xg15

32 ms·

841.
by xg15 9mo ago
> In fact, lots of capitalistic activity is basically a search for the cheapest and fastest way to accomplish a minimum set of requirements. Yes. Which means the overall quality of things is dropping. Its nothing new or AI-specific ind
842.
by xg15 9mo ago
If the age verification/mandatory ID is the result of new laws, how exactly would switching to an alternative server help? Wouldn't they be forced to implement the same measures as well sooner or later?
843.
by xg15 9mo ago
Also EDGE... The whole thing could be a decent April's fool setup. A pity its February.
844.
by xg15 9mo ago
That's true if it worked, but I think there was the problem that EV names aren't always enough to trace back the legal entity? At least that's what I read, it might be wrong.
845.
by xg15 9mo ago
No, the problem it was solving was "how do I verify that an incoming connection is actually from xmpp.foo.com and not from an impostor?" You could also solve this with API keys or plain old authentication, but all of those require
846.
by xg15 9mo ago
Ok, so this is an official split of "WebPKI" and "everything else PKI" then? Last time I checked, Let's Encrypt was saying they provide free TLS certs, not free WebPKI certs. When did that change?
847.
by xg15 9mo ago
That's exactly what prosody is doing, but it's a weird solution. Essentially, they're just ignoring the missing EKU flag and pretend it would be there, violating the spec. It seems weird to first remove the flag and then tell
848.
by xg15 9mo ago
What exactly do you mean with "WebPKI"? The PKI system was designed independently of the web and the web used to be one usecase of it. You're kind of turning that around here.
849.
by xg15 9mo ago
Huh? The entire purpose of that EKU change was to disallow that usecase. How did that demonstrate problems for WebPKI?
850.
by xg15 9mo ago
> A public CA checks it one-time, when it's being issued. That's the same problem we have with server certs, and the general solution seems to be "shorter cert lifetimes". > Worse still, some APIs (mainly for fi
851.
by xg15 9mo ago
> How do you verify the common name/subject alt name actually matches when using a client cert. This seems exactly like a reason to use client certs with public CAs. You (as in, the server) cannot verify this at all, but a publi
852.
by xg15 9mo ago
> Is there any reason why things gravitate towards being web-centric, especially Google-centric? Yes, the reason is called "Chrome" and "90% market share"...
853.
by xg15 9mo ago
It seems reasonable for server-to-server auth though? Suppose my server xmpp.foo.com already trusts the other server xmpp.bar.com. Now I get some random incoming connection. How would I verify that this connection indeed originates from xmp
854.
by xg15 9mo ago
How is "client certificates forbidden" in any way an improvement?
855.
by xg15 9mo ago
This sounds a lot like the "increasing hostility for non-web usecases" line in the OP. In theory, Chrome's rule would split the CA system into a "for web browsers" half and a "for everything else" half - b
856.
by xg15 9mo ago
I don't see why it would. If Discord sees its primary audience as teens (i.e. the people who by design can't verify) why would it extend the verify-only parts of the service?
857.
by xg15 9mo ago
Only that I don't understand why everyone here is talking as if they had just been forced at gun point to age verify. Just... don't verify until you need it? Also pedophiles do exist (see Epstein and friends) and bad neighborhoods
858.
by xg15 9mo ago
Then use that server without age verification?
859.
by xg15 9mo ago
If code reviews don't work, pair programming doesn't work and TDD doesn't work either, then what would work?
860.
by xg15 9mo ago
Goid point, but from inside the train?
861.
by xg15 9mo ago
> where you just have to find the component file. This can be a substantial effort, especially if you're not familiar with the project.
862.
by xg15 9mo ago
I remember having read a story about some wild dogs in Moscow apparently having learned to use the subway and establishing their own "commute schedule". I always wondered how the dogs would identify the station to leave the train
863.
by xg15 9mo ago
What would make sense for me is to use an AI to turn implicit context that is only there in the moment into explicit context that is stored in the ticket. E.g. maybe you have your application open in a browser and are currently viewing a pa
864.
by xg15 9mo ago
Ultimately, this would lead to.a situation where only the customer-facing (if there are any) or "business-facing" (i.e. C-suite) roles remain. I'm not sure, I like that.
865.
by xg15 9mo ago
So... you punish a regime for mistreating its subjects - by mistreating its subjects even more ?
866.
by xg15 9mo ago
I think GP means the US sanctions. On that note, what bad thing would happen if the US simply lifted them?
867.
by xg15 9mo ago
Did they actually move or is it just a "remote-first" company now? (Or even just registered in SV but still physically in Norway?) Edit: Seems like a mix of all of it: > I joined Halodi Robotics in 2022 (prior name of the comp
868.
by xg15 9mo ago
I think GP meant that the money could be distributed directly without the job in between, i.e. UBI. Of course that comes with its own set of problems, e.g. that you will lose training, connections, the ability to exert influence through the
869.
by xg15 9mo ago
Yes, but 1300 victims per day, which is absolutely horrible, but still less than 6000 - 50.000 victims per day. Or as another point of comparison (according to Wikipedia) : The bombing of Dresden went over three days and cost 25.000 lives.
870.
by xg15 9mo ago
I find the numbers to be surreal. The Gaza war is estimated to have around 100.000 dead (if you also count those who were buried under collapsed buildings or died of indirect causes). That was after two years of bombardment. This here is th

More ›