vngzs

10 ms·

61.
by vngzs 4y ago
It is exceedingly abnormal to come to a complete stop in the far left lane.
62.
by vngzs 4y ago
In Europe there are rules that work out to: if you have 50 employees or assets over EUR ~5 million, you must disclose audited financial statements publicly (this is not strictly true, but it is true to a first order approximation). It wou
63.
by vngzs 4y ago
-- $XTermId: README,v 1.3 2007/05/24 19:49:19 tom Exp $ -- Below is the original README for xterm from 1991, for your amusement. -- For a better overview, see http://invisible-island.net/xterm/
64.
Tvix Nix rewrite: status update(tvl.fyi)
2 points by vngzs 4y ago|0 comments
65.
by vngzs 4y ago
Sounds like about "as good as this gets" if you happen to want to do this in browsers. Good job.
66.
by vngzs 4y ago
Thanks. I ripped it from a colleague, and now I have some bugs to report.
67.
by vngzs 4y ago
This is really cool and fun, but is this a safe way to run SSH clients? If, say, the adblock Chrome extension you're using gets bought by a malware operator and backdoored[0], now it also has SSH and VPN access. [0]: https:/&#x2F
68.
by vngzs 4y ago
I have the following unit file saved for that purpose: [Unit] # https://stackoverflow.com/questions/36729207/trigger-event-on-aws-ec2-instance-stop-terminate Description=unlink agent from remote server
69.
by vngzs 4y ago
This post is a draft version of the released version at [0]. [0]: https://staffeng.com/guides/staff-archetypes
70.
by vngzs 4y ago
(2016)
71.
by vngzs 4y ago
I use LXD like this on NixOS. It's great for Steam, which works best on Arch Linux.
72.
by vngzs 4y ago
I mostly agree with the article, but the title is downright wrong. Even a relatively literal read of the words "supply chain" is reasonably appropriate, even for FOSS. Wikipedia's current definition for supply chain is: &gt
73.
by vngzs 4y ago
I frequently find myself advocating for better supply chain security. But if I asked developers (or their managers) to review/audit 2,000 NPM dependencies, I would almost certainly fail. No other company they know of is doing that, and
74.
by vngzs 4y ago
> Under the framework of that system, the funds at still belong to the customer that deposited them. Careful. In the case of bankruptcy, you probably won't get your money back. Bloomberg Law[0]: > An exchange going bankrupt would
75.
by vngzs 4y ago
I may be misunderstanding this, but it seems like there is a mistake on the first page: > For example, every string is an object, `str <: object`, but not every object is a string, `str ≮: object`. Is not str <: object ∧ str
76.
by vngzs 4y ago
You're right - an adversary with physical access to machines running Vault can steal keys from it. An HSM is designed to survive at least temporary physical access by an adversary. And if you have management infrastructure that lets ad
77.
by vngzs 4y ago
Yeah, the root is long-lived. The ones you issue to SSH to a machine are short-lived, because they're not stored in something like Vault.
78.
by vngzs 4y ago
Doing this without something like Vault is very difficult. Vault is designed to provide similar guarantees to an HSM (it's a service designed to make keys usable but not exfiltratable ), and that's essential for any long-lived
79.
Mudge's redacted Twitter whistleblower disclosure [pdf](s3.documentcloud.org)
122 points by vngzs 4y ago|90 comments
80.
by vngzs 4y ago
> Second, does this guy have any actual tech knowledge at all? He doesn't list what operating system they are running or what security updates he is expecting. "This guy": https://en.wikipedia.org/wiki&#x2F
81.
by vngzs 4y ago
I've heard rumors that the new Sony cameras are better. Thanks for the suggestion; I'll check them out.
82.
by vngzs 4y ago
I spent some time doing press photography for concerts and couldn't imagine shooting mirrorless during a show. High-action environments demand super low-latency, high-resolution viewfinders. No mirrorless I've handled so far can k
83.
by vngzs 4y ago
Monoamine oxidase inhibitors (MAOIs) in tobacco smoke increase the effectiveness and addictiveness of nicotine, which practically means tobacco is dramatically more addictive than nicotine alone [0]. By switching to an alternative that cont
84.
by vngzs 4y ago
The subtext of the DARPA funding makes me think the purpose of this paper is to analyze whether governments can disrupt, block, or compromise cryptocurrencies. The conclusions make some more sense in that light. Still, I think they fail to
85.
by vngzs 4y ago
This is false; some data is end-to-end encrypted, including Health and Keychain data. Photos, contacts, and Drive are "encrypted on server" which means Apple can read them. https://support.apple.com/en-us/HT20
86.
Frustration – Escaping a Turing Tar Pit with Forth(gitlab.cs.washington.edu)
2 points by vngzs 4y ago|0 comments
87.
by vngzs 4y ago
With a sufficiently programmable hardware key, yes, you can back up the secrets. See an enumeration of methods in [0]. Be careful if you plan on doing this; make sure the tradeoffs make sense to you. You probably want to do the programming
88.
by vngzs 4y ago
If you're copying passwords out of a password manager and pasting them into password fields, then yes, you're getting a significant improvement to phishing protection with a hardware key. If you're using the password manager&
89.
by vngzs 4y ago
What I mean is: with modern hardware keys you literally can't trick a user into approving a remote login, or a login to a fake domain. It's not possible unless you can control the domain that the user is logging into (say you&#x27
90.
by vngzs 4y ago
There's a frequent misconception that hardware keys are no better than, say, a TOTP seed on a secure element of your phone. The core practical difference between a hardware key and that TOTP code on a secure element is the hardware key

More ›