vasachi

6 ms·

31.
by vasachi 3y ago
Name one site, that works "not so great" with Firefox.
32.
by vasachi 3y ago
Am I the only one, who is frightened, that current stable version of React is almost two years old? Even if React#19 will be mostly backwards compatible (I hope), how many subtle differences will be introduced?
33.
by vasachi 3y ago
Yes it would work in any other industry. Users can overload a power grid. Users can overload a telephone network. Users can overload a grocery store. NO industry can deal with critical overload without problems.
34.
by vasachi 3y ago
OK, but how should an ISP distinguish a good HTTP/2 connection from a bad one (I'm talking about this particular attack)? As far as I can tell, the DoS starts after the connection from bot to server is established, at which point
35.
by vasachi 3y ago
Nope, the bad guys don't care that much.
36.
by vasachi 3y ago
> This removes the last piece of information that can be used to block HTTPS traffic based on the site your visiting without being a party to the exchange. And that will cause blocks by IP. It's not like authorities in those countri
37.
by vasachi 3y ago
"Public network" can mean many things, but in context of IP addresses it usually means a network, that uses a globally addressable IP range. Now, that doesn't mean that the network is globally accessible. It can be tightly f
38.
by vasachi 3y ago
What? Private networks are defined as networks, that use private address ranges[0]. They are most certainly not AWS "rhetoric". And why are unique MAC addresses a problem? [0] https://en.wikipedia.org/wiki/Pri
39.
by vasachi 3y ago
Good luck administering IPv6 networks, they are so much easier to understand.
40.
by vasachi 3y ago
Are hundreds of publicly addressable services better?
41.
by vasachi 3y ago
Well, I wouldn't put _any_ service on a public network, unless it is explicitly required. Firewall is all well and good, but security in depth is even better. Private networking is good. IPv6 doesn't help here at all.
42.
by vasachi 3y ago
IPv6 can help with a small scale attack, but not a large one. Your ISP can still be DDoSed, although it is a bit more difficult to do that.
43.
by vasachi 3y ago
Weeeeeeell, Googlebot can just lie about itself, no?
44.
by vasachi 3y ago
Actually an interesting point here. What will happen if USA sanctions your country? Can WEI stop working by remotely killing it?
45.
by vasachi 3y ago
Honestly, just use a real db in testing. Purity is all well and good, but not at the expense of more bugs caught.
46.
by vasachi 3y ago
Well, yeah. At least I can read the smart contract and audit transactions on the blockchain, if we are talking about decentralized exchanges. Google is faaaaaaaaaar less transparent. As in, not transparent at all.
47.
by vasachi 3y ago
Once on a conference one guy gave a talk about how he overrode python's module loading to load them from a mongodb instance. The reason was, if I remember correclty, because "it was easier for the juniors". It made me veeeeee
48.
by vasachi 3y ago
Well, that is your right as an owner of the packages. By the way, what are those packages?
49.
by vasachi 4y ago
They probably would, if it was legal.
50.
by vasachi 4y ago
Both tables have an ID primary key, one is also a FOREIGN KEY to the other.
51.
by vasachi 4y ago
What? Why whould the signaure be invalidated?
52.
by vasachi 4y ago
It still is easier to copy, when you own manufactiring process.
53.
by vasachi 4y ago
Kinda. The problem is your threat model, no? If you think of US law enforcement as adversary, using Amazon products is a very bad idea.
54.
by vasachi 4y ago
Do American companies manufacture anything in China? Yes. Do Chinese companies manufacture anything in USA? No. So USA can only watch, while China can actually steal.
55.
by vasachi 4y ago
Don't they give camera feeds to law enforcement without warrant?
56.
by vasachi 4y ago
How would they detect if the car is sold?
57.
by vasachi 4y ago
Oh yeah, totally. But not always. I'm very glad that we now have an option to have both behaviours.
58.
by vasachi 4y ago
It is kinda weird, if you don't know how it works. For instance: Say you have a unique constraint on two columns (column_a, column_b). column_a is not nullable, column_b IS nullable. Obviously these values are unique: (1, 2) (1, 3) (2,
59.
by vasachi 4y ago
For what it's worth, Firefox does support website screenshotting.
60.
by vasachi 4y ago
It is actually really easy to ignore user's selected DNS server. Basically ISP can just inject responses, given that DNS is unauthenticated. I don't know if US ISPs do that, but it can be done.

More ›