vngzs

20 ms·

181.
by vngzs 5y ago
Why do you say CryEngine is not very good? I don't have any experience with the dev side, but I used to follow engine tech and CryEngine was (historically, at least) ahead of the competition in rendering large, luscious outdoor environ
182.
by vngzs 5y ago
Ever spend significant time spelunking in the Linux kernel commit history [0]? They have a guide [1] on submitting good patches, and lots of care is taken to commit message quality. The commits are quite helpful, not just for diagnosing err
183.
by vngzs 5y ago
Many of these claims are described in [0]: > WhatsApp still won't be able to access any of your communications or share them with Facebook. Meanwhile, WhatsApp will be able to share user account information like your phone number, l
184.
by vngzs 5y ago
It wouldn't be unreasonable to officially target Proton support. Hell, I'd like that almost as much as native support. And we can give back to a community that is bringing a massive catalog of Windows software to Linux by sending
185.
by vngzs 5y ago
The news sources I've encountered seem to imply otherwise. The linked Washington Post article was an early hint at this, and built on original material from [0]. Now we have other sources backing this up, such as [1], and detailed brea
186.
by vngzs 5y ago
I just want to say that I think this is absolutely a fair approach for many systems, but it sounds so radical against the backdrop of perimeter security that you're catching undue flak. You need to take a lot of care to build and desig
187.
by vngzs 5y ago
> Are you saying that that the probable cause requirement still allows warrants to be granted very easily? Or that the probably cause requirement is not being followed? Well, both. Warrants may be granted very easily via the FISA courts
188.
by vngzs 5y ago
Signal has a means of delivering push notifications using their own infrastructure via websockets. It has a higher battery drain than using Google's push infrastructure, but it works.
189.
by vngzs 5y ago
I think you misunderstood me - I mean that you want multiple layers to your security, and you need to be careful to select layers that fail independently. If Vault has a sufficiently bad unauthenticated bug, then attackers can simply use it
190.
by vngzs 5y ago
Yeah, there's the whole "zero trust" possibility which I didn't mention. If you do authentication/authorization really well, you can stop doing (2). For things like databases, I think it's better to treat them
191.
by vngzs 5y ago
I think there are some good lessons here: 1. Even if you have one way to protect your database (e.g., firewall rules), you should have another. In this case, use a database password or (better) client TLS certificate to authenticate traffic
192.
by vngzs 5y ago
I'm fairly conflicted about this. While I believe that learning C teaches bad habits - manual memory management tends to account for some absurd percentage (70-80%) of CVEs in modern programs - it's also unquestionably tethered to
193.
by vngzs 5y ago
Thanks for the "how" - I guess if you fully control the client and server, there's some extra checks you could implement client-side based on the cryptographic root of trust. FWIW, I wasn't really trying to make a prescr
194.
by vngzs 5y ago
In the bloom filter example, what device calculates the hash inputs for the bloom filters? If it's the server, then the server needs a copy of the image to check. So is it the client? If so, how can you prevent a malicious client from
195.
by vngzs 5y ago
From Apple's statement[0]: > The first assigns the user an anonymous IP address that maps to their region but not their actual location. The second decrypts the web address they want to visit and forwards them to their destination.
196.
by vngzs 5y ago
The government already has baseline security standards that are created and published by the government, not private entities. NIST 800-53[0] is a good example of this, and it generally applies to critical infrastructure providers: Regulati
197.
by vngzs 5y ago
I don't want to hear people tell me only how to solve problems with AWS's legos. Sure, we use them - and sure, knowing them will help you, but those tools are a crutch that is going to prevent you from solving tough problems if it
198.
by vngzs 5y ago
This sounds inseparable from the replication crisis. The incentives are clearly broken: they are not structured in a manner that achieves the goal of research, which is to expand the scope and quality of human knowledge. To solve the crisis
199.
by vngzs 5y ago
You can get ARM desktops now at non-crazy prices. The neat thing about them is they are 32/48 core CPUs at consumer-available prices[0]. Sure, they're on the high end, but it's around the cost of a workstation that one might
200.
by vngzs 5y ago
Yeah, sorry, the openjdk situation sucks. It's an "extra" package, which means the maintainer is a community member rather than being part of the Arch core group. The nice thing about Arch packages, though, is that they'
201.
by vngzs 5y ago
Arch Linux does not do this, instead preferring to upstream patches [0]: > Arch Linux defines simplicity as without unnecessary additions or modifications. It ships software as released by the original developers (upstream) with minimal
202.
by vngzs 5y ago
Yeah, but pronouncing TeX "tek" is a bit of a shibboleth among mathematicians. The use of Greek letters is common enough in math papers to make it a natural inference (it's not an English "X", it's a capital Gr
203.
by vngzs 5y ago
The modern Linux kernel allows you to sandbox applications natively. There are tools that make this easy to set up, for instance [1]. [0]: https://blog.cloudflare.com/sandboxing-in-linux-with-zero-li... [1]: https:/&#
204.
by vngzs 5y ago
If I buy coffee, I buy it on a credit card. Every daily purchase uses a credit card. Why? I want a buffer between me and the purchaser. I don't want them to be able to take money from my bank. https://youtu.be/vsMydMDi3
205.
by vngzs 5y ago
Dating sites are not actually designed to help you find relationships. They are designed to leave you constantly questioning the relationship you're in, knowing you could always find something better around the corner. They might get s
206.
by vngzs 6y ago
> those designed or used in a manner that manipulates human behaviour, opinions or decisions ...causing a person to behave, form an opinion or take a decision to their detriment This appears to obviously apply to the Facebook wall. You c
207.
by vngzs 6y ago
Seriously. I can't imagine a business entity that needs a high-conversion landing page, but can tolerate not owning a domain for it. If my therapist's page (from their examples) was ahoyo.to/amazing-therapy, I'd probably
208.
by vngzs 6y ago
The original title was the article title: Zoom zero-day discovery makes calls safer, hackers $200,000 richer
209.
by vngzs 6y ago
If you want a (relatively) untraceable cryptocurrency, they exist [0]. Yes, most cryptocurrencies are _perfectly_ traceable - you can trace the source/destination of every transaction - contrary to the common narrative. [0]: https:&#x
210.
by vngzs 6y ago
You complain about power user tools, then list a bunch of Xorg tools. Xorg is dying; move to Wayland. I use Sway, but if you want something that's closer to a macOS power user experience, you should probably go with KDE[0]. Tearing? Fu

More ›