F30

11 ms·

1.
by F30 5mo ago
In the past, things like this used to be done for signing certificate rollovers.
2.
Why Scanners Fail in Practice: Lessons from the Shai-Hulud Attacks on NPM(codecentric.de)
1 points by F30 9mo ago|0 comments
3.
by F30 2y ago
"CCC researchers had live access to 2nd factor SMS of more than 200 affected companies - served conveniently by IdentifyMobile who logged this sensitive data online without access control."
4.
Second factor SMS: Worse than its reputation(ccc.de)
347 points by F30 2y ago|313 comments
5.
by F30 3y ago
Not sure about the exact numbers, but your sentiment is basically accurate. This is an article about the Northvolt news by a German journalist specialized on battery technology (in German): https://www.golem.de/news/akk
6.
by F30 3y ago
In this particular case I read the statement as a dig at maps.me (the app they forked from). On iOS, maps.me would always continue accessing my location in the background unless force-quit, even if nothing was actually happening in the back
7.
by F30 3y ago
There was a nice explanation here: https://twitter.com/jessiechar/status/1634361684960870400
8.
by F30 4y ago
Ohai, who should deploy what via Constellation? :)
9.
by F30 4y ago
Never heard of Robinlook in southern Germany. I would have said the other large chain besides Fielmann is Apollo (known as Pearle in another European countries).
10.
by F30 4y ago
They’re still one of the major suppliers of car manufacturers for navigation software embedded in infotainment systems.
11.
by F30 4y ago
> Masks primary role is to ensure you don't spread COVID, not that you don't contract it. Not true for FFP2s, N95s, and the likes. Which are more common in Germany than in most other places.
12.
by F30 4y ago
Currently, not really for most events. Big concerts, trade shows, sports games, etc. are happening without any restrictions. Moving into winter, the general situation can change and many people are expecting more strict regulations. And the
13.
by F30 4y ago
37C3 is its 37th edition, which is now going to take place in a later year.
14.
by F30 5y ago
How many (online) meetings do you (and the others) typically have? How do you manage the resulting conflicts around quietness, background noise, or even confidentiality of meeting contents? While I like the idea of shared co-working, the re
15.
by F30 5y ago
Leaving aside variants, the end game is for the virus to become endemic and everybody to encounter it every few months or years. But you cannot do that while the non-immune part of the population is large enough to overwhelm the healthcare
16.
by F30 5y ago
Other parts of the immune system, specifically T-cell response. The simplified bottom line is that antibodies provide a quick response that also prevents many cases of mild disease. T-cell immunity lasts longer, appears more universal again
17.
by F30 5y ago
It's a matter of antibody levels. Antibody binding is worse for Omicron, so you need more of them. Booster shots provide you with such increased antibody levels. Are they still gonna be high enough after a few months? Good question. Af
18.
by F30 5y ago
It seems that (at least the new) ITA Matrix Search can do that as well: Once you select an airport (or city) as origin or destination, it gets added to a list of possible locations. Being used to Kayak‘s comma syntax, I did not find this in
19.
by F30 5y ago
You could do that I suppose, but at the end of the day it means you'll end up with 4 different certificate chains. In TLS, typically only one chain gets delivered. Anything else would be bloat and probably not well-supported by clients
20.
by F30 7y ago
Laws maybe, though these are set at the EU level (and one might argue about the greatness of GDPR). Still, the rest of the EU (or at least Germany) is quite unhappy with the enforcement of these laws in Ireland. It is absurd that the Irish
21.
by F30 7y ago
Panic's experiences on iOS have been somewhat unsatisfying: https://panic.com/blog/the-future-of-transmit-ios/ It seems that (at least up to January 2018) the market for (relatively expensive) pro apps on iPa
22.
by F30 7y ago
It is certainly doable, but I doubt that most people have IaC which is complete, reproducible and tested enough. And the data migration from the breached host still means some risk.
23.
by F30 7y ago
I am highly skeptical when people taking about "rebuilding [the whole] infrastructure" in a few hours. Even more so when restoring all data from breached systems and before a thorough incident analysis. Show me the org which can j
24.
by F30 7y ago
The (presumed) attacker opened a bunch of issues in Matrix' GitHub issue tracker, explaining the security issues leading to this compromise: https://github.com/matrix-org/matrix.org/issues/created_by&#x2F
25.
by F30 8y ago
Not under anti-trust law (German "Kartellrecht"), where market concentration and competition are primary factors.
26.
by F30 8y ago
Yes, presumably to run the build as a user which is as unprivileged as possible. Which is a reasonable idea, though it might seem paranoid in today's `curl | sudo sh` world.
27.
Starting Up Security(scrty.io)
1 points by F30 8y ago|0 comments
28.
by F30 8y ago
The actual calculator in action, for a developer role: https://about.gitlab.com/roles/engineering/developer/ I have some trouble following their rent index by region approach, described in some more detail he
29.
GitLab’s Global Compensation Calculator: The Next Iteration(about.gitlab.com)
3 points by F30 8y ago|1 comments
30.
by F30 9y ago
Maybe, but then the library would have to support those. This isn't as much about the concrete technology as it is about the willingness to implement any host-key checking.

More ›