sugarpimpdorsey

10 ms·

31.
by sugarpimpdorsey 1y ago
Last time I was unemployed for an extended period I thought I would put my skills to good use by hunting for bugs and contributing fixes to open source projects. Only to mostly be ignored, bugs closed as WONTFIX, or finding out many open so
32.
by sugarpimpdorsey 1y ago
OCSP is dead. We don't have that luxury anymore. By caching I meant for 12-24 hrs.
33.
by sugarpimpdorsey 1y ago
> Their details are not correct: They claim the browsers would not trust it But their details ARE correct. It says the certificate is revoked, which it is. It's up to the individual browser to act upon that (which most don't).
34.
by sugarpimpdorsey 1y ago
> CRL is a list that becomes huge over time - hosting it would require massive amounts of bandwidth and clients would need to download a lot of extra data. Compared to what? 12MB JavaScript bundles and autoplay videos? Do CDNs still exis
35.
Not all browsers perform revocation checking(revoked-isrgrootx1.letsencrypt.org)
106 points by sugarpimpdorsey 1y ago|82 comments
36.
by sugarpimpdorsey 1y ago
Safari enforces a hard limit of just over two years.
37.
The leaf certificate for this site has been revoked(revoked.badssl.com)
3 points by sugarpimpdorsey 1y ago|0 comments
38.
An Evaluation of the Effectiveness of Chrome's CRLSets(grc.com)
1 points by sugarpimpdorsey 1y ago|0 comments
39.
by sugarpimpdorsey 1y ago
This will not impact Chrome in any meaningful way because - in typical Google fashion - they invented their own bullshit called CRLSets that does not perform OCSP or CRL checks in any way, rather periodically downloads a preened blacklist f
40.
by sugarpimpdorsey 1y ago
Wrong. Enforcement is done by the browser. Yes, a CA's certificate policy may govern how long a certificate they will issue. But should an error occur, and a long-lived cert issued (even maliciously), the browser will reject it. The br
41.
by sugarpimpdorsey 1y ago
Straw man fallacy. No one is deporting legal immigrant founders. The White House just hosted two dozen of them for dinner - more than half of those in attendance were Indian or Asian.
42.
by sugarpimpdorsey 1y ago
Dupe: https://news.ycombinator.com/item?id=45216321
43.
by sugarpimpdorsey 1y ago
Still the norm outside of tech.
44.
by sugarpimpdorsey 1y ago
> Having done years in both settings, random non-work related discussions were always more prevalent in office type atmospheres. Whether you realize it or not, these are team-building exercises. It brings people closer, sometimes too clo
45.
by sugarpimpdorsey 1y ago
Remote work used to be an earned privilege. Then COVID hit and everyone got a taste of it. Including the folks who discovered they could get paid to stay home and play video games and jackin' off during work hours. In a way you could s
46.
by sugarpimpdorsey 1y ago
The only thing I hated worse than going into the office was our remote employees, who never seemed to be available when you needed them, had their status set to Away (or wouldn't respond for hours if they were green). It was a privileg
47.
by sugarpimpdorsey 1y ago
> Suppose that the plant made special workers do non-special work, the hammer does not fall on the workers. It falls on the plant. Yet ICE was brought in to hammer the workers. This is a big screw up in the legal procedures department. S
48.
by sugarpimpdorsey 1y ago
I'm disappointed the union didn't bring out the giant inflatable rat.
49.
Alonzo 'Hamburger' Jones(en.wikipedia.org)
2 points by sugarpimpdorsey 1y ago|0 comments
50.
Gayfemboy(en.wikipedia.org)
6 points by sugarpimpdorsey 1y ago|1 comments
51.
by sugarpimpdorsey 1y ago
> That said, it remains a perpetual struggle to get people to understand the difference between being connected to the legitimate operator of satan.example That's because the browser implementers gave up on trying to solve the ident
52.
Stop Certificate Pinning (2020)(digicert.com)
3 points by sugarpimpdorsey 1y ago|0 comments
53.
by sugarpimpdorsey 1y ago
It only proves that TOTP is useless against phishing.
54.
by sugarpimpdorsey 1y ago
> The domain name was `npmjs dot help` which obviously should have caught my eye, and would have if I was a bit more awake. It's a good thing the WebPKI cartel mostly did away with EV certs.... these days any old cert where only the
55.
by sugarpimpdorsey 1y ago
All the big brains in Silicon Valley can invent a bl*wj*b machine that is sync'd to a cloud-connected VR headset but can't build a machine to pick apples or tomatoes efficiently? Perhaps our priorities as a society are misplaced.
56.
by sugarpimpdorsey 1y ago
And yet I go to the market every week and the shelves are stocked so full they have to throw out or donate the produce that starts to go bad. That article puts forth the tired trope that "crops are rotting in the fields". If that
57.
by sugarpimpdorsey 1y ago
> I mean when, for example, you clear out the agriculture workers of the U.S. without any thought as to how or what you are going to do to replace them, well, expect higher grocery prices I guess Most ag workers are here on... ag work vi
58.
by sugarpimpdorsey 1y ago
> I care about wasting time commuting, paying insane rents for tiny small apartments in the city Easily solvable by not locating your company HQ in overpriced trendy coastal cities. This is usually met with "but people WANT to live
59.
by sugarpimpdorsey 1y ago
> Many gas cars don’t have 500mi of range No but what they do have is the ability to pull into literally any Andy Griffith backwater town gas station and be on their way in 5 minutes. That makes their range nearly unlimited.
60.
by sugarpimpdorsey 1y ago
This needs to be printed onto leaflets and dropped over SoMa.

More ›