tjohns

61 ms·

751.
by tjohns 10y ago
Taxes, health care, other insurance (disability, etc.), and other benefits (401k, etc.) are a significant fraction of the cost to employ someone. These things are not cheap. The standard overhead is (I believe--correct me if I'm wrong!
752.
by tjohns 10y ago
Because it's still unexpected behavior, and suddenly losing aircraft systems mid-flight is a concerning event for a pilot. Especially ones related to flight control. That doesn't mean the plane can't fly. But it does mean tha
753.
by tjohns 10y ago
Central servers are not required for contactless cards. The card itself holds the current balance inside a tamper-proof secure element, and it's updated with every ride. A central server can be used for things like web-based reloads an
754.
by tjohns 10y ago
It's definitely common. I'm not sure about the relative likelihood in the US vs Europe, but they certainly do exist. I've personally had my card stolen via skimmer before. My suspicion is they're more prevalent in the US
755.
by tjohns 10y ago
Some do. Many airlines transmit level 3 purchase data as part of the credit card transaction, which will contain your complete itinerary -- which can be fed into the bank's risk system.
756.
by tjohns 10y ago
Only for BofA credit cards. For some reason they won't let you use it for their debit cards.
757.
by tjohns 10y ago
Many phones have magnetic switches for use with smart cases. When you close the case cover, a small magnet trips the switch and turns the screen off. The magnet isn't damaging the phone — at least not at field strengths likely to be en
758.
by tjohns 10y ago
The light-sport license is relatively easy to get, compared to everything else. You only need to log 20 hours of flight time, and you can use a drivers license in place of an FAA medical exam.
759.
by tjohns 10y ago
2FA doesn't have to be annoying. Take a look at Yubikey devices as an example of how to do this right. The reality is that it is actually really useful at preventing some common attack vectors: password reuse, keyloggers, etc. It'
760.
by tjohns 10y ago
> I check our logwatch email every morning and thoroughly enjoy watching several hundreds (sometimes 1000s) of attempts at gaining access with little prevail. This is something that actually bugs me a bit. These attacks are so common, ge
761.
by tjohns 10y ago
There was a project called Bastille which basically did exactly that: http://bastille-linux.sourceforge.net/ It would run through a series of questions about your use case to build a security policy, and then edit config fi
762.
by tjohns 10y ago
I think you just described IPFS ( http://ipfs.io ), actually. :)
763.
by tjohns 10y ago
Usually this is done over private leased lines, either as a dedicated fiber run or on a switched network. If you're worried about tens of milliseconds worth of latency, you don't route your traffic over the public internet.
764.
by tjohns 10y ago
Google lets you use your own email address. Not sure what the complaint here is.
765.
by tjohns 10y ago
I stopped shopping at CVS out of protest at this silliness.
766.
by tjohns 10y ago
As I understand it, encrypted GPS (L2) does depend on key material being periodically loaded from a fill device for proper operation. The keys are rotated periodically, so if somebody stole a decoder, it would only work until the key in mem
767.
by tjohns 10y ago
Interstingly, it looks like this is a semi-regular thing in different parts of the US: https://www.google.com/search?q=FLIGHT+ADVISORY+GPS+Interfer... Last one looks to have been May 22-23 in Louisiana, with another one fro
768.
by tjohns 10y ago
I love the UI. That said, I'd be hesitant to use this because I have no way to trust the security of the remote server. It would be nice to have an option to use my own Google Drive/Dropbox account or network mount, or alternative
769.
by tjohns 10y ago
I've done it. It works fine. You just have to keep in mind that most of the Routerboard products have limited RAM, like any other embedded device. The only catch is that anything done inside of OpenWRT has to be configured by hand from
770.
by tjohns 10y ago
My understanding is that MikroTik isn't a fan of OpenVPN (for whatever reason), and doesn't want to spend any more development time on the feature. Which is a shame, because it really is a poor choice without UDP support. On the p
771.
by tjohns 10y ago
This is one of nice things about using a hardware security key (FIDO U2F), like Yubikey. Since the security key works with the browser to ensure its communicating directly with a specific site, you can't MITM them like you can mobile
772.
by tjohns 10y ago
Because security is actually really hard, contrary to popular opinion. As an industry, I think we need to rethink the way we develop, package, and deploy web apps. The fact that we rely on individual developers and sysadmins to get security
773.
by tjohns 10y ago
Look at the original publication's header and footer. "Unclassified / For Official Use Only". It was never classified to begin with.
774.
by tjohns 10y ago
Relevant story: As a kid, one of my friends would frequently get strep throat. So his mom would give him amoxicillin until he appeared better... and then save the rest of the bottle for the next time he'd (invariably) get strep throat.
775.
by tjohns 10y ago
I thought that Docker containers were primarily intended for environment isolation, not for security? As I understood it, Docker relies on the kernel enforcing syscall namespaces for security... and that there's a (admittedly small) po
776.
by tjohns 10y ago
It's worth noting that Android is using SELinux in recent versions for system hardening and as part of the sandboxing model. See: https://source.android.com/security/selinux/ While I agree usability is subopt
777.
by tjohns 10y ago
Feedbin is a pretty good alternative, especially when coupled with Press as an Android client.
778.
by tjohns 10y ago
Because ICANN is responsible for overseeing the DNS root servers, and those roots are always used by ISPs as a matter of convention. If you made your own DNS root and got folks to adopt it, you could make your own TLDs as well. Folks have t
779.
by tjohns 10y ago
To be fair (and I'm really not a Windows fan), many of the BSODs on modern versions Windows can be attributed to shoddy third-party drivers. And as a point of comparison, I've had tons of kernel panics on MacOS over the years, for
780.
by tjohns 10y ago
From the slides in Nvidia's presentation, it looks like the max power consumption is about 180 W. That puts it squarely between the GTX 980 (165 W) and the GTX 980 Ti (250 W). Idle power consumption is an order of magnitude less. For t

More ›