winstonwinston

4 ms·

1.
by winstonwinston 2mo ago
> I've accidentally set up passkeys just by clicking an okay button a few times in the past and had to go back and figure out how to undo it after being blocked from login on another computer (which computer was I on again?). No dou
2.
by winstonwinston 2mo ago
Imo copying (like carbon copy) makes it fair compared to taking it (without attribution) and claiming it yours. For example, for software I usually use MIT license, which is a permissive license with attribution.
3.
by winstonwinston 2mo ago
Why makes no sense at all unless you are very naive trusting they would not jump straight to the endgame if it was possible with the technology available.
4.
by winstonwinston 2mo ago
The sane way for encryption keys stored in hardware (secure enclave or tpm like) is to onboard user when the key is not derived from user password. Just like they do for FDE to export a recovery key and then you can adjust your expectations
5.
by winstonwinston 2mo ago
But that’s not backup restore? I’m thinking Time Machine restore on a new Mac when old one is no longer working. Or when the old one had to be wiped and restored.
6.
by winstonwinston 2mo ago
Maybe but this is unexpected if you need to restore from a backup..
7.
by winstonwinston 2mo ago
Basically you add more radiators to keep water temperature low or you add a backup heating source such as typical electric water boiler that will be used only during very cold days to increase water temperature when heat pump cannot keep up
8.
by winstonwinston 2mo ago
CERN wants x86-64-v1 binaries, not v2.
9.
by winstonwinston 2mo ago
Alma and Rocky both require x86-64-v2 CPU as a minimum (same as RHEL 9). CERN want baseline x86-64-v1 which Debian provides.
10.
by winstonwinston 2mo ago
Don’t they openly state that their product may cause IP issues but that is fine because they will take care of your legal problems caused by their product? In the end, it’s not them stealing, it’s the AI doing stealing. What kind of moral c
11.
by winstonwinston 2mo ago
There is a common anti-pattern for heat pumps being installed in large houses. They are almost always more powerful than needed, just to be safe it will be enough, better safe than sorry. But overpowered heat pump will use significantly mor
12.
by winstonwinston 2mo ago
> I prefer to run my own local recursive resolver. Used to be fine. I stopped doing it when average TTL dropped to 300 seconds and it takes far too long for my local recursor to get the answer >100ms, when 3rd party resolver delivers
13.
by winstonwinston 2mo ago
When I run a mix of CF and Quad9 resolvers, Quad9 was consistently slower in response times when measured. But it didn’t make any perceivable difference in real usage.
14.
by winstonwinston 2mo ago
A “swarm” and “hijacked” reads like DoS and spam at the very least, doubt any of those is legal in german law.
15.
by winstonwinston 2mo ago
If they wanted air gapped environment they would’ve it. I mean, if you want to sabotage your trial by hard constraints you can do it, or you do not do it to see interesting results. They even said it that some constraints were disabled for
16.
by winstonwinston 2mo ago
No memory ever wasted, consumes all of it. But this does not seem to be the case anymore. Today I see that eclipse IDE is more memory friendly than Chrome.
17.
by winstonwinston 2mo ago
I can say that I have used pip only and it does a package manager job well, it just works. I’m not sure at what uv excel at but reading comments it seems uv is not only package manager but also venv manager.
18.
by winstonwinston 2mo ago
Do these free HE assigned IPv6 prefix(es) just remain valid indefinitely even when not actually being used/routed?
19.
by winstonwinston 2mo ago
What a fucked up reality when you need to point out that code contributor is responsible for their code.
20.
by winstonwinston 3mo ago
Google has been sending some similar alerts long before Apple, those read something like "Government-backed attackers may be trying to steal your password".
21.
by winstonwinston 3mo ago
`Cryptography` is not a Python stdlib: try: from cryptography import x509 from cryptography.hazmat.primitives import hashes from cryptography.x509.oid import NameOID except ImportError: # pragma: no cover sys.exit(&qu
22.
by winstonwinston 3mo ago
I have no idea what you mean. It is no surprise that known unpatched CVEs will be exploited. Perhaps more effort should be put into shipping fixes faster than writing blogs about exploiting known issues.
23.
by winstonwinston 3mo ago
You could just run multiple rsync processes using different src and dest paths to achieve multiple copy streams. Anyway this would not be likely much faster if rsync is run over encrypted SSH due to CPU performance, compared to unencrypted
24.
by winstonwinston 3mo ago
Well, when I go look at the “victim repository”, to me that looks like manufactured persona with pointless vibe codes projects, a test playground so to speak. It does not appear that they actually let it target an actual persona/projec
25.
by winstonwinston 3mo ago
Blog post is displayed for a moment and shortly after the post text is replaced with a cryptic error about regex parsing. I guess it has something to do with Safari javascript engine. Anyway, the current state of web development is so pathe
26.
by winstonwinston 3mo ago
It would loose automagic? In a recent full discloure I was reading about a CVE of an LLM agent, the vendor installed a “secure sandbox VM” and then just shared a host’s filesystem read/write to the agent’s VM.
27.
by winstonwinston 3mo ago
> after an unencrypted copy of the previous subkey was inadvertently committed to a private GitHub repository. Unencrypted signing key. They just don’t care anymore.
28.
by winstonwinston 3mo ago
> It may be that the 662 MB used by the "Renderer" is shared between many Windows components, so killing that Weather app may not reclaim as much space as you may hope, instead, it would require killing every user of the compon
29.
by winstonwinston 3mo ago
You can’t be upset because they want to know the truth, seriously. When a project has concerns about generated code, it is for a reason.
30.
by winstonwinston 3mo ago
> I think we all know the answer to this: bad incentives. Better technology, worse food quality, more profit.

More ›