zjs

11 ms·

61.
by zjs 8y ago
I have a small set of interview questions I prefer to choose from, in part because I've given them quite a bit of thought. I would be sad if I had to switch questions after 20 or 30 candidates because I find it necessary to invest subs
62.
by zjs 8y ago
PRs to add support for new DNS providers have been slow to merge, in part because the support story is complex[0]. However, plugins need not live in the main Certbot repository. Maintaining a plugin yourself may be the lowest-friction way t
63.
by zjs 8y ago
People are opting into data collection in a way that creates a severe security vulnerability. Not only have you given up confidentiality (of everything, including passwords), you've also sacrificed integrity and availability. You can n
64.
by zjs 8y ago
Imagine the malicious things someone could do with this level of access. And none of the usual mechanisms to, say, detect widespread compromise of a Certificate Authority would apply here. They could drain your bank account, hiding the tran
65.
by zjs 8y ago
Could you summarize what you believe you're giving up in exchange for $20/month? (There's a thread about informed consent elsewhere in this discussion. I'd like to understand how informed you are about the risks associat
66.
by zjs 8y ago
> TLS-SNI-01 and 02 were only disabled only a few weeks ago, and they haven't been officially removed from the ACME spec, ... Based on the repository's history, TLS-SNI-01 and TLS-SNI-02 appear to have been removed from the spe
67.
by zjs 8y ago
Years ago, an HTTPS-01 challenge was proposed that would have operated like HTTP-01 except using port 443. However, concerns were raised about the safety of this challenge. I can't find the relevant discussion thread at the moment, but
68.
by zjs 8y ago
Do you consider yourself to be good at note taking? > Consider finding a few episodes of Car Talk, My Favorite Murder, or another podcast with at least 2 people talking back and forth, putting it at 1.1x speed, and taking notes on that.
69.
by zjs 8y ago
Off topic: I feel like a fireproof document safe is something that I should own, but every time I shop for one I find myself going down a rabbit hole of unfamiliar terminology and certifications. As with many things, it seems like the marke
70.
by zjs 8y ago
I configure a second YubiKey as a backup, and disabled SMS-based recovery where possible. Many sites allow this explicitly, and will let you view details about the last time each key was used to log in. Some sites that use TOTP only allow f
71.
by zjs 8y ago
Any CA can issue certificates for any domain, but they may not be permitted to do so. Certification Authority Authorization (CAA) DNS records can be used to indicate which CA is authorized to issue certificates for a domain. The CA/Bro
72.
by zjs 8y ago
From the article, Crystal also participates in eyeo's Acceptable Ads program.
73.
by zjs 8y ago
> There is a major chicken-and-egg/game-theoretical problem though: any browser that does that today will piss off/irritate its users, forcing them to use other browsers or older versions of the same browser, as DNSSEC is not w
74.
by zjs 8y ago
> I already checked the box asking to always open foo.com in a specific container. Why is it asking again? I have some sites that I almost always want to open in a specific container. Except when I don't. I suspect this double-confi
75.
by zjs 8y ago
IANAL, but I think it depends on what data they collect. Part of running any advertising business is accurately billing the advertisers. To do that, they need to measure enough information to track viewed impressions, click-through rate, et
76.
by zjs 9y ago
More specifically: "If a business collects and processes IP addresses, but has no legal means of linking those IP addresses to the identities of the relevant users, then those IP addresses are unlikely to be personal data. However, bus
77.
by zjs 9y ago
> “Maybe I will be less famous but I accept that,” he said, adding that he would continue to cook excellent local produce “without wondering whether my creations will appeal to Michelin’s inspectors”. It sounds to me like he wants to be
78.
by zjs 9y ago
> the fingerprint sensor being in the middle of the back on 6P is unquestionably a better choice I've been very happy with the fingerprint reader positioning on the Sony Xperia Z5 Compact: as a part of the power button, along the ed
79.
by zjs 9y ago
Ouch. It does seem as if anyone can view any users' content this way.
80.
by zjs 10y ago
There's some information on this topic at https://openwireless.org .
81.
by zjs 14y ago
Your calculation is assuming that all of the traffic from those 4 million London-based users is travelling through LINX. While LINX is the IX for London, not all traffic originating from London would have to travel through it; Tier 2 and Ti