thayne

36 ms·

961.
by thayne 1y ago
Safari only exist on Apple devices, and generally had even less features than Firefox.
962.
by thayne 1y ago
I think one way to prevent bad incentives is to ensure that the organizational units that create and enforce policies are not the ones that benefit from any fines collected.
963.
by thayne 1y ago
Ah, but go doesn't have union types.
964.
by thayne 1y ago
> I took it more as Baez writing for his physics audience. I have a degree in Physics with an emphasis in Astronomy, and my thought on reading the title was "that's absurd". Even if you somehow infer that "radiate&qu
965.
by thayne 1y ago
Consider if a malicious actor is able to fool the client into using http instead of https, or is able to sign arbitrary certs, because they control a CA that is trusted by the client (as in some corporate firewalls for example, or malware i
966.
by thayne 1y ago
It's a nightmare for using a custom CA for server certs too. You can't just add a new CA, you have to rebuild the entire keystore. And then you need to do it again every time you update the JVM, or risk missing updates to the defa
967.
by thayne 1y ago
Client certs have a few advantages over API keys. First of all, it gives the server more certainly that the other side of the TLS connection is the authenticated user, and not a MitM[1]. Secondly, if the message is intercepted, the secret k
968.
by thayne 1y ago
If only there was a standard protocol for trading credentials and a CSR or equivalent for a signed certificate. Kind of like ACME for client certs that uses login credentials instead of dns. And maybe then browser support for logging in usi
969.
by thayne 1y ago
The title is... odd. White dwarfs and neutron stars are generally considered "dead stars", since they no longer have active fusion processes. But they do radiate from energy left over from the star's "death". (Mostl
970.
by thayne 1y ago
So you can build iOS apps on your android device? If for no other reason, it would be gloriously ironic.
971.
by thayne 1y ago
Or there are confounding factors. Like diet for example, or what these people are doing while they are sitting.
972.
by thayne 1y ago
If only companies were held liable for breaking promises they made when acquiring other companies
973.
by thayne 1y ago
Depends on your perspective. If you are the owner of one or more AI companies, it could be very good for you.
974.
by thayne 1y ago
Given that Phabricator has been discontinued, are there any plans to replace that with something else? Phorge perhaps?
975.
by thayne 1y ago
I'm pretty sure Cloudflare uses Let's Encrypt. It doesn't look like they are a sponsor of Let's Encrypt though, so I doubt they have any kind of special arrangement with them.
976.
by thayne 1y ago
IMHO, if the bail is too high for the accused to be able to possibly pay, it is excessive. The wealth (or lack thereof) of the accused should be a consideration in setting the bail.
977.
by thayne 1y ago
> Indeed, it has no bearing on binary size at all, because none of it will be included. That depends on the language. In an interpreted language (including JIT), or a language that depends on a dynamically linked runtime (ex c and c++),
978.
by thayne 1y ago
> At each level a caller might need 5% of the functionality of any given dependency. I think that is much more of a problem in ecosystems where it is harder to add dependencies. When it is difficult to add dependencies, you end up with l
979.
by thayne 1y ago
> I can guarantee for a fact, that work will still be there but will it be equitable? Available to everyone? I don't think there has ever been a time in history when work has been equitable and available to everyone. Of course, that
980.
by thayne 1y ago
I don't know of cases where the US federal government uses them, but it isn't that uncommon for state or local governments to have them. Although the laws around them differ between jurisdictions.
981.
by thayne 1y ago
One benefit of doing it on the client is the client can cache the result of an include. So for example, instead of having to download the content of a header and footer for every page, it is just downloaded once and re-usef for future pages
982.
by thayne 1y ago
To be fair, it was pretty complicated. IIRC, using it required using Javascript to instantiate the template after importing it, rather than just having something like <include src="myinclude.html">.
983.
by thayne 1y ago
Then you should want regulations about how the pigs are raised, not banning the use of CRISPR.
984.
by thayne 1y ago
It also disadvantages any apps that compete with Google's own apps.
985.
by thayne 1y ago
If DNS is wrong, that server can get a domain validated certificate. What I am imagining here is that you set a cookie with Domain set, and not __Host, possibly because you need the cookie to be accessible on multiple domains, and then some
986.
by thayne 1y ago
There are also trust issues the other way. I've seen a lot of contention between developers and security teams and marketing about putting third party code or proxying third party domains on the first party site for analytics, tracking
987.
by thayne 1y ago
Only if valkey explicitly changes the program name after it starts, or Does something like calls exec on it's program directly. At least on linux.
988.
by thayne 1y ago
It seems like this requires you to have very high availability for the refresh endpoint. If that endpoint is unavailable, the user can end up being effectively logged out, which could lead to a confusing, and frustrating experience for the
989.
by thayne 1y ago
It doesn't require a TPM though. It just says it CAN use one, if one is available. If it is changed to require a TPM though, then that will be a problem.
990.
by thayne 1y ago
One way you could potentially combat that is to make it so that a single short lived token isn't enough to accomplish more dangerous tasks like that. Many sites already have some protections against that by for example requiring you to

More ›