thanksforfish

13 ms·

91.
by thanksforfish 6y ago
> compile time validation Oh! I forgot about that mess. Yeah, it takes minutes of deploy time while real resources are spun up to catch some really basic mistakes. Terraform plan catches a lot of issues, but I've seen cases where it
92.
by thanksforfish 6y ago
> You dig into CLOUD WATCH logs. We have three sets of logs all intermixed together. This is unreadable. I'm not following this. You don't read logs one by one. You filter by source, error code, time range, etc. Its been a whil
93.
by thanksforfish 6y ago
> Cloudformation The approach CFN used made sense when there was no alternative, but Terraform's approach is so much better. I wonder how AWS approaches this space in the future. CFN has great vendor lock-in, and needs to remain sup
94.
Fedora Silverblue User Guide(docs.fedoraproject.org)
1 points by thanksforfish 6y ago|0 comments
95.
by thanksforfish 6y ago
Only 2.5x? I'm surprised they aren't seeing much more than that.
96.
by thanksforfish 6y ago
> There’s nothing on my Keybase profile that is sensitive or private (except my private key, but like I said, that’s not a big deal) That's a strange statement, I wouldn't expect others to feel that way. Key material is general
97.
by thanksforfish 6y ago
I appreciate that it shows your place in line (I started at 53). This is really polished.
98.
Cross-signing and end-to-end encryption by default(matrix.org)
615 points by thanksforfish 6y ago|186 comments
99.
by thanksforfish 6y ago
Click-captcha has tiny touchpoints, so I fail a couple times on mobile, just from that. Phpcaptcha has autocorrect enabled on the text box, so "alk" was changed to "all", causing a fail. Captcheck worked well.
100.
by thanksforfish 6y ago
How many of those employees have alternate work they can take if fired or have enough money saved up to make ends meet if they don't get a paycheck for a while? Many people live paycheck to paycheck and theres a huge batch of people ne
101.
by thanksforfish 6y ago
https://chrome.google.com/webstore/detail/the-great-suspende...
102.
by thanksforfish 6y ago
> Any plausible solution has to start with increasing their collective strength. Legislation or unionization. Any other routes?
103.
by thanksforfish 6y ago
I wonder how far you'd get by just using face detection but invert the result.
104.
by thanksforfish 6y ago
GitHub link for the design: https://github.com/space10-community/the-growroom
105.
by thanksforfish 6y ago
I'm curious if these companies are OK with the risk that people make these devices, destroy their lungs, and then sue. It's great PR, but the previous systems were expensive for more reasons than just manufacturing cost.
106.
by thanksforfish 6y ago
Oh cool. I'll link the book for anyone interested: https://leanpub.com/hy-lisp-python
107.
by thanksforfish 6y ago
You may also enjoy: https://github.com/hylang/hy
108.
Internet.nl Website Test: Google.com(internet.nl)
1 points by thanksforfish 6y ago|0 comments
109.
by thanksforfish 6y ago
Seems OK. Google, Bing, and DDG all show the sys76 pop OS site when I search for just pop os. Searching for "how to burn a CD pop os" has less useful results than "how to burn a CD ubuntu", but I think that's a user
110.
Microsoft to add DANE and DNSSEC support to Exchange Online servers(zdnet.com)
2 points by thanksforfish 6y ago|0 comments
111.
by thanksforfish 6y ago
Theres an important security tradeoff here. Compress then encrypt leaves you vulnerable to attacks like CRIME[1]. How much this matters depends on the application. [1] https://security.stackexchange.com/questions/19911&
112.
by thanksforfish 6y ago
Looks cool. Theres a few typos that I noticed looking over the page. Int -> in
113.
by thanksforfish 6y ago
Zero user testing? No, I'm not suggesting that. My reply is to the BH thread.
114.
by thanksforfish 6y ago
My suggestion is to user test your site. I agree most consumers would not like such sites (and that you'd learn that in user tests). I also believe consumers hate scroll jacking, janky experiences (anecdata elsewhere in the thread). My
115.
by thanksforfish 6y ago
Correct. But if a DNS response for that domain is spoofed. It will. DNS is a very old protocol that still has lots of problems and mitigations like DNSSEC are only partially deployed.
116.
by thanksforfish 6y ago
Posting as a reminder that DNSSEC rollout to the top level domains (TLDs) is still incomplete. Without DNSSEC, DNS is spoofable. Further DNSSEC rollout to non-TLD DNS servers is also incomplete. DNS spoofing is still possible in 2020. [PDF,
117.
TLD DNSSEC Report(stats.research.icann.org)
1 points by thanksforfish 6y ago|2 comments
118.
by thanksforfish 6y ago
Why would it need to be designed? Email delivery depends on DNS, which is unencrypted and spoofable. Spoofing emails is also doable.
119.
by thanksforfish 6y ago
Every week we see multiple articles about security researchers who abuses some part of the tech stack to do something weird that shows the danger in this sort of thinking. I believe it's easy to spoof emails from the .com|disabled doma
120.
by thanksforfish 6y ago
This is a good reminder that if you want good design, don't just rip off another site, implement it, and ship. Build a prototype, user test it, and when they say this sucks, try something else. I'd love to see some more tech compa

More ›