tgragnato

11 ms·

61.
by tgragnato 6y ago
I mean if a single user is integrated in URI paths handling and in the webUI. Like, can I get domain/repo.git somehow with no user management at all?
62.
by tgragnato 6y ago
Does it have a single user mode?
63.
by tgragnato 6y ago
That’s what I do too. Not having entitlements or not being able to sideload is more of an issue while trying to tweak or patch an existing code base. E.g.: contributing to WireGuard or iCepa, ...
64.
by tgragnato 6y ago
Tunnelblick uses OpenVPN under the hood, which means it's using a TUN/TAP virtual NIC. LeoPantera is referring to the new way of creating VPNs in macOS and iOS, the Network Extension framework. You need an entitlement to develop w
65.
by tgragnato 6y ago
Extreme and fringe ideas would naturally move to unpopular platforms, and die over time. With too few platforms some are arguing they feel censored, banned from participating in public discourse.
66.
by tgragnato 6y ago
What changed since 230 was enacted is simple from my pov ... There are few platforms. Without those few enormous platforms shaping the public discourse, 230 is largely good and unproblematic. Which is why I’d love to have more platforms, wh
67.
by tgragnato 6y ago
230 protects moderation of published content. I hate the framing of the practical issues stemming from this in a matter of bipartisan policy. I’d suggests people are realizing giant Internet companies are chokepoints on the flow of informat
68.
by tgragnato 6y ago
They are because there’s been an historical division between publishers and carriers. 230 is about that, it lets intermediaries create policies, without having to choose between being publishers or carriers. Disclaimer: I don’t like this si
69.
by tgragnato 6y ago
Just look at the “leaks”... Their user base is not so big to be worrisome, but it’s undeniably big. And it’s growing too. https://ddosecrets.com/wiki/GabLeaks https://ddosecrets.com/wiki/Parler
70.
by tgragnato 6y ago
Rest sure things like masscan and file sharing will be singled out and excluded from long term storage. If I recall correctly there is a process called massive volume reduction by which you filter out “uninteresting stuff”. It’s not a bad i
71.
by tgragnato 6y ago
Their website talks about 521bit ECDH, but that’s necessarily part of the key agreement protocol. Confusing the KEX with the encryption itself “521-ECC encryption”, does not inspire much confidence.
72.
by tgragnato 6y ago
The whole AD security model is outdated. When something is wrong with any of a domain's services, your organization is breached. There is variation in details like in how to exploit vulnerabilities or how to move laterally... But AD is
73.
by tgragnato 6y ago
> CTOs will make their admins buy from us Or, those admins can switch to zerossl.com until the DDoS ends (you basically just need to change the domain in certbot). Yielding the DDoS.. wasted money.
74.
by tgragnato 6y ago
Or an “adversarial browser extension” clicking its way through the internet. https://adnauseam.io/ I tried this, but after some time your IP just gets flagged for click fraud. It's interesting because you won't se
75.
by tgragnato 6y ago
You can do it while using microcode patches and software mitigations or not: it’s a hardening measure because SMT usually shares TLBs and L1s between threads. No SMT, no sharing of TLBs and L1s (I know that writing it this way is a gross ov
76.
by tgragnato 6y ago
So... Is this working with mitigations on?
77.
by tgragnato 6y ago
> What do I have to add to my kernel command line? Paranoid users of Ubuntu and Debian can install this package: https://packages.debian.org/bullseye/hardening-runtime . Then reboot. It disables SMT, so independentl
78.
by tgragnato 6y ago
Nobody has a responsibility to "re-educate" an entire culture. It's a no go, full stop. Especially because there is not a gentle way, what you end up with is still genocide. Mincing words can't change facts. The CCP cons
79.
by tgragnato 6y ago
> If it goes from "everyone I know is on WhatsApp" to "1 in 20 people I know are on WhatsApp" maybe I'm less inclined to continue to fork over $20. Let’s be real, I don’t think this is a realistic ratio of users
80.
by tgragnato 6y ago
I usually put a curl for the tracking pixel in cron when the plain text version is not available
81.
by tgragnato 6y ago
Not that anyone in Europe can criticise... Looking at my country, Italians in Sigonella let go much worse, and the US is very proud of it.
82.
by tgragnato 6y ago
If you are an iOS user, then Apple is necessarily in your trust model. Google, not so much. Google’s implementation of k-anonymity in Safe Browsing does not account for their own ability to correlate multiple queries and narrow down which s
83.
by tgragnato 6y ago
I’m not Iranian, but I spent a lot of time over this for a friend. iMessage works ok once you are able to activate it. But Apple insists on contacting “init-p01md.apple.com” with plaintext HTTP, this sometimes connects successfully, but oft
84.
by tgragnato 6y ago
The evaluation of SPARQL patterns is PSPACE-complete. Which means that for trying to approach the problem of writing UIs ( working on a realistic hardware ) that adapt to different ontologies you need to restrict the set of possible solutio
85.
by tgragnato 6y ago
Set a standard. Working with RDF is computationally intensive. And writing UIs that fit to various ontologies is not solved. So everyone inevitably ends up writing applications to fit a particular ontology. Excluding theoretical quibbles, w
86.
by tgragnato 6y ago
Asking devs to work with RDF is the main issue I have with the approach of Solid. I don't expect SPARQL and ontologies to go mainstream. So why "force your hand" and make solid depend on the standards of the semantic web? Th
87.
by tgragnato 6y ago
I can’t upvote this enough. An heuristic will always be an heuristic, it does not matter of which kind or what you are looking at. These products are not deterministic and they give you no assurance whatsoever.
88.
by tgragnato 6y ago
oh come on! Switzerland is neutral!
89.
by tgragnato 6y ago
I'd say that they have a different set of features: use the software that suits best your needs. A default installation of NginX in Ubuntu does many things, which you need to administer and maintain. Haproxy is simpler because it'
90.
by tgragnato 6y ago
The old school way is to notify the ci/cd server using a post-receive hook. You can do it, but it’s not integrated in cgit, it must be set from the command line when you initialize the repo

More ›