ademarre

8 ms·

1.
by ademarre 2mo ago
This reminds me of "Why So Many Control Rooms Were Seafoam Green" : [0] https://bethmathews.substack.com/p/why-so-many-control-rooms... [1] https://news.ycombinator.com/item?id=47518960
2.
by ademarre 9mo ago
I am all for using proper typographic symbols, but it is unclear what place the precomposed ellipsis U+2026—what I assume you mean by “true ellipsis”—has in that canon, especially with the compressed form it takes in most fonts.
3.
by ademarre 10mo ago
Only if they are able to block the siteverify check performed by our backend server. That's not the kind of attack we are trying to mitigate with Turnstile.
4.
by ademarre 10mo ago
I integrated Turnstile with a fail-open strategy that proved itself today. Basically, if the Turnstile JS fails to load in the browser (or in a few specific frontend error conditions), we allow the user to submit the web form with a dummy c
5.
by ademarre 1y ago
Gandi was sold to a private equity firm in a leveraged buyout in 2019 [0,1]. Nothing good has happened with Gandi since. [0] https://www.crunchbase.com/acquisition/montefiore-investment... [1] https://news.g
6.
by ademarre 2y ago
ISPs aren't helping either. Ziply Fiber only provides IPv6 with their 10 Gig and up plans, starting at $300/month.
7.
by ademarre 2y ago
Neutraface has some similarities, including the low crossbar height. Fittingly, it appears to be used in materials published by the Frank Lloyd Wright Foundation.
8.
by ademarre 2y ago
The lettering on the proposal is very interesting. I assume it was hand drawn. I can't find any typeface quite like it. Google Lens suggested it is similar to Copperplate Gothic, which it is and at once is not even close.
9.
by ademarre 3y ago
This would be a better link; the blog post on which the Bleeping Computer article is primarily based. They refer to it but never link to it: https://www.cloudsek.com/blog/compromising-google-accounts-m...
10.
How to Read an RFC (2018)(ietf.org)
100 points by ademarre 3y ago|6 comments
11.
by ademarre 3y ago
> it would be highly likely that multiple systems around the world would generate the same number. "Highly likely"? No. You are ignoring probability. See UUIDv4, which does not use time or NIC/MAC but does use 122 random
12.
by ademarre 3y ago
Shazam-like fingerprinting for text. The complete LLM outputs wouldn't need to be stored, just the fingerprints along with some mechanism for trusted timestamping (could be Blockchain).
13.
by ademarre 4y ago
> I let it expire for a few days, now they are charging me $100/year! It sounds like your domain name entered the redemption period. The high fee to restore a domain in the redemption period is mandated by the registry, not the re
14.
by ademarre 4y ago
Speaking of billing, are there any good resources or examples for an engineer who gets thrown into this domain?
15.
by ademarre 4y ago
Those are good words to use. That's how people should think of these redirects and use them, as long as you are careful to use explicit cache directives.
16.
by ademarre 4y ago
There seems to be some FUD going on here. The solution to the OP problem is simply to use 301 redirects with Cache-Control headers to limit caching to some reasonably short duration. It is true that browsers will cache 301 redirects eternal
17.
by ademarre 4y ago
No. That is not how it works. https://docs.python.org/3/library/pickle.html https://blog.nelhage.com/2011/03/exploiting-pickle/ (referenced from https://cwe.mitre.org&#x2
18.
by ademarre 4y ago
That quote supports my statement. Notice that the serialized object is the thing that was constructed by the attacker, not some user data that you serialized yourself.
19.
by ademarre 4y ago
> If you pickle data from an untrusted source . . . and then later unpickle it That is not exactly right. The risk is when you unpickle data that was pickled by someone else or that was tampered with after you pickled it.
20.
by ademarre 4y ago
From the post: > "As set forth in the Dodd-Frank Act, the SEC protects the confidentiality of whistleblowers and does not disclose any information that could reveal a whistleblower’s identity."
21.
by ademarre 4y ago
As IMcD23 commented, the real link is here: https://arstechnica.com/tech-policy/2022/04/isps-cant-find-a... It would be nice if the mods/dang would update the link.
22.
by ademarre 4y ago
Google search used to use rel=prev/next to identify paginated sequences for indexing, but not anymore. https://twitter.com/JohnMu/status/1108717486424363009 As of 2019, Bing was looking at those links for URL
23.
by ademarre 5y ago
One of my neighbors has a bright light on a garage behind their house. It shines directly onto my backyard and I see it as light pollution. It is a nuisance for sky watching with my telescope.
24.
by ademarre 5y ago
Paying for standards is acceptable in a context where you are given a requirement to conform to some industry standard. But that is rarely how it works in software and networking. Instead of being told what specific standards are needed, of
25.
by ademarre 5y ago
> software-related standards. We are an industry in which there are lots of independent contractors and self-employed people and small businesses, it is easy to be self-taught Consider also the pace of innovation in software and networ
26.
by ademarre 5y ago
There are very many things I never would have discovered and learned if IETF RFCs were not free. The most useful knowledge I've acquired about building things on the internet came from there. Industries that are more reliant on ISO or
27.
by ademarre 5y ago
I think he could have saved even more space in his final pass by uppercasing the business names: HTTPS://S.NSW.GOV.AU/C/121321/Test+NSW+Government+QR+code (binary mode) HTTPS://S.NSW.GOV.AU/C/121
28.
by ademarre 5y ago
Earlier this year people were setting false video metadata to bypass TikTok's duration limit and upload very long videos.
29.
by ademarre 5y ago
https://tools.ietf.org/html/rfc8265
30.
by ademarre 5y ago
> biometric government IDs Yeah. An important, long-lived ID that will stick with an individual for their entire life, and that they may want to commit to memory. That seems like a good time to take a hypersensitive approach and adopt

More ›