stebalien

11 ms·

31.
by stebalien 1y ago
Is there any documentation on how to do this without running a custom appserver and/or PDS? Can I create my own DID and delegate to another DID?
32.
by stebalien 1y ago
I control my domain name and its DNS but I don't have the keys used to sign my DID. I followed the instructions here: https://bsky.social/about/blog/4-28-2023-domain-handle-tutor... From my reading of your bl
33.
by stebalien 1y ago
The recommendation to resolve from handles to DIDs for "permalinks" is concerning to me: - My handle is something _I_ control. I can make it point at a different PDS at any time. - My DID is something my PDS controls. I could solv
34.
by stebalien 1y ago
Sure, but that means that either Google or the application author would be required to give me working keys with no restrictions, which would make the entire system rather pointless. However, now that I think about it, the fact that "u
35.
by stebalien 1y ago
Or one can just use semantic HTML; it's easy enough to convert semantic HTML into markdown with a tool like pandoc. That would also help screen readers, browser "reader modes", text-based web browsers, etc.
36.
by stebalien 1y ago
I still haven't seen anyone discuss the issues with distributing applications containing GPLv3 components under these new rules given the clause (from the GPLv3): > “Installation Information” for a User Product means any methods, pr
37.
by stebalien 1y ago
See https://git-scm.com/docs/BreakingChanges#_git_3_0
38.
by stebalien 1y ago
You can also combine this with TRAMP to work on databases you can't directly access from your local machine. E.g.: #+header: :dir /ssh:user@remote-host:/ #+begin_src sql .. #+end_src
39.
by stebalien 1y ago
The solution (heavily) alluded to by GrapheneOS in https://grapheneos.social/@GrapheneOS/115164212472627210 and https://grapheneos.social/@GrapheneOS/115165250870239451 is: 1. Release binary-only
40.
by stebalien 1y ago
The bigger headline is that Google is effectively giving attackers 3-4 months of advanced access to security patches: https://grapheneos.social/@GrapheneOS/115164183840111564 .
41.
by stebalien 1y ago
https://xcancel.com/ProtonPrivacy/status/1965830830770487686
42.
by stebalien 1y ago
Stellarium? https://en.wikipedia.org/wiki/Stellarium_(software)
43.
by stebalien 1y ago
"Decentralization" isn't the end-goal so measuring it here isn't all that meaningful. Personally, I care about: 1. How hard is it to censor the network. 2. How hard would it be for some major player to enshittify the net
44.
by stebalien 1y ago
Yeah, I agree. Nothing will stop a determined and smart child from getting what they want. My goal is to describe a system that's as secure as ID verification without all the drawbacks.
45.
by stebalien 1y ago
I'm saying that devices must be sold with this parental control software, not that this software must be used/activated. Most devices already have support for restricted modes like "guest mode".
46.
by stebalien 1y ago
I completely agree. I'm not saying that all websites containing nudity must contain a "nudity" label as defined by some specific country, I'm saying: 1. Governments MAY define labels like "gov.texas.bill1234-complia
47.
by stebalien 1y ago
Counterfeit what? This is about labeling and filtering: the device doesn't present an ID, the device prevents the user from accessing content with/without specific labels if so configured. Specifically, governments mandate that: 1
48.
by stebalien 1y ago
It depends on what you're trying to use it for. If you just use Emacs for coding, you're not going to gain anything from running it in a GUI. However, if you also use it to read documentation, take notes, etc.; being able to displ
49.
by stebalien 1y ago
The main reason for CachyOS to exist is that it can take bigger risks and ship defaults more mature distros wouldn't be comfortable with. In terms of benchmarks, gamers tend to care more about consistent responsiveness (and worstcase p
50.
by stebalien 2y ago
Awesome! Thanks!
51.
by stebalien 2y ago
Will the Android companion app be open source? And/or will the watch APIs be documented such that someone could write an open source companion app?
52.
by stebalien 2y ago
See section 5.5 of the linked paper https://petsymposium.org/popets/2018/popets-2018-0026.php . I'm not sure if/how Kagi implemented this, but the idea is that Kagi's "public" component can
53.
by stebalien 2y ago
Private companies != federal government. See https://en.wikipedia.org/wiki/Strict_scrutiny , there's no way the federal government will be able to argue that it has a legitimate interest in banning pronouns in sign
54.
by stebalien 2y ago
I have to wonder, is this (and all the rest) just an attempt to DoS civil rights groups?
55.
by stebalien 2y ago
If and only if your site isn't already referenced by some other site in the index (see option A).
56.
by stebalien 2y ago
The privacy pass extension still requires you to pass a cloudlare turnstile which is impossible in some browser configurations. E.g., if you disable browser performance-debugging/timing features (these used to be a vector for Spectre t
57.
by stebalien 2y ago
3.8% below target is "way below"?
58.
by stebalien 2y ago
Possible supply-chain "attack" (or demonstration, from what I can tell) on wherever they get their polyfill library? It's coming from: https://polyfill.archive.org/v3/polyfill.min.js?features=fet...
59.
by stebalien 2y ago
And if you want to automatically get redirected to xcancel: https://einaregilsson.com/redirector/
60.
by stebalien 2y ago
This attack doesn't allow anyone to, e.g., bypass any PINs you may have set on your yubikey. It allows an attacker to extract your keys if and only if they can already use your yubikey. From what I can tell, the risk is: 1. Someone tak

More ›