zimbatm

50 ms·

511.
by zimbatm 9y ago
Or even better yet: `--match-fingerprint "9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88"`
512.
by zimbatm 9y ago
Random audits from trusted third-parties would be a nice thing. Allow people to come in at any time and check the systems. Trust is better when distributed over multiple neutral parties. In terms of features, allow clients to regularly chan
513.
by zimbatm 9y ago
The trouble with VPN providers is that even with reproducible client builds, it's much easier for them to intercept the traffic on their side. Plus there is a near-zero chance of detection, unlike on the client side where the binary ca
514.
by zimbatm 9y ago
Multipart+JPEG is easily 5x more expensive than MP4 in terms of bandwidth. All new IP cameras come with MP4 as a replacement. Steaming can be done in various ways, usually with the help of some JavaScript + video tag.
515.
by zimbatm 9y ago
I expect that you were using this weird corner of the HTTP spec that is X-Mixed-replace[1]; where the server can keep feeding responses for the same request and the browser is supposed to replace the element with the new-one. A lot of IP
516.
by zimbatm 9y ago
Do Diebold machines still cost 3k a pop[1]? You can get 3 high-end scanners at that price. And generally more than one Diebold would be deployed per location right? Let's say the scanner costs $500 and there are 9999 locations. That&#x
517.
by zimbatm 9y ago
Vote count could also be optimised with machines. Each party can bring it's own OCR machine to count the votes. If there is a disagreement, fallback on humans. The issue is with having a single machine that we have to trust end-to-end.
518.
by zimbatm 9y ago
Same for PayPal accounts, this isn't limited to e-coins.
519.
by zimbatm 9y ago
It's unnecessary CPU work and also takes more storage space in the database. In practice I doubt that it makes much difference in terms of performance as hashing is way more expensive than base64-encoding. The rant is probably more aga
520.
by zimbatm 9y ago
One thing the author didn't touch upon is the amount of manpower available on both sides. I am under the impression that Google has much less people involved in the construction of their browsers.
521.
by zimbatm 9y ago
Chrome has other advantages as well. If you buy into the Google Suite then you get synched profiles. Firefox has the same but the account is only useful for keeping Firefox in sync whereas Google's also give you access to all their oth
522.
by zimbatm 9y ago
> What? You just said the UI looks good... It's simple and clean; everything is async javascript (no page loads). I meant that when just looking at the website, Concourse looks good in terms of what it has to offer. For example it o
523.
by zimbatm 9y ago
Avoid! Concourse looks good on the surface but it's really not that great. The UI is clunky. The abstraction layer is too low and leads to a lot of repeated YAML. Which leads to YAML programming. There are simple scenarios like deploym
524.
by zimbatm 9y ago
Rails had encrypted cookies for ages
525.
by zimbatm 9y ago
Not at all, it means the proxy can be attacked over the Internet. Just like the VPN can be attacked over the Internet. Once you're past that it's the same story.
526.
by zimbatm 9y ago
It's fitting that the document has been issued by the NHS. In the UK it's used so much that it doesn't mean anything anymore. It's just a way to get away with bad behaviour or incompetence. One fun example is https:&#x2
527.
by zimbatm 9y ago
Google is moving away from network-centric security and VPNs. See https://cloud.google.com/beyondcorp/ . The threat model is a bit different but you could also follow their approach and put an auth proxy in front of Je
528.
by zimbatm 9y ago
no JWT but "simple bearer token" is not a good advice as I have no idea how to implement that. I'd rather use JWT with restricted crypto (make sure "noop" is not allowed).
529.
by zimbatm 9y ago
When specs are failing you actually want to see what's happening in the browser. Xvfb + normal Chrome + ffmpeg screen capture. This can be run in Docker and thus on Macs as well.
530.
by zimbatm 9y ago
Why is physical access needed? Any exploit that gives root to the machine could also be used to install the kernel module.
531.
by zimbatm 9y ago
I'm surprised https://datproject.org/ didn't come up already. It also allows you to share any data but also deals with incremental updates. The main use-case is to share big scientific datasets that update over ti
532.
by zimbatm 9y ago
What is the merge strategy after a partition? The initial comment was mainly intended as a joke since a lot of AP systems use the last-write-wins strategy.
533.
by zimbatm 9y ago
Just :) Dealing with merge conflicts is not trivial. So far I know of three different strategies: Automatic with CRDTs, but there is a price to pay in storage and available data-structures to play with. Manual, like Git. Denial, aka. Last W
534.
by zimbatm 9y ago
I have a new definition: * CP is a database * AP is a cache Anyone else pretending AP is a database is lying (unless it's a content-addressable store) :p
535.
by zimbatm 9y ago
Yes Vault isn't that difficult to setup. It's mainly harder because Torus hosts the backend.
536.
by zimbatm 9y ago
As soon as developers have access to the production credentials it's game over. Auditability is gone. Passwords end-up being stored in various password stores and plain files because it's convenient. Developers connect to the prod
537.
by zimbatm 9y ago
If I only look at the language properties then Nix makes sense to me. The fact that Nix is lazily evaluated allows for easy composability. This is used a lot in nixpkgs to allow overrides and build up packaging layers. And because the langu
538.
by zimbatm 9y ago
Nice. Pardon for the skepticism but I have seen a number of languages making similar claims. Lisp and SmallTalk where some of the earlier ones. I guess a lot comes down to tooling, will Ohayo be able to understand the various DSLs to extrac
539.
by zimbatm 9y ago
since each line is parsed a second time, couldn't you take yaml's approach to value encoding and asking ambiguous strings to be quoted?
540.
by zimbatm 9y ago
Take the other example in the paper: https://github.com/breck7/treenotation/blob/master/paper/tre... How does it know that line starting with a number translates into a switch case. Is it the case f

More ›