vngzs

29 ms·

241.
by vngzs 6y ago
I like using terminal file managers for quickly traversing many nested directories, where I'm not sure where I want to go. I can use it to browse around and hjkl is familiar as a vim user. With ranger[0], I can even use it as an altern
242.
by vngzs 6y ago
If it's AWS, the quickest path to doing this securely is AWS API Gateway mTLS authN[0]. You generate some certs, stuff the public halves in S3, slap an ACM cert on the Gateway, and you're done. I have also used certificate authent
243.
by vngzs 6y ago
Laptops are basically computers inside keyboards, and people still buy them.
244.
by vngzs 6y ago
Yeah, for me it's less "working was my only social interaction" and more "with covid, we can't work in person and we also can't go do our own things with friends." Losing in-person work relationships at
245.
by vngzs 6y ago
PGP can be considered "worse" than some of the other systems because it lacks perfect forward secrecy. If you steal the key, you can decrypt past messages, which is not the case in Signal or others. https://en.wikipedia
246.
by vngzs 6y ago
What about: Making money (cryptomining, CCN theft)? Stealing data (SSNs, other identity documents)? Ransoming the data for money? In the end of the day, most cybercrime is focused on making money, so wiping a system has zero utility (especi
247.
by vngzs 6y ago
I truly love Emacs. Magit is part of what I see as its three "killer apps": - Magit. Best Git UI ever. The other comments in this thread discuss this, so it's probably sufficient to remark that it's the only serious Git
248.
by vngzs 6y ago
Alternatively: seed the program randomly by default, but allow the user to specify a seed as a CLI argument or function argument (for tests). In the common case, the software behaves as expected (random output), but it is reproducible for t
249.
by vngzs 6y ago
The original bug report for this issue contains the following text [0]: Although there is apparently some sandboxing in the use of webkit in emacs (I read that it uses a seperate process, although not anywhere authoritative),
250.
A mysterious group has hijacked Tor exit nodes to perform SSL stripping attacks(zdnet.com)
5 points by vngzs 6y ago|0 comments
251.
by vngzs 6y ago
The specific point that NSA halted SELinux development at Microsoft's behest (I had never heard of this) is more demanding of citations than Microsoft's general lobbying of the federal government (which they certainly did). There&
252.
by vngzs 6y ago
Not exactly a Linux distribution. It's a kernel security feature for mandatory access control - and it's reasonably good, if difficult to use. Edit: Found a source on the parent's claim. https://linux.slashdot.org&
253.
by vngzs 6y ago
> The claim that nvidia is bad at open source because it does not open source its Linux driver is also quite wrong [...] Hey! Wait a second, there. Nvidia isn't bad because it has a properietary Linux driver. Nvidia is bad because i
254.
by vngzs 6y ago
Perhaps it's confusing to Americans, but it's common among the UK press: > Use all capitals if an abbreviation is pronounced as the individual letters (an initialism): BBC, CEO, US, VAT, etc; if it is an acronym (pronounced as
255.
by vngzs 6y ago
https://www.bbc.co.uk/academy/en/articles/art201307021121335... > Use the abbreviated form of a title without explanation only if there is no chance of any misunderstanding (eg UN, Nato, IRA, BBC). Otherwi
256.
by vngzs 6y ago
Yeah, I'm pretty far from being able to switch to a Linux phone without the ability to read TOTP tokens from YubiKeys. For apps that don't support hardware tokens, I store the TOTP seeds on a YubiKey, which prevents malware on the
257.
by vngzs 6y ago
If you open most books on the shelf you will notice that text is not left-aligned, but is in fact justified to create a consistent vertical margin on the right-hand side[0]. It's the big thing I always miss when I try reading on the we
258.
by vngzs 6y ago
The (and rewards) bit isn't saying that SRD users are ineligible for rewards! Rather, it's trying to encourage non-SRD users to report vulnerabilities they find. If Apple explicitly stated that SRD users are ineligible for bountie
259.
by vngzs 6y ago
IMO the ideal format for conveying this information is to show, not tell. Give me an example document and annotate it with sidenotes that describe the purpose and importance of each section. Then we get to see how well it works, not leave i
260.
by vngzs 6y ago
> If meaningful scientific and technological progress occurs, then we reasonably would expect greater economic prosperity (though this may be offset by other factors). And also in reverse: If economic gains, as measured by certain key in
261.
by vngzs 6y ago
Before covid-19, pretty frequently. For instance, I once noticed that the end of my shoelace broke off. If you want to prevent continued fraying, you can use a lighter to melt the end of the lace. Besides that it's a well-designed, cla
262.
by vngzs 6y ago
For pockets to look good with items in them, they need to be big. For pants to look good when the pockets are big, the articles themselves need to be designed to be worn big. Most modern clothing is designed to hug the body and constrain mo
263.
by vngzs 6y ago
I carry a filled Zippo everywhere I go (although I don't smoke - it's for lighting others' cigarettes). It fits perfectly in the coin pocket on a pair of raw Japanese jeans, where it will produce a fade[0] unique to the light
264.
by vngzs 6y ago
Chrome appears to have started blocking uncommon files en masse. Just recently, I received reports that it's blocking plaintext JSON files from being downloaded, with no obvious way around it (and no real notice).
265.
by vngzs 6y ago
If you're going to cover it, use a sticker, like the EFF stickers here[0]. They're reusable, so you can move it to the side for meetings. I used a hard plastic MongoDB-branded sliding camera cover on a couple laptops[1], and its p
266.
by vngzs 6y ago
This? https://www.kaggle.com/c/petfinder-adoption-prediction/discu...
267.
by vngzs 6y ago
Indeed, Wikipedia arguably has a deletionist bias[0]. [0]: https://www.gwern.net/In-Defense-Of-Inclusionism
268.
by vngzs 6y ago
Use a CSPRNG to produce the tokens and keep a list of the outputs. Select uniformly/randomly from this list for payouts.
269.
by vngzs 6y ago
Ah, it has! That explains my confusion about why Python is even present on iOS. There's still a good meat of interesting vulnerabilities here, but many of the interesting ones have hidden details for now. I'm looking forward to wh
270.
by vngzs 6y ago
The Apple product security team just submitted this to the Full Disclosure mailing list[0]. There's a Python arbitrary remote code execution flaw addressed in this update (CVE-2020-9793). The same flaw is present in iOS as well[1][2].

More ›