thayne

27 ms·

751.
by thayne 1y ago
Except for the DRM, that is exactly how the internet archive works for content that is still under copyright. However, for libraries, they often have a limited number of borrows per book (enforced with the DRM), and they are effectively ren
752.
by thayne 1y ago
In the case of npm though it is run by a very wealthy company: Microsoft. But also, most OSS Software is provided without warranty. Commercial companies should either be held accountable for ensuring the open source components are secure or
753.
by thayne 1y ago
Browsers and CAs did support `must-staple`. Then they decided to drop support for OCSP altogether, in part because not enough servers were using must-staple (or ocsp stapling at all). As for server implementaions. Most servers, sure it is
754.
by thayne 1y ago
I've noticed a lot more phishing emails making it through gmails filters recently. A lot of them ultimately (if carefully inspected) come from @gmail.com addresses. And many of them look pretty convincing. Did gmail change something fo
755.
by thayne 1y ago
Right, but the vast majoriry of servers don't use must-staple certs. So browsers would need to do something (even if that something is not checking revocations) for all the other connections anyway. It's really a chicken and egg
756.
by thayne 1y ago
I don't think any browsers still support OCSP. The problem with OCSP stapling is that it either the client has to fall back to doing OCSP checking itself if the server doesn't staple the signature, which has its own problems[1], o
757.
by thayne 1y ago
Several years ago, I saw some documentation about specifying the locations of CRLs in some proxy software. My first thought was "surely I have some of those on the system for web PKI". I was wrong. That sent me down a deep dark ra
758.
by thayne 1y ago
My biggest problem with gleam is the lack of any kind of ad-hoc polymorphism (interface, trait, typeclass, protocol, etc.). It also seems weird to make a language for BEAM that depends on a separate library for actors and concurrency.
759.
by thayne 1y ago
Indeed. Especially as I get older and my accuracy on a virtual touchscreen keyboard gets worse.
760.
by thayne 1y ago
In this case, they do have a patent.
761.
by thayne 1y ago
IANAL, but I don't think that is completely necessary for Apache 2.0. It isn't a copyleft license, so it's fine for derivative works (such as merging it into postgres) to use a different license. It would however create a bit
762.
by thayne 1y ago
> However, the Apache 2.0 patent shield is comparatively weak (when compared to GPLv3 and MPLv2) because it only revokes the patent license rather than the entire license and so it actually acts like a permissive license even after you i
763.
by thayne 1y ago
Yeah, this is going to incentivize businesses to try and make as much of their employees' pay come from tips, which means consumers will be expected to pay more tips, which is the opposite direction I want it to go.
764.
by thayne 1y ago
The French revolution.
765.
by thayne 1y ago
Eh. If you care about performance enough to use OrioleDB you probably also want to avoid SERIALIZABLE.
766.
by thayne 1y ago
At least this is how it works in the US. And in the US algorithms are (unfortunately) patentable. That is not the case in all countries.
767.
by thayne 1y ago
Unfortunately, from what I've seen the only candidates who seem legitimately interested in solving the problem don't stand a chance of getting elected, because they don't belong to either of the major parties.
768.
by thayne 1y ago
I don't thinks it's quite that simple, there are other factors as well: There are significant network effects. Content creators use youtube because there are a lot of viewers watching content there, and viewers use it because ther
769.
by thayne 1y ago
It seems like this is becoming a problem across a lot of industries. At least oligopolies.
770.
by thayne 1y ago
Do you have a source for that? My understanding was that both were illegal, although of course media companies have an interest in making people believe that even if it isn't true.
771.
by thayne 1y ago
How much of that $9000 will go to your publisher?
772.
by thayne 1y ago
> Of course that's all moot if the attacker also changes the email address. Maybe don't allow changing the email address right after changing 2fa? And if the email is changed, send an email to the original email alllowing you t
773.
by thayne 1y ago
Which means they don't have the excuse of being a volunteer effort to not be on top of this. MS has plenty of resources.
774.
by thayne 1y ago
> Good luck getting the average Joe to understand why your little git repo needs to come out of his payroll. That specific problem could be solved by funding it from taxes that only tech companies have to pay. Maybe something like how F
775.
by thayne 1y ago
> Soft-deletes come with a lot of complexity at the application layer, more maintenance, more security risk, and require building out user data deletion processes. That depends on your application and requirements. I've worked on si
776.
by thayne 1y ago
My main complaint about RFC 3339 is it doesn't have anything for specifying a duration/period or ranges.
777.
by thayne 1y ago
How hard is it to repurpose those turbines for other sources? And are they in good enough shape to get a long life out of them after being repurposed?
778.
by thayne 1y ago
Although, the more greenhouse gases there are, the worse waste heat is.
779.
by thayne 1y ago
I hope this leads to the big AI companies pushing for copyright reform that makes access to DRM-free digital content better for everyone.
780.
by thayne 1y ago
I feel like the SSPL is almost a good open source license. I think there is a place for something a little stronger than the AGPL that is copyleft on necessary components even if they aren't directly linked. But it has a couple of ma

More ›