tankenmate

40 ms·

61.
by tankenmate 1y ago
"Nothing you're saying has any relevance to the topic at hand. And, in fact, is largely wrong."; your confidence in your opinion doesn't make you right. Prove it.
62.
by tankenmate 1y ago
"MOREOVER, Sec-Fetch-Site obviates the need for csrf tokens.", you're just posting misinformation, you are flat out wrong. "It is important to note that Fetch Metadata headers should be implemented as an additional layer
63.
by tankenmate 1y ago
The Sec-Fetch-Site header can't be read / written by Javascipt (or WASM, etc), cookies (or some other tokens) on the other hand can be. In most circumstances allowing Javascript to access these tokens allows for "user friendl
64.
by tankenmate 1y ago
There's server security and there's client security. From what I've seen in these comments people are focused on the client security and are either a) ignoring server security, or b) don't understand server security. But
65.
by tankenmate 1y ago
indeed, you need some form of CSRF, but the Sec-Fetch-Site is primarily focused on keeping a browser secure, not the server. Having said that it's nice defence in depth for the server as well but not strictly required as far as the ser
66.
by tankenmate 1y ago
Somewhere auth needs to be done, somewhere, somehow, and some when. And this is done with cookies (be it CSRF, auth token, JWT, etc). There has to be some form of mechanism for a client to prove that a) it is the client it claims it is, and
67.
by tankenmate 1y ago
All the voting down but not a single comment as to why. The "Sec-Fetch-Site" primarily protects the browser against Javascript hijacking, but does little to nothing to protect the server. This is probably apocryphal, but Willie Su
68.
by tankenmate 1y ago
I would never rely on headers such as "Sec-Fetch-Site"; having security rely on client generated (correct) responses is just poor security modelling (don't trust the client). I'll stick to time bounded HMAC cookies, then
69.
by tankenmate 1y ago
On the down side it's an Electron app, on the upside it's JMAP.
70.
by tankenmate 1y ago
Waste of disk, RAM, and CPU. Tabs in your browser at least try to share those; but no chance of that with Electron.
71.
by tankenmate 1y ago
Every country has sociopaths and narcissists too, but this doesn't really further the conversation about authoritarianism vs democracy, unless of course the legislative has a plurality of such or in thrall to such. your statements are
72.
by tankenmate 1y ago
This is like a broadband (white noise) EW jammer; i.e. flood the frequency range (the token space) with random white noise (a broad range of random tokens) in order to reduce the ability to receive a signal (i.e. information). Cool, but als
73.
by tankenmate 1y ago
"Only a Sith deals in absolutes"; your statement is both a) lacking any nuance (any cost vs any benefit), and b) so lacking in nuance (a tautology even) to border on irrelevance and nihilism (a throw away statement that has the in
74.
by tankenmate 1y ago
I suspect you misunderstand the meaning of the word fundamentalism; it's not just about absolutism, but also the authoritarian aspect, i.e. this issue is "back and white" and "i'm going to force you to to adhere to
75.
by tankenmate 1y ago
And the fundamentalist Christians who advocate that women should "Keep Sweet"? Ever wondered where fundie baby voice comes from? I suspect if you look at it a bit longer you'll see that the issue isn't "Muslim"
76.
by tankenmate 1y ago
Russia doesn't want to be involved in diplomatic efforts with Europe, it doesn't suit their purposes. With the US however it can drive a wedge, so "diplomacy" it is.
77.
by tankenmate 1y ago
They are the same only sometimes; devs work on code on feature / fix / whatever branch, then when they've finished dev testing you do a code review and then it gets fast forwarded onto the dev branch, then when it suits for s
78.
by tankenmate 1y ago
I concur, it works fine as long as devs follow the procedure. I also prefer to enforce linear history as well so that git bisect works properly; but then this requires devs to understand how to use --ff-only and also if you're using gi
79.
Rapsberry Pi 500 Review(phoronix.com)
17 points by tankenmate 1y ago|6 comments
80.
by tankenmate 1y ago
When I saw the subject line I thought maybe we'd get an interesting article about OS/360 or something, but then found an article about Macs; interesting but not expected.
81.
by tankenmate 1y ago
I'm sure you are aware, reading between the lines of what you said, why, but for some others who aren't aware of the history of git; it was originally about 50% C and 50% Perl, the performance critical parts were written in C and
82.
by tankenmate 1y ago
Except there are far less Rust developers than C developers, so contributions will start to drop as Rust usage expands in git.
83.
by tankenmate 1y ago
What hardware are you running?
84.
by tankenmate 1y ago
I learnt C at Uni (after having taught myself BASIC, Z80 machine code (not assembly), and x86 assembly), when we were taught C it was explained to us what all that sort of thing meant. But having said that most of the class failed to unders
85.
by tankenmate 1y ago
I'm interested; do you have any good stats for that?
86.
by tankenmate 1y ago
"It's just something that does happen in other contexts and that we should be aware of when speaking"; I guess my point can be mostly boiled down to this one point, "jumping to conclusions" (meant in both the none e
87.
by tankenmate 1y ago
Corruption and undue political influence stemming from a large source of extractive income isn't a an issue particular to Islam as I can see it; in fact I'd say it's something endemic to the human condition. But, when it come
88.
by tankenmate 1y ago
although a good point, there is obvious surface level nuance though; oil companies hid the research of climate change for a decade or two, they also lobbied (and still do) against subsidies for renewable energy and for oil and gas subsidies
89.
by tankenmate 1y ago
a stochastic system can can deterministic sub-parts, a deterministic system cannot have stochastic sub-parts.
90.
by tankenmate 1y ago
I have a strong suspicion that the world is not as deterministic as you'd like it to be.

More ›