syncsynchalt

9 ms·

91.
by syncsynchalt 1y ago
The bad actor would also need to install a root for their custom CA on the end-user device.
92.
by syncsynchalt 1y ago
Bricks won't fit in our butter trays. And it'd be an ordeal to open a brick, quarter it, then put the opened 3/4 of the brick back into cold storage until needed again. Our butter isn't wrapped in foil, each stick is wra
93.
by syncsynchalt 1y ago
Safari desktop users: you'll want to view this page in Chrome; the sliders are functional on that browser.
94.
by syncsynchalt 1y ago
I've written some Unicode transcoders; UTF-8 decoding devolves to a quartet of switch statements and each of the issues you've mentioned end up being a case statement where the solution is to replace the offending sequence with U+
95.
by syncsynchalt 1y ago
I meant to specify, the aim of UTF-7 is better performed by using UTF-8 with `Content-Transfer-Encoding: quoted-printable`
96.
by syncsynchalt 1y ago
UTF-7 is/was mostly for email, which is not an 8-bit clean transport. It is obsolete and can't encode supplemental planes (except via surrogate pairs, which were meant for UTF-16). There is also UTF-9, from an April Fools RFC, mea
97.
by syncsynchalt 1y ago
UTF-16 has endian concerns and surrogates. Both UTF-8 and UTF-16 have negatives but I don't think UTF-16 comes out ahead.
98.
by syncsynchalt 1y ago
I watch my son grow up learning to DIY from youtube videos. I'm marveling at the wealth of instructional video he has easy access to, and I wish I had it too when I had my first home, learned to work on my first car, etc.
99.
by syncsynchalt 1y ago
> 1) I watch youtube more than any streaming service I would amend that to say "any *other streaming service". To me Youtube provides more and better content than the other streaming services, and I don't think people shou
100.
by syncsynchalt 1y ago
Not to be crude but I suspect the company that makes the "ipad" is very careful with "max" and "maxi" branding.
101.
by syncsynchalt 1y ago
I mean, I agree there _should_ be one standard encoding, but the Unix API (to pick the example I'm closest to) predates these nuances. All it says is that filenames are a string [of bytes] and can't contain the bytes '/&
102.
by syncsynchalt 1y ago
The OS treats strings as a blob, yes, but typically specifies that they're a blob of nul-terminated data. Unfortunately some text encodings (UTF-16 among them) use nuls for codepoints other than U+00. In fact UTF-16 will use nuls for e
103.
by syncsynchalt 1y ago
> Finally, the team noticed one user that was particularly flummoxed by the dialog box, who even seemed to be getting a bit angry. The moderator interrupted the test and asked him what the problem was. He replied, "I'm not a do
104.
by syncsynchalt 1y ago
In some industries, latches (which the article called "teeth") are called "dogs". So that's a full-circle kind of comment you've got there.
105.
by syncsynchalt 1y ago
Yes, it makes sense, but it still resulted in a lot of work. Most Unix syscalls use C-style strings, which are a string of 8-bit bytes terminated with a zero byte. With many (most?) character encodings you can continue to present string dat
106.
by syncsynchalt 1y ago
Of the two UTF-16 is much less of a problem, it's trivially[1] and losslessly convertible. [1] Ok I admit, not trivially when it comes to unpaired surrogates, BOMs, endian detection, and probably a dozen other edge and corner cases I d
107.
by syncsynchalt 1y ago
In short: cipher modes, IVs, nonces, and random padding.
108.
by syncsynchalt 1y ago
Generally speaking, in two different ways: (a) cipher modes will usually use a combination of initialization vectors, block chaining, or an incrementing counter to perturb the encipherment of each block so that repeated data does not result
109.
by syncsynchalt 1y ago
Which accidentally caused a bit of a rift in the US Pacific Admiralty: https://en.wikipedia.org/wiki/The_world_wonders
110.
by syncsynchalt 1y ago
There are CAs which to this day have been caught issuing certs that don't match CSRs, because the CA uses a manual process of hand-copy or hand-typing fields from the CSR into the new certificate. So even reviewing CSRs won't help
111.
by syncsynchalt 1y ago
There are environments where it's required that _every_ environmental change has an associated CCB ticket. In that kind of environment, yes, every new cert is attached to a ticket that the board has to review and approve. Yes, it'
112.
by syncsynchalt 1y ago
And if something silently breaks, would you rather the breakage is noticed within 47 days, or 398 days? Even your unrelated question is another argument for shortened certificate lifetimes. :-)
113.
by syncsynchalt 1y ago
The better tooling and automation already exists, it's really all over but the shouting. The pain comes from supporting vendor equipment that's already on its way to the dustbin. Vendors that fired their entire engineering group h
114.
by syncsynchalt 1y ago
> Clearly not all automated infrastructure requires approval: autoscaling groups spin up and tear down compute instances all the time. In these sort of environments, they do not. We're talking about environments where it is forbidde
115.
by syncsynchalt 1y ago
I'm a pretty rusty on ARM asm but from what I remember the opcodes to efficiently load constants into registers are pretty inflexible so it's common to store larger constants inline with the code. I'm guessing you need to kee
116.
by syncsynchalt 1y ago
> Is ワープロ馬鹿 really a word used by native Japanese speakers? You probably mean idiom. ワープロ (word processor) and 馬鹿 (baka: idiot) are individually both words used by Japanese speakers. Japanese speakers would be more likely to say 漢字健忘 (ka
117.
by syncsynchalt 1y ago
I didn't even realize I knew that string, but I recognized it immediately from your post.
118.
by syncsynchalt 1y ago
From the other direction, you'd call it a tail-eating unquine?
119.
by syncsynchalt 1y ago
I think the audience already understands why it works, it's more the knowing there's a relatively small set of mnemonics for these things that's interesting. "eyJ" for JSON, "LS0" for dashes (PEM encoding
120.
by syncsynchalt 1y ago
Yes, workarounds exist, but it would be nicer if the arbitrary limits were removed instead.

More ›