devman0

7 ms·

61.
by devman0 2y ago
In a properly working market, every consumer would pay their exact interchange fee and it would be printed on the receipt as a pass-through cost. This would actively drive interchange fees lower when consumers have to choose to pay 3% on an
62.
by devman0 3y ago
A stateful firewall is prerequisite for NAT implementations commonly deployed in most office and consumer settings due to the session tracking requirement. So you just stop doing the NAT part and the firewall continues to deny untracked ing
63.
by devman0 3y ago
You just made a great argument for why Non-Disclosure Agreements should and do exist. This conversation is about Non-Compete Agreements which are entirely separate.
64.
by devman0 3y ago
Scope and scale is important here, the amount of junk mail from business interests outside of my immediate region is not very high. If physical mail were free and you could send it from anywhere in the world, junk mail would be so much wors
65.
by devman0 3y ago
Seems like moving to something like DANE would be a good way forward. Seems like having the site owners tell the public what cert should be expected via DNS with appropriate signatures would obviate the need for CAs. (Yes I realize that thi
66.
by devman0 3y ago
Do browsers check the CAA records for a domain if they exist? Seems like that would solve the issue.
67.
by devman0 3y ago
I have to agree with the poster you are replying to. If an entity is not doing the bare minimum to QA software supply chain, then they are not "serious". That being said, I have seen many a large enterprise that do not treat softw
68.
by devman0 3y ago
Having worked in enterprise software, it has been my experience that the majority of in-house repos operate in a caching mode and not mirroring. The critical element is being able to build things in CI that are being PR'd/reviewed
69.
by devman0 3y ago
If they haven't really been, then NAT wouldn't be working either, that's the point I'm making. NAT requires connection tracking to function, because NAT is actually an extra step on top of a basic stateful firewall, and
70.
by devman0 3y ago
It isn't a big if, it is literally the same connection tracking stack except without the address and port mapping. If you take away the mapping the tracking doesn't go away. Inbound traffic still needs to match to to a session cre
71.
by devman0 3y ago
I think it's likely just to result in offshoring of site, which is a net negative, imo, for constructive regulation of these sites. I think the effort for age verification is going to turn back the clock on progress that has been made
72.
by devman0 3y ago
How do you verify someone's age anonymously? More practically, how do you do this in a framework that works globally?
73.
by devman0 3y ago
Not everything! I got https://shadow.goose.icu/?http://captive.apple.com/ to work!
74.
by devman0 3y ago
At the time Nexus was free to self host, and that is what many smaller teams did just that to archive known good packages for the CI pipeline, I'm not in the Java space anymore so I don't know if that's still the case.
75.
by devman0 3y ago
This was a big annoyance for me back in the day when I was dealing with XML namespaces. URLs never made sense for that use case and too many tools tried to pull XSDs from the literal URL which was always generally out of date, some projects
76.
by devman0 3y ago
Slight difference is that it wouldn't break existing builds if you changed namespaces in Java. The maven central repo does not allow packages to be rescinded once they are published. So that old version of package xyz will still resolv
77.
by devman0 3y ago
The left pad issue was kind of wild coming from the enterprise Java space. Supply chain attacks against open source software were already being taken pretty seriously, my last company had it's own Maven repository manager running that
78.
by devman0 3y ago
I guess it depends on how you are defining "costs" in the question. Costs due to regulatory/legal requirements are a huge part of why these projects are expensive in addition to actual track, trainsets, civil engineering, etc
79.
by devman0 3y ago
Per FIPS 186-5 and SP 800-186, Ed25519 looks like its going to be in next revision of FIPS 140 which will be nice for those who have to stay aligned with FIPS. Hoping that X25519 will come in for KEX as well, but I'm not holding my bre
80.
by devman0 3y ago
This isn't really specific to NAT either, connection tracking is required for most firewalls as well even if NAT isn't in play just to implement the most basic ALLOW related,estabalished rule even, and especially, what would norma
81.
by devman0 3y ago
This is why you see a community of pure Java RDBMSs (Hypersonic, H2, Derby, etc), if you don't need the big iron scale it's easier to ship/use the database or even embed it in memory if needed.
82.
by devman0 3y ago
Compelled speech has lots of examples from warning labels, disclosures, truth in advertising, etc. What you should be asking is their precedent for compelled false speech, which is a much more interesting and difficult to answer.
83.
by devman0 3y ago
Relying on MSS to not break layer 3 is going to be interesting when QUIC is more prevalent. PMTUD should be better supported.
84.
by devman0 3y ago
Not a player of it myself, but Path of Exile was pretty popular with my Diablo liking friends during the in between years of Diablo releases.
85.
by devman0 3y ago
The ability to import a SimCity 2000 map in to SimCopter was amazing for the time, imo. I remember flying around cities I had worked really hard on thinking how the cross over between the two games was really cool.
86.
by devman0 3y ago
You can use PIN for Passkey instead of Fingerprints
87.
by devman0 3y ago
That is somewhat fixed by Comparable, but the fact that HashMap doesn't have a pluggable Hash override always bothered me.
88.
by devman0 3y ago
Has Mosh crypto been reviewed? Last I checked they were using some custom crypto on top of UDP instead of using something like DTLS or QUIC. Given SSH is one of the most battle tested protocols out there I am wary of replacing it with somet
89.
by devman0 3y ago
To be clear, I was referring to one federated identity that everyone would accept, as it stands there isn't a single, federated identity provider that Apple, Facebook, Google, Microsoft, Amazon, Bank of America, my power company, etc a
90.
by devman0 3y ago
This would be less annoying if we could get actual federated identity that big players would actually accept, as it stands having to fetch a key from a safe deposit box every time I register a new account is a huge amount of friction.

More ›