yrro

43 ms·

511.
by yrro 4y ago
A friend of mine is of the opinion that all safety improvements in cars should be reverted on the grounds that killing more motorists is good for the planet. At first I thought this was ridiculous. But now that we're deep into the clim
512.
by yrro 4y ago
Active Directory uses Kerberos for authentication, it's safe to say it's pretty widely used outside of MIT. :) Our user accounts live in an AD DS. We use FreeIPA (actually Red Hat Identity Management) to manage a second domain for
513.
by yrro 4y ago
What the heck, I've never seen this. Hey ISVs, if you see this conversation engage me to consult on how to make your installers not drive people like us up the wall! ;)
514.
by yrro 4y ago
Don't get me started on the wasteland that "My Documents" has become, given 20 years of incompetent developers.
515.
by yrro 4y ago
How? ACL subjects are identified by SIDs not by UID/GID.
516.
by yrro 4y ago
How do the Linux-specific properties of files get stored on NTFS (e.g., file owner/group/mode?)
517.
by yrro 4y ago
At some point Teams has to ask the TPM to unseal its encrypted copy of the access token. At that point an attacker can read the communication between Teams and the TPM, or it can read the token straight out of Teams' memory space.
518.
by yrro 4y ago
That sounds quite pleasant, but I wonder who is storing their home directories on NTFS?
519.
by yrro 4y ago
What's 'secure credential storage'? I don't think the Windows Credential Management API counts. Any program running as my user can ask for credentials out of the store, can't it? And even if there was such a secure
520.
by yrro 4y ago
B-b-but the Windows Credential Manager asks me to authenticate before it shows me the value of any saved passwords! It must be secure, right?
521.
by yrro 4y ago
> An attacker with local access on a system where Microsoft Teams is installed could steal the tokens and use them to log into the victim's account. Big deal? They can also read all sorts of stuff out of ~/.config, or my Kerber
522.
by yrro 4y ago
$ file -L /usr/lib/git-core/git-rebase /usr/lib/git-core/git-rebase: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-
523.
by yrro 4y ago
This sort of already exists in the form of sssd. In particular, pam_ssd.so connects to sssd's PAM responder & acts as a dumb client library to the authentication logic within the sssd process.
524.
by yrro 4y ago
See https://man7.org/linux/man-pages/man7/credentials.7.html and https://www.gnu.org/software/libc/manual/html_node/Job-Contr...
525.
by yrro 4y ago
For completeness it's worth mentioning that chsh calls into pam with pam_acct_mgmt and pam_open_session/pam_close_session after it's authenticated the user with pam_auth.
526.
by yrro 4y ago
Only if you have resistive electric heating. If you have a heat pump, you lose out on efficiency (remember that for every J you put into a heat pump, you get >1 J of heating out!)
527.
by yrro 4y ago
Yes, it's Microsoft (the author confirmed in a thread on Twitter).
528.
by yrro 4y ago
He's being sued by Ubiquity.
529.
by yrro 4y ago
I use Kerberos (KDC hands out TGT only after MFA)
530.
by yrro 4y ago
Yes, yes I do. We're doing incalculable damage to animal life (e.g., disrupting birds and insects which are essential pollinators for plants). This is but one facet of the crisis that our species has inflicted upon the planet.
531.
by yrro 4y ago
They should do both
532.
by yrro 4y ago
At first I loved LED street lights because I could see so much better by them (and I presume that they have an increased deterrent effect on crime though I have not checked this). These days I think disrupting wildlife is more important tha
533.
by yrro 4y ago
Other replies have made the point that they look like, but don't quack like ducks. I just wanted to point out that I was speaking from a legal perspective: specifically, "[those] who uncapped their limiters and installed 1000 W mo
534.
by yrro 4y ago
They can't help. My friend sells second hand bicycles recovered from the police. A couple of weeks ago they gave him an e-bike. This thing had been modified with a twist throttle, 1 kW motor and a maximum speed of 62 MPH. He took it up
535.
by yrro 4y ago
They aren't cyclists -- they are motorists using illegal uninsured vehicles. [In the UK, electrically assisted pedal cycles must cut out after 15.5 mph; the max motor output is 250 W; and the motor must solely be activated by the actio
536.
by yrro 4y ago
An electric bicycle will make a huge difference in getting you out of the valley. But unfortunately you can't do anything about the atrocious non-design of London streets and the endless traffic gumming them up.
537.
by yrro 4y ago
> the point of passing a bike on the road is to avoid the danger you as a driver pose for the bike in the case of an unexpected event. > like if the biker falls. In this scenario the driver is not leaving sufficient space ahead of the
538.
by yrro 4y ago
Wish it had a way to kick off a pod after a certificate is issued, that way I could automate applying the issued certificates to the devices where they'll be used. (Yeah I currently do this with a cron job so it's not _so_ bad)...
539.
by yrro 4y ago
That looks great, thanks. Installing it now! I've been burned in the past by relying on extensions like these, which only work until Google change their HTML and then the extension author is (understandably) burned out and doesn't
540.
by yrro 4y ago
That one's easy if you use duckduckgo. !py urlunsplit redirects you to: https://docs.python.org/3/search.html?q=urlunsplit

More ›