Sae5waip

5 ms·

1.
by Sae5waip 12y ago
Or not.
2.
by Sae5waip 12y ago
0, in a suitable color space.
3.
by Sae5waip 12y ago
> If this is what EA is doing then they had better have a really good explanation. Or?
4.
by Sae5waip 12y ago
The problem with S/MIME is that it is strictly hierarchical. That already hasn't worked well for TLS. The aim of email encryption is in a large part to prevent government-level parties from reading the emails. It doesn't real
5.
by Sae5waip 12y ago
Here are some problems, from the top of my head, in no particular order: - Subjects can't be encrypted. - Encrypted mailing lists are complicated. Do you reencrypt in the middle? What software do you use? The mailing list man
6.
by Sae5waip 12y ago
As a German, I feel very much the same.
7.
by Sae5waip 12y ago
Because modern configuration management tools like Ansible (or Puppet, or Salt, or whatever) allow you to do more things more easily. Also, because Bash is a particularly horrible language. I have a lot of experience writing bash scripts, a
8.
by Sae5waip 12y ago
HN is a YC marketing tool, it pays for itself quite easily.
9.
by Sae5waip 12y ago
The article has nothing to do with Snowden. At all.
10.
by Sae5waip 12y ago
Yes, but it's easier to teach admins to never use "PermitRootLogin yes" "because it's bad for security" than to teach them to never use weak passwords.
11.
by Sae5waip 12y ago
Automated 0-day attack: fair point. Though direct remote code execution is probably much, much more likely than authentication bypass.
12.
by Sae5waip 12y ago
@Passwordless sudo: Because then you have effectively made your user root, and compromising your user account is enough to get root access immediately. If you do that, then why have a seperate user at all?[3] @Partitions: Seperating /h
13.
by Sae5waip 12y ago
tl;dr: "disallow root login entirely, everything else is bad" is cargo culting. I said "impractical", not "impossible". Of course I can use sudo. But it's more work. I require root access a lot. It adds up
14.
by Sae5waip 12y ago
Did you ever stop and think about this or are you just repeating something you read on "Hacker""news"? Getting by /without/ direct SSH root access is often impractical (think about scp), and without-password is
15.
by Sae5waip 12y ago
Because then root login would be disabled entirely. With "without-password" SSH-key based login is still possible (and no, that's not much of a security risk).
16.
by Sae5waip 12y ago
Electrically powered multicopters can carry DSLRs quite easily. If it's supposed to carry expensive equipment, you'll want to use a hexa- or octocopter though. Of course multicopter flight times, especially with payloads, are prob
17.
by Sae5waip 12y ago
Wikipedia is an encyclopedia, not a company index.
18.
by Sae5waip 12y ago
I don't. So is mine, but resizing it for each individual website is unnecessary work. And some websites have a legitimate need for a wider format, so you can't even say "all websites should be like this".
19.
by Sae5waip 12y ago
Anyone want to host their mission critical project with a team so small that individual employees have to be on call 24/7? If the company requires more than what can be done in a 40-hour work week, it should hire more employees.
20.
by Sae5waip 12y ago
That's precisely why you only use subkeys in daily life and only use the root key for keysigning (and ideally store it safely and offline).
21.
by Sae5waip 12y ago
That maybe nghst should take a step back from HN and consider that normal people may find the original 2048 fun and may not care about its variants at all. Giving an example is a perfectly valid way to make a point. Circumstantial doesn&#x2
22.
by Sae5waip 12y ago
It's you. Linux has followed a bi-monthly schedule for quite a while now. FYI: https://en.wikipedia.org/wiki/Linux_kernel#Maintenance
23.
by Sae5waip 12y ago
No, I don't. a) We (my country and the US) are allies . b) I may be less not ok with spying on high-ranking politicians. But any spying on companies and normal citizens is right out.
24.
by Sae5waip 12y ago
Unfortunately, I have a huge problem with a foreign country - the USA - spying on my country and me.
25.
by Sae5waip 12y ago
And only for domestic spying. People that aren't US citizens still get no protection at all.
26.
by Sae5waip 12y ago
> If you meet me in person and I say "I'm sgentle", that's a weaker proof than if I post a comment from this account. That's why (for PGP) you, as an assurer, generally don't upload the signature yourself bu
27.
by Sae5waip 13y ago
Seriously? a) You'd just write your take next to the link, instead of hiding it behind. Your example is far-fetched. b) This is obviously meant for ads. (And the examples on their landing page make that perfectly clear.) Quote: &quot
28.
by Sae5waip 13y ago
It can not be used with good intentions. There is never any advantage for the users who click on the links.
29.
by Sae5waip 13y ago
I'd like to add that "everyone else is doing it too" is commonly used by governments like the US to "excuse" their spying.
30.
by Sae5waip 13y ago
I've recently seen a presentation about attacks on a widely used system used in current cars. There are a couple of different ways that are significantly better than brute force (as in: works against real cars in seconds to a few minut

More ›