Flocular

9 ms·

1.
by Flocular 4y ago
For cryptography it uses the ring-library which still relies on C-Code in many places. Additionally there is no API-stability (still v0.*) and the last official audit was 3 years ago. The project has potential but isn't quite ready for
2.
by Flocular 4y ago
openSSL 1.1.1 is EOL 2023-09-11 which is likely to be the bigger problem for random-distro-XYZ
3.
by Flocular 4y ago
Why put the commit message there then? You could just use a git-client that adds this text as description for commits. There is generally little use to store automatically generated content in databases, the input for generation should be e
4.
by Flocular 4y ago
Attack complexity High (chance for an attacker to get anything at all is very low), Availability None (you're not crashing any service that's running in the background) and Confidentiality Low (data leaked is not in the attackers
5.
by Flocular 4y ago
Come on :D CVSS of 7.1, Complexity Low, Availability and Confidentiality High. sure...
6.
by Flocular 4y ago
This made me look up jpeg2000 support. And then that made me sad :D
7.
by Flocular 4y ago
Mentioning Greenland ice sheet in this context is always a bit of a red herring. It is important to note that in the language of these simulations no "overshoot" is included in the temperature trajectory. A 1.5°C global warming is
8.
by Flocular 4y ago
No, the original plot was in MWh. But even for LCOE wikipedia (citing lazard) shows the same 3xfactor between solar/wind and nuclear: https://en.wikipedia.org/wiki/Levelized_cost_of_electricity
9.
by Flocular 4y ago
Democracy dies in darkness.
10.
by Flocular 4y ago
"when there's clouds and the wind doesn't blow, what happens?" Meteorologically speaking that won't happen over a large enough area like Europe or USA. When there's clouds there's always wind close by. It&
11.
by Flocular 4y ago
That is just to show that nuclear isn't a magical always-on power source that some of the pro-nuclear folks make it out to be. Also: we can install twice the capacity in MW for solar and still have money left over to put into a smarter
12.
by Flocular 4y ago
A good estimate to gauge the societal investment needed to generate electricity in a certain way, is to look at its total cost in dollar/MWh. Wikipedia has a nice graphic prepared for just that: https://en.wikipedia.org&#x2F
13.
by Flocular 4y ago
Sentences that apparently mark cognitive distortion: "The quality of our product is not acceptable yet.", "I won't go to this meeting, because I feel nauseous.", "Children should go to school." I can&#x27
14.
by Flocular 4y ago
I think this is trying to solve delivery inside cities. However, I don't see cities beeing clogged by parcel delivery services. Transportation of goods is more problematic on the inter-city level. But that's too far to build a tun
15.
by Flocular 4y ago
Sadly it's missing a native TCP-reassambly. Was caught by suprise by that recently, but there's always pyshark
16.
by Flocular 4y ago
DFDL ("Daffodil") https://en.wikipedia.org/wiki/Data_Format_Description_Langua... was made pretty much exactly for describing/parsing binary formats in a schema-like format. It is however based on XML an
17.
by Flocular 5y ago
Got announced 2 weeks ago https://web.archive.org/web/20220225082910/http://ars.userfr...
18.
by Flocular 5y ago
In-place conversion of NTFS? You either still believe in a god or need to google the price of harddrives these days. Honest question tho, why would anybody do in-place conversion of partitions?
19.
by Flocular 5y ago
It indeed doesn't cover data processed by "a natural person in the course of a purely personal or household activity" But arguably, as soon as you upload stuff to github.com you already fall outside of that narrow definition.
20.
by Flocular 5y ago
No, GDPR applies to everyone. The government is proactively only enforcing GDPR vs organizations, private persons need to sue to get GDPR enforcement against each other. Also - should companies use this list, their usage would of course nee
21.
by Flocular 5y ago
You would have to ask companies that you called how they shared & used your information. You probably can't reject to the data collection as it's based on legitimate interest (fraud detection) and not consent.
22.
by Flocular 5y ago
that could still be considered negligent, if it has a CVE and you're using it, you gotta know about it
23.
by Flocular 5y ago
>>You cannot make another computer do anything. You can only send messages, and the receiver decides how to act on those. By that logic malware doesn't exist. That's the wildest west version of the internet that we gladly le
24.
by Flocular 5y ago
By sharing data until public relations make change necessary https://www.theverge.com/2021/9/11/22668734/google-user-data...
25.
by Flocular 5y ago
Are you mitigating supply chain attacks otherwise? If yes, how?
26.
by Flocular 5y ago
I could see a govermental effort be approriate too. Alot of critical infrastructure is depending on open source too. Agencies like the German BSI should embrace and invest into open-source much more strongly.
27.
by Flocular 5y ago
At my current job I'm trying to establish the same. Have to say, the recent news are water on my mills!
28.
by Flocular 5y ago
Imagine they introduced something worse. Could any developer explain to a manager why you needed to import this package? "Why do we need colors there?", "Why can't we make that colored ourself?"
29.
by Flocular 5y ago
The BPF capability should really only be given to root. I don't think it really gives any new attack surface. All I could see is it giving black-hats an easier interface to "kernel-level-fuckery".
30.
by Flocular 5y ago
What fans of unsigned integers seem to really want is array access in the form of x[i %mod% LEN]. While signed integers "kind of" give you an error on overflow (Except your unlucky or somebody was malicious). Is there a way to com

More ›