argue that any abstraction that doesn't let you treat the work as sync is fundamentally broken. https://journal.stuffwithstuff.com/2015/02/01/what-color-is-...
99.
by smw 1y ago
The Apache + random other conditions license is really confusing.
100.
by smw 1y ago
All of your links to your own posts in your blog seem to be broken -- relative links need a "/" at the beginning, I think?
101.
by smw 1y ago
You're missing the fact that "docker desktop" actually provides the docker daemon as well as a GUI. There are alternatives for both Mac and Windows, but I'd wager that many people use "docker desktop" just for
102.
by smw 1y ago
"biggest challenge", it's not multiple choice
103.
by smw 1y ago
Why not https://github.com/gh2o/bash_tls ? (requires bc, doesn't validate cert chain)
104.
by smw 1y ago
bat # cat with syntax highlighting zoxide # keeps track of directories tig # ncurses git viewer atuin # shell history across machines choose # easier cut or "awk '{print $1}'" direnv # set en
105.
by smw 1y ago
Though you might have missed the concept that it follows you if you move, I think?
106.
by smw 1y ago
How does that work in two party consent jurisdictions?
107.
by smw 1y ago
You get much nicer window decorations if you use the wayland support instead of X11.
108.
by smw 1y ago
Or just run tailscale and let it take care of the certs for you. I hate to sound like a shill, but damn does it make it easier.
109.
by smw 1y ago
Just buy a domain and use dns verification to get real certs for whatever internal addresses you want to serve? Caddy will trivially go get certs for you with one line of config Or cheat and use tailscale to do the whole thing.
110.
by smw 1y ago
I figured it out, but why not at least put an x to close in a corner so it behaves something like a normal popup?
111.
by smw 2y ago
Yes! Please!
112.
by smw 2y ago
SCOTUS didn't allow Colorado to remove him from the ballot this time, what makes you think they won't do the same next time?
113.
by smw 2y ago
He was ineligible this time based on the 14th amendment, but SCOTUS told Colorado they couldn't keep him off the ballot.
114.
by smw 2y ago
He was already ineligible this election based on the 14th amendment, but SCOTUS bailed him out.
115.
by smw 2y ago
Tailscale tells us that, at least on some hardware, wireguard-go userspace performance beats the in-kernel implementation? https://tailscale.com/blog/more-throughput
116.
by smw 2y ago
I had someone do this on an important production Solaris machine once, many years ago. Luckily they just moved /lib instead of deleting it -- and on Solaris (some of?) the binaries in /sbin were statically linked, including ln.
117.
by smw 2y ago
Why do you need Virtual Desktop? I played Alyx and just registered the quest with steam and hit play?
118.
by smw 2y ago
I've found for years that ctrl-b works pretty damn well in Rubymine as well as Goland. Huge advantage vs other editors 5+ years ago. I wonder if the difference is still as stark in the age of lsps?
119.
by smw 2y ago
Can I buy pieces somewhere without buying a printer?
120.
by smw 2y ago
I disagree with the idea that Go prioritizes the maintainer. More lines of code typically makes maintenance more difficult. Go is easy to read line by line, but the verbosity makes it more challenging to understand the bigger picture. I f

More ›