tscs37

62 ms·

631.
by tscs37 10y ago
Applied Deep Learning in the Wild.
632.
by tscs37 10y ago
I love the work that GitLab is doing, though I'm personally using Gogs/Gitea since it's much much less resource consuming.
633.
by tscs37 10y ago
Existing certs are still trusted. Mozilla stated that they will not distrust certs issued with notBefore till December, so theoretically this cert is good for as long as it's still valid, only after that they need to worry.
634.
by tscs37 10y ago
I'm not particularly comfortable with how Github has handled their community and executes takedowns of repositories. I don't feel like my code would be safe on github.
635.
by tscs37 10y ago
I personally moved away from Github, mostly due to political issues, secondarily because of this funding issue. Can't keep burning money forever. I put my private stuff on my own Gogs instance or on Bitbucket, tho I like Gogs UI much b
636.
by tscs37 10y ago
If you need something simple and similar to Github, checkout Gogs/Gitea (Gitea is the community fork which I recommend to use)
637.
by tscs37 10y ago
IIRC Gogs/Gitea and GitLab have plans to enable pull request federation, so you could use your own instance to make pull requests on a completely different one. I also recommend to check out Gitea (community fork of Gogs) if you haven&
638.
by tscs37 10y ago
Not much difference except that GraphQL does not specify how the data is processed. You could answer the data out of a flatfile for all that the endpoint cares. It also allows to secure access against arbitrary data requests, since on the s
639.
by tscs37 10y ago
It holds my git-signing key. That's all I do with PGP atm.
640.
by tscs37 10y ago
>that sandboxes and limited API surfaces actually work While this is not a bad start, assuming they work is a bad option from a security standpoint. You should be pessimistic and always assume the sandbox will be broken and the API abuse
641.
by tscs37 10y ago
Not at all. I utilize uMatrix to block unwanted scripts on websites, like some trackers that ABP doesn't catch. I find uMatrix' AdBlocking potential to be rather lacking, I rely on ABP for that. They work in perfect harmony.
642.
by tscs37 10y ago
Because even if the language was perfectly validated and the jail in which it runs is perfectly sound, you can still execute malicious code by breaking out of the jail via memory errors.
643.
by tscs37 10y ago
I love you. This is what I needed in my life.
644.
by tscs37 10y ago
me three
645.
by tscs37 10y ago
Exactly. There are some people with more extreme opinons that label every ad as malicious while others (like me) will not label everything ad-like as malicious by default. Philosophical Issues makes complicate.
646.
by tscs37 10y ago
I'm not aware of any perfect jail. Even then studies have shown that a simple memory error can lead to breakout.
647.
by tscs37 10y ago
Point 1 is basically what your personal preference is. I prefer it opt out as this will lead to more people supporting websites with ads. (defaults matter, check out organ donor studies on this) While I admit that ublock is faster, Adblock
648.
by tscs37 10y ago
It's a generic problem in computing. Reducing the language set only changes the difficulty and does not eliminate it simply by the Nature of Turing machines.
649.
by tscs37 10y ago
Heuristic is nice but I'm not aware of an AV that has no false-negatives, no matter how good the Heuristic is. If you ever think about "could we just block bad stuff?" then look at AVs and see if they can do it. AVs have prob
650.
by tscs37 10y ago
I think "Free Code" encompasses the ideology that ""free software"" wants to be much better and more efficiently than ""free software"". "Free Code" means the code is free as in fr
651.
by tscs37 10y ago
I think Android does that.
652.
by tscs37 10y ago
That would work but only if the sandbox is perfect. If the sandbox is leaky in either direction, the code can behave malicious again. As some research showed, even if your sandbox is absolutely perfect, you can break out using memory corrup
653.
by tscs37 10y ago
Forget it. That would include solving the halting problem by proxy. You can't know if a script or program is going to be malicious without effectively executing it. It's almost impossible. Just look at Anti-Virus, they've bee
654.
by tscs37 10y ago
>You can't negotiate with advertisers Well, seing how websites actually sign up for this and I've personally found it very pleasant, you can negotiate with some advertisers. Just not the cancerous ones that would shove more mal
655.
by tscs37 10y ago
I feel myself being very reasonable. If you disagree, would you mind explaining why or is that unreasonable to ask? Theory does not hold.
656.
by tscs37 10y ago
Or maybe because some people prefer it? I've heard of uBlock and I continue to use ABP, so I guess your theory falls flat. :)
657.
by tscs37 10y ago
I quite like AdBlock Plus. I've been using it for a long while and I appreciate the Acceptable Ads program, nothing is free and I wish to support websites if I can. It's either that or a paywall. I also use uMatrix, which I recomm
658.
by tscs37 10y ago
I don't think this would be a really successful model. For one, once this scales, it's either gonna cost a ton to moderate unless you have it do people voluntarily, in which case you'll get moderators that don't care or
659.
by tscs37 10y ago
I might add that their services seem to default to French locale for some reason (I guess they're french) with no obvious way to change that. The average internet user is probably going to understand French as well as they understand t
660.
by tscs37 10y ago
I was a bit skeptical when I first heard about OpenID Connect, especially considering the failures of the first OpenID protocols. I'm still looking for a decent OpenID server to run, but dex seems to be good enough. I hope OIC catches

More ›