vngzs

13 ms·

91.
by vngzs 4y ago
Right. Some core services get this treatment, like email and important online accounts. For others I rely on reset mechanisms tied to those email accounts if I lose the primary key and haven't had the chance to register the secondary.
92.
by vngzs 4y ago
You just register 2-3 keys. It's not so bad.
93.
by vngzs 4y ago
It's like a clear hood on your car. On a nice enough car, it shows the beauty of the engine. But on a cheap one ... Skeleton watches can be uniquely telling of the price of the watch. Worth mentioning, most mechanical watches will have
94.
60% Electrocapacitive Keyboard build (2020)(rmi-kb.com)
13 points by vngzs 4y ago|4 comments
95.
by vngzs 5y ago
I like the design of Guix more than NixOS, but I haven't gotten around to actually trying it. The tricky thing about GNU distros is they often make it very difficult to install nonfree packages like Discord. I don't use proprietar
96.
by vngzs 5y ago
You can write Chef targeting OpenBSD and run it in local mode. Get to use plain Ruby instead of a hodgepodge functional programming language. NixOS modules tend to be more "batteries included" than your average Chef cookbook, but
97.
by vngzs 5y ago
I'd also like to recommend Knuth's lecture notes on mathematical writing [0]. [0]: https://jmlr.csail.mit.edu/reviewing-papers/knuth_mathematic...
98.
Netstat is vulnerable to escape sequence injection (busybox)(gitlab.alpinelinux.org)
2 points by vngzs 5y ago|0 comments
99.
by vngzs 5y ago
On Duo, if you have multiple hardware keys registered, then you need to pick the key to use for 2FA before you get the prompt. If you pick the wrong key, it will fail. It is very easy to end up in a configuration where every time you need
100.
by vngzs 5y ago
If they're willing to read a book on security design, I would recommend Security Engineering, 3rd Edition [0]. It includes a broad survey of what matters in the security space (rather than just cryptography), and generally in sufficien
101.
by vngzs 5y ago
If you haven't, check it out from a high DPI printer. The font is much more tolerable there. I used uBlock customization to block the font from loading to read the article.
102.
by vngzs 5y ago
Indeed. The author could have spent 15 minutes setting up Tailscale [0] and not expose any listening administration ports to the Internet at all. If they wanted to avoid using a hosted service, Wireguard alone is incredibly defensive agains
103.
OpenSSH 8.9/8.9p1 release notes(openssh.com)
4 points by vngzs 5y ago|0 comments
104.
by vngzs 5y ago
Slides: [0] Carol is one of the authors of The Rust Programming Language [1]. This talk, targeted mainly at C programmers, motivates the development of Rust and then offers a deep dive into Rust's safety guarantees. [0]: https:/&
105.
Rust: In It for the Long Haul with Carol Nichols [video](learning.acm.org)
3 points by vngzs 5y ago|1 comments
106.
A Logarithm Is Just the Number of Digits (2021)(probablydance.com)
2 points by vngzs 5y ago|0 comments
107.
by vngzs 5y ago
I'll concede that it's not nearly as crazy to share keys across devices for home use or low-risk things. I must admit I was speaking mostly from an enterprise perspective.
108.
by vngzs 5y ago
I think this is a bad idea for users. I don't think SSH keys are things you should share across machines in a password manager. If you have two devices, then you should have two keys (though this is the subject of some debate; see [0])
109.
by vngzs 5y ago
The CDC reports 16.3 flu/pneumonia deaths per 100,000 [0]. That's 0.0163 percent. Johns Hopkins University reports covid-19 has 278.89 deaths per 100,000 - a 1.2% mortality rate in the US [1]. That would put covid-19 at 278.89&#x2
110.
by vngzs 5y ago
It's addressed in the article, though absent specific numbers: > The company said the impact from privacy changes by Apple Inc (AAPL.O) remained modest. Last year, Apple began requiring apps to receive permission from iOS users to t
111.
by vngzs 5y ago
Quick word of warning: I found it striking that even Cloudflare's Teams product, which supports Tunnels as a feature, does not make Tunnels private (e.g., by enforcing authentication, or restricting who can reach an exposed tunnel to y
112.
by vngzs 5y ago
Computer Modern looks terrible on computers (ironically!). It's only tolerable on relatively high-DPI printed documents which are capable of rendering the intricate, narrow parts of the legends. I wish people would stop using it for di
113.
by vngzs 5y ago
At the time of comment, a LiDAR rig would cost around $10,000. A few years before that, they were more like $100,000. Presumably the cameras are much cheaper. I would be willing to bet that production efficiencies will be found that will ev
114.
by vngzs 5y ago
Tesla didn't use LIDAR because it is more expensive [0]. Quoting Musk: > Anyone relying on LIDAR is doomed. Doomed. Expensive sensors that are unnecessary. It’s like having a whole bunch of expensive appendices... you’ll see. [0]:
115.
by vngzs 5y ago
While I agree that the content of one's apology is largely irrelevant here (actions speak louder than words), the video makes two substantive claims about changes when controversial opinions about about covid-19 are presented: 1. A dis
116.
by vngzs 5y ago
According to [0] attacks from a cold device require two steps of physical access. That would bypass signed contents of a boot partition, since you're messing with unprotected LUKS header contents. If the contents of the boot partition
117.
by vngzs 5y ago
In my experience driving Teslas on autopilot (a few dozen hours), you need to keep watching the road. The whole time. Especially on on/off ramps and around traffic lights. I almost watched a Tesla I was operating drive into a meridia
118.
by vngzs 5y ago
Nit: "personal property" traditionally means any property except for real estate . Using it to mean "real estate" is confusing.
119.
by vngzs 5y ago
Please don't use this license. Copy the language from the preamble and put it in your README if you'd like, but the permissions granted are so severely restricted as to make this license essentially useless for anything besides &q
120.
by vngzs 5y ago
From a defense standpoint, one should consider "shell on a box" to usually mean attackers can get root on a box. If they can get persistence, they can wait for a kernel CVE to abuse. Now, if you're just using a bastion as a

More ›