y0ghur7_xxx

6 ms·

1.
by y0ghur7_xxx 7y ago
Sorry I have to chime in, because there is also my very own nntp server with also a web interface for people who don't want to download a client: https://in.memory.of.e.tern.al/comp.misc/ There are still some peop
2.
by y0ghur7_xxx 7y ago
> They fail because of severe checklist fatigue > checklists often leaves a lot to be desired. You say yourself that checklists are great, and it is proven that they save lives. So if there is fatigue in using them over and over, and
3.
by y0ghur7_xxx 7y ago
> Certificates which are perfectly good for communication and do not pose any significant security risk. Is it so? I remember that in 2008 someone was able to create a rouge CA certificate because of the predictability of serial numbers[
4.
by y0ghur7_xxx 7y ago
Actalis is a major Italian CA that works mainly with big banks and the public sector, like (from the bug report) - the Tuscany Region (e.g. O=Rete Telematica Regionale Toscana, etc.) - the Piedmont Region (e.g. O=CSI Piemonte, etc.) - centr
5.
Actalis: Insufficient Serial Number Entropy(bugzilla.mozilla.org)
64 points by y0ghur7_xxx 7y ago|33 comments
6.
by y0ghur7_xxx 7y ago
It has to be baked into the CA, so that a browser vendor can check it before inclusion. If the CA specifies domains it is not allowed to sign certificates for, it will not be included.
7.
by y0ghur7_xxx 7y ago
There is a Name Constraints extension in X.509[1] that does exactly that, but to my knowledge no browser implements it. [1] https://tools.ietf.org/html/rfc5280#section-4.2.1.10
8.
by y0ghur7_xxx 7y ago
The referrer header is in no way a tool to differentiate real users from a ddos attack.
9.
The Future of Travel (2016)(youtube.com)
1 points by y0ghur7_xxx 7y ago|0 comments
10.
by y0ghur7_xxx 7y ago
> but is this a common sentiment It is. One more statistical point: I started reading, saw that phrase, closed the tab and came here for the comments.
11.
by y0ghur7_xxx 7y ago
It's not scanning only port 3000: const portsToTry = [ 80, 81, 88, 3000, 3001, 3030, 3031, 3333, 4000, 4001, 4040, 4041, 4444, 5000, 5001, 5050, 5051, 5555, 6000, 6001, 6060, 6061, 6666, 7000,
12.
by y0ghur7_xxx 7y ago
That's awesome. I hope that all asian phone manufacturers like xiaomi, sony, samsung, and others get together and make an alternative to ios and android. They are big, and they can pull it of. Android apps compatibility is a big plus.
13.
by y0ghur7_xxx 7y ago
I don't think so: neither of those tools sign the message with the same RSA keypair. sshenc.sh for example does not sign the message whatsoever. An attacker could just intercept a ciphertext, drop it, encrypt a different message and se
14.
by y0ghur7_xxx 7y ago
> @Benjojo12 and I are building an encryption tool that will also support SSH keys as recipients, because everyone effectively already publishes their SSH public keys on GitHub. Is this not already possible with tools like https:/&
15.
by y0ghur7_xxx 7y ago
I agree with you. Germany did not accomplish it's goal of CO2 emissions reduction, but in the process of trying it did a whole lot of other great things. And I hope we will all learn from the experience Germany made and it will contrib
16.
by y0ghur7_xxx 7y ago
> I don't see why we shouldn't transition to renewable energy asap anyway I am no expert, and I think neither are you, so we are just making some small talk here, but: I think we don't have the tech to go all in on renewab
17.
by y0ghur7_xxx 7y ago
> Particularly in the case of families, the notion that food delivery will ever become cheap enough to be a default relies on negating delivery costs. I live in Italy and delivery cost is like 2,50€. And it's the same if I order foo
18.
by y0ghur7_xxx 7y ago
> especially when the metrics being optimized for usually aren't in the users' best interests I don't think so. Mozilla is not google, and apart from the mr. Robot error, that they apologized for, I am sure Mozilla is usin
19.
by y0ghur7_xxx 7y ago
I agree about the settings. I really hope the plasma mobile guys get something ready for when the phone starts to ship.
20.
by y0ghur7_xxx 7y ago
I really like thunderbird. Because it is the only client I know of that has all the features I use: - multiple identities - multiple accounts - a very good search - imap idle support - nntp client It could be better on a lot of aspects, lik
21.
by y0ghur7_xxx 7y ago
Works fine on Firefox 66.0.3 (64-bit) on Linux.
22.
by y0ghur7_xxx 7y ago
> The whole point of semver is that it allows people to know if they can upgrade version without hitting incompatibilities. So yes, this would be a 2.2 and those on 2.1 would know that they could upgrade to it without worrying about fixi
23.
by y0ghur7_xxx 8y ago
It will start to ship in Q3 this year.
24.
by y0ghur7_xxx 8y ago
My honor already does this: https://vgy.me/mSUFiV.jpg Is this feature only found on honor/huawei phones?
25.
FAA has no plans to ground Boeing 737 Max airliners(marketwatch.com)
3 points by y0ghur7_xxx 8y ago|0 comments
26.
by y0ghur7_xxx 8y ago
This looks really nice. Can't wait to try it out later today. Anyone with a gmail account can use it, and there is no need to install the app if you don't want to.
27.
by y0ghur7_xxx 8y ago
maybe there is a * missing: Roaming is the new normal* *in Europe[1] [1] https://europa.eu/youreurope/citizens/consumers/internet-tel...
28.
by y0ghur7_xxx 8y ago
They can just buy an other phone. It's not like you HAVE to buy an iPhone.
29.
by y0ghur7_xxx 8y ago
> When someone shows me an: open sourced, graphical, log based, spam ip filtering, self hosted, server alternative to GA that I can set up in < 10x the time I will happily switch to it. If privacy is your core business you make compro
30.
by y0ghur7_xxx 8y ago
What is the alternative? What do you propose?

More ›