vetrom

8 ms·

61.
by vetrom 1y ago
It doesn't, but platforms basically do everything they can to claim the various common-carrier liability shields in DMCA-like laws. In the U.S. that means they forward the takedown request to whomever generated the content, and in the
62.
by vetrom 1y ago
Yes, it does appear to be purposely so. The wisdom of this is debatable, but consider: for a shipped app, these keys would all be embedded in a binary regardless, wouldn't they?
63.
by vetrom 1y ago
If apps aren't allowed to run without a key signed by Google, that removes most of the utility of other app stores, does it not?
64.
by vetrom 1y ago
You have misunderstood the question, or perhaps buried the lede. 'Open in that regard' is tantamount to not open at all. If you gatekeep being able to load an app to an Android phone behind these processes, you're essential
65.
by vetrom 1y ago
It's not that XMPP is hostile to power efficiency, its that Apple (and Google) gateway power-efficient edge triggering behind vendor-restricted cryptographic feature locks. They have arguably correct reasons for doing this, but it&#x27
66.
by vetrom 1y ago
something like https://github.com/renanqts/xdpdropper or cilium's host firewall or https://github.com/boylegu/TyrShield exist or https://github.com/ebpf-security/xdp-fire
67.
by vetrom 2y ago
I'm not sure you answered the question here though, why should that sort of transaction be legal? Is there a compelling public interest in allowing this sort of transaction?
68.
by vetrom 2y ago
I miss having pebble watches, they hit a sweet spot of lifetime vs functionality. That said, what is this team going to do to avoid crashing and burning the way the original pebble did? Specifically I refer to the debacle around the pebble
69.
by vetrom 2y ago
tldr - wireguard doesn't do per-peer MTU: https://www.wireguard.com/todo/#per-peer-pmtu Its due to some strangeness in general with tcpip layers that don't forward PMTU discovery ICMP messages. You'll s
70.
by vetrom 2y ago
In my experience, in a multiuser environment SQLite falls over pretty hard, due to a lack of anything like MVCC. I'm aware that there a bunch of sqlite-compatible implementations and extensions that add MVCC. How close are those to ac
71.
by vetrom 2y ago
A modern equivalent to the 'usenet death penalty' is what's really needed. Without a grassroots method to censure and more or less permanently injunct and/or eject bad actors, you can't stop them from harvesting pr
72.
by vetrom 2y ago
Isn't there some way you could calculate the signal density you'd need in any of PDM/PWM/PCM to roughly equate to the quality of signal reproduction of a given tape media, given known tape surface/speed/magneti
73.
by vetrom 2y ago
(edit: first archive link was not complete) https://archive.is/vEExp
74.
by vetrom 2y ago
The FCC generally requires finished devices aimed at the commercial market to be locked down from arbitrary modification. See 47 CFR 15.212(a)(2)(iv) ( https://www.ecfr.gov/current/title-47/part-15#p-15.212(a)(2).
75.
by vetrom 2y ago
In any position of real leadership, unless you have exigent circumstances that dictate otherwise, you want to lead, not dictate. In that sense, there's real value in letting a situation develop its own consensus as the actors involved
76.
by vetrom 2y ago
No, it means that if you approve a device to link, and you later have reason to unlink the device, you can't establish absolutely that the unlinked device can no longer access messages, or decrypt messages involving an account, breakin
77.
by vetrom 2y ago
Signal (and basically any app) with a linked devices workflow has been risky for awhile now. I touched on this last year ( https://news.ycombinator.com/context?id=40303736 ) when Telegram was trash talking Signal -- and its
78.
by vetrom 2y ago
I see a lot of noise made about responsible disclosure, its drivers, and its rewards. What I don't see is talk about how this is one more datapoint against centralized permanent identities. Every time I see a service purporting that i
79.
by vetrom 2y ago
Doesn't systemd's resolver api hit most of the wishlist items talked about in the slides there? Granted, then you're pulling in dbus, a dbus api, and all that 'fun'.
80.
by vetrom 2y ago
Yes. Centralized platforms and people unwilling to act against the aggregation effect are drivers of the market capture that make these antiuser activities normal.
81.
by vetrom 2y ago
FWIW, Newegg is, in fact, where I got mine. It was definitely a matter of waiting some time to see it get in stock. If theres a way to track historical restocking rates/timing on newegg & other sites, that would be really handy t
82.
by vetrom 2y ago
Bootable whatever polyglots are a recurring feature in PoC||GTFO, which I find to always be an enlightening read: https://github.com/angea/pocorgtfo?tab=readme-ov-file#0x22
83.
by vetrom 2y ago
There's the ASRock PAUL: https://www.asrockrack.com/general/productdetail.asp?Model=P... I have one, it works. Look at that board though! Given that component and board density, I don't find it very surprisi
84.
by vetrom 2y ago
youll find plenty of reasons and justifications in the wider world of industries software engineering touches. Look at butbucket, microsoft (sourcesafe and then they bought out all of github), perforce, rational, bitkeeper, etc. All it real
85.
by vetrom 2y ago
"Good faith" by the letter of the law is often established by chichanery like posting job ads with nebulous requirements in print newspapers, requiring mail in resumes, and slowrolling a process. Not lies, strictly, but I see pl
86.
by vetrom 2y ago
re my commentary nine months ago: I thought Gitea was fairly safe, as they were not requiring a CLA. ( https://news.ycombinator.com/item?id=39680587 ) They still seem to only require a DCO, so I don't think they're
87.
by vetrom 2y ago
That was Blackwater ( https://en.m.wikipedia.org/wiki/Blackwater_(company) ), no relation.
88.
by vetrom 2y ago
Maybe they could. I am uncertain whether they would need legislation to do so. IMO that would arguably be the more correct option, but it would also remove the sort of information pool that can enable leakage or fishing expeditions the cur
89.
by vetrom 2y ago
While complying with our treaties as a nation is good and proper, those treaties remain subordinate to the Constitution. To the best of my knowledge, there is no verbiage in there that permits Congress to authorize a law for the mass colle
90.
by vetrom 2y ago
You could de-peer/internet-death-penalty them, but, as is often the case, there is not alignment between the business objectives and network operator objectives.

More ›