zrm

69 ms·

661.
by zrm 8y ago
I don't really get either of these. If your backups fail then you still get fired, but now it's for choosing an unreliable cloud vendor. If you don't want to pay for your hardware up front, most hardware vendors are happy to
662.
by zrm 8y ago
It seems like the opposite actually -- spam is destroying Google. They're so big that it's worth blackhats spending significant resources to game their algorithm. That induced them to implement a spam filter which is now discardin
663.
by zrm 8y ago
DNSCrypt and DNSCurve both provide confidentiality (and are very similar to each other). The thing that doesn't provide confidentiality is DNSSEC.
664.
by zrm 8y ago
Reimplementing that still seems like a lot less work than starting from scratch.
665.
by zrm 8y ago
> the idea is not to remove the traditional hierarchical file system from the low level, but rather to remove trace of it from nearly all human interaction. But that's the issue. You can make it easier to use tags, you can make it
666.
by zrm 8y ago
> You can conceivably copy-paste a file you've been working on in one app into another, but what if you want to retrieve a file you last interacted with a year ago? How will you find that file? With searchable tags, or whatever othe
667.
by zrm 8y ago
> The answer of course is some form of file tagging, so that 'scuba' can be a single distinct group that overlaps with both 'books' and 'vacation' and 'photos', but isn't a strict subset of an
668.
by zrm 8y ago
The problem is that everyone who attempts this tries to start from scratch and then has the network effects problem, when what we really need is for someone to play GNU/Linux to Android's proprietary Unix. Make something that will
669.
by zrm 8y ago
> Therefore, we obviously need to patch echo (and all echo shell builtins) to refuse to output strings containing "GET", "POST", "HTTP", or "Host:". Unfortunately it is also possible to do this usi
670.
by zrm 8y ago
You don't even need the token issuer to have government identities, you just need some way of rationing tokens. Using identities for that is actually somewhat problematic because identity theft is generally pretty easy. The attacker co
671.
by zrm 8y ago
There is proof of stake. You stake some moderate amount ($25), refundable at any time but forfeit if you spam. For a non-spammer it effectively costs nothing but the spammer loses their stake for every spam someone reports, and every spam p
672.
by zrm 8y ago
> Malware targets Windows because that's where the users are. If the majority of people swapped to e.g. Mac or whatever else, then you'd see the majority of malware start to target Mac. Even if this is true, it doesn't cha
673.
by zrm 8y ago
That's not true. It's trivial to create a game that will take arbitrarily long to win by just increasing the number of times the user has to perform the same task in order to advance. That is a trade off against being boring, but
674.
by zrm 8y ago
> The issue with federated services is that they operate from the assumption that everyone has an anarchist sysadmin in their friend group who is going to help everyone run the federated infrastructure. I'm not sure this is a real p
675.
by zrm 8y ago
Snapshots are typically part of the provider's web management interface and are basically the first thing anybody who makes changes to anything should learn how to use. Moreover, if you're having someone else manage your systems a
676.
by zrm 8y ago
> Upgrading with do-release-update is simple if it works... but what happens when it breaks? That is what snapshots are for.
677.
by zrm 8y ago
It should be noted that there are two main protocols for mapping ports, UPnP and Port Control Protocol (or NAT-PMP, which is PCP version 0). UPnP is dramatically more complicated and has correspondingly more implementation bugs. If you ne
678.
by zrm 8y ago
> Then either you put a '\0' key on the keyboard, or you can't pass more than one file to a program. Or you have ctrl+space insert '\0', or have space insert '\0' and ctrl+space insert ' '. It
679.
by zrm 8y ago
> Ugh — lots of annoying problems, caused not because we don’t have enough flexibility, but because we have too much. I don't think this is quite right. The problem isn't weird characters in filenames, it's that the system
680.
by zrm 8y ago
> The first part just seems like a forced MITM situation whilst the second makes some sense - in a cyber warfare scenario; however, that runs under the assumption that the DNS servers and/or entries didn't get poisoned before
681.
by zrm 8y ago
Template metaprogramming, variadic templates, integers as template parameters, etc. Even better would be constexpr user types as template parameters. How about a language that embraces Turing-complete template metaprogramming as a thing to
682.
by zrm 8y ago
Moreover, it doesn't matter what it is based on, it matters what it is trying to displace. I am not really even criticizing Rust. Let it be what it is. Python isn't C++ either. All I'm saying is that if the goal is to increas
683.
by zrm 8y ago
That's the compatibility-breaking part. Doesn't mean the replacement function or object can't have the same name, purpose, time complexity, etc. You could potentially even continue to support the existing ones but regard them
684.
by zrm 8y ago
> Let's just collectively admit it, finally - you can't write safe C++ in a codebase this complex. And so, as they say, we should all be using Rust. But allow me to explain why I don't yet. Rust has one really outstanding
685.
by zrm 8y ago
There are constructions that provide forward secrecy when both the client and server follow them. This is what TLS aims to provide. If the server doesn't faithfully implement the protocol, of course it will not provide the expected sec
686.
by zrm 8y ago
> The trick is, how do you leverage, or get around, network effects without destroying the community? Federation. Give the network effect to everybody even though each community is independently operated.
687.
by zrm 8y ago
> If a TLS 1.3 client will happily connect to an ETS server that isn't playing by the rules, doesn't that indicate a flaw in 1.3? There is a way to detect this. Record the last ephemeral public key that server used with you. If
688.
by zrm 8y ago
> How would a TLS-using protocol be used as a DDoS amplification vector? Turning off UDP DNS would break everything that still uses it but adding the DNSSEC records makes the UDP responses a DDoS amplification vector even if some clients
689.
by zrm 8y ago
> This behaviour doesn't break under DNSSEC; the blackholed domain either blackholes or the resolver fails due to the bad signature and effectively blackholes as well. If you give an address that always sends back ICMP unreachable m
690.
by zrm 8y ago
> DNSSEC would detect this failure mode. So would DNSCurve. If the root servers were using DNSCurve then you would distribute their public keys in the same way that you distribute their IP addresses, over some secure side channel such as

More ›