hiciu

5 ms·

1.
by hiciu 3mo ago
FWIW, for me docker compose works just fine with podman. I am not sure what kind of additional configuration is needed these days, make sure you are running podman with the socket thing and perhaps set DOCKER_HOST. It's just a client &
2.
by hiciu 5mo ago
Whats your source for the database sharing claim? The way I understand it is more like tls certs, with each country managing their own root cert.
3.
by hiciu 5mo ago
I'm not affiliated with the project, just curious. So there's demo app in the eu-digital-identity-wallet/av-app-android-wallet-ui github repo, I believe this is what's being tested. This is obviously not an app for an en
4.
by hiciu 6mo ago
> just put Excel inside Winboat or something, but they won't have it Just curious, is it about different tools / workflow / the new thing to learn (and those are valid reasons!) or are there some technical issues with for
5.
by hiciu 6mo ago
Besides main issue here, and the owners account being possibly compromised as well, there's like 170+ low quality spam comments in there. I would expect better spam detection system from GitHub. This is hardly acceptable.
6.
by hiciu 7mo ago
That's true, but it never really was your system, right? It's government issued app on a government approved device.
7.
by hiciu 7mo ago
I totally agree that one of the biggest vulnerabilities in EU digital ID scheme are US corporations :).
8.
by hiciu 7mo ago
> someone can set up a token-as-a-service to sell tokens on the black market They can! Singing requires either PIN or finger on the fingerprint, and signed "proof" is valid for like 60 seconds. This whole end-to-end attestation
9.
by hiciu 7mo ago
It is literally TLS in a trench coat with some json sprinkled on top. Where I think we are not in agreement the question of "who to trust" and "for what purposes". Are you going to trust me when I tell you that I'm
10.
by hiciu 7mo ago
Yes, something in the document is tied to my ID. There's my name in there for example :). I don't have to share that information, because what government signed is a uniquely salted hash of my name and passed the salt to me. If I
11.
by hiciu 7mo ago
That's where the google play integrity / attestation comes into the effect. In theory you cannot export your private key from the device (from the secure element), so for each $2 someone would have to quickly unlock their phone, s
12.
by hiciu 7mo ago
Yes we are still talking about attestation from the government for the specific privilege part. You get your document with fields like "can drive", "is over 18" and so on. It's valid for some time; physical ID is va
13.
by hiciu 7mo ago
there is no "route the request through the government system every time you use your ID". you get your sd-jwt document signed once and you reuse it for like 30 days or so.
14.
by hiciu 7mo ago
> issue your own tokens I mean, you can. It's like with TLS certificates. The standard is there. The code is there. You can issue your own. The question is, who will trust you?
15.
by hiciu 7mo ago
> A true zero knowledge ID check with blind signatures That is not true and "true zero knowledge ID check" + "age verification" with blind signatures is what's being implemented by the EU ID project. So someone&#
16.
by hiciu 7mo ago
> EU's planned system requires highly invasive age verification EUDI wallets are connected to your government issued ID. There is no "highly invasive age verification". We are literally sending a request to our government&
17.
by hiciu 8mo ago
OK so those processes are launched not by systemd, but by dbus itself. There's probably a /usr/share/dbus-1/services/org.freedesktop.IBus.service file in your system and if dbus sees something that tries to tal
18.
by hiciu 8mo ago
"let's allow any user process to modify my binaries" is not something to be proud of...
19.
by hiciu 8mo ago
Could you please expand bit more about those processes that systemd spawns without units? Cgroups in Linux kernel, and systemd-cgls tool should let you trace every process to a source
20.
by hiciu 8mo ago
this is exactly how gemini synthid works and how you are supposed to use it https://support.google.com/gemini/answer/16722517
21.
by hiciu 1y ago
Wow. Can you tell a Korean person from Chinese person? Polish name from a Czech one? Different cultures, different languages, it's obvious to the locals.
22.
by hiciu 1y ago
It's PHP. Handling numbers in PHP is complicated enough that a reasonable person would not trust it by default. https://www.php.net/manual/en/language.types.numeric-strings...
23.
by hiciu 1y ago
It looks the same, but for some reason Claude Code is much more capable. Codex got lost in my source code and hallucinated bunch of stuff, Claude on the same task just went to town, burned money and delivered. Of course, this is only my exp
24.
by hiciu 1y ago
Manjaro users used to come to the Arch forums for support. In one case user came with some kind of a kernel issue and when we started to debug it someone noticed that the kernel version they were using was not in the core or testing repos a
25.
by hiciu 1y ago
> You have to guarantee that after reboot you rollback any partial package operations. In both scenarios, yes. This is what dpkg database is for, it keeps info about state of each package: whatever is it installed, unpacked, configured a
26.
by hiciu 1y ago
I would like to introduce you to a few case studies on bugzilla: https://wiki.debian.org/Teams/Dpkg/FAQ#Q:_Why_is_dpkg_so_slo...
27.
by hiciu 1y ago
> Wouldn't that just be the same problem? Not the same problem, it's half-written file vs half of the files in older version. > Which actually solves both problems. it does not and you would have to guarantee that multiple r
28.
by hiciu 1y ago
this is actually an interesting topic and it turns out kernel never made any promises about close() and data being on the disk :) and about kernel-level crashes: yes, but you see, dpkg creates a new file on the disk, makes sure it is writte
29.
by hiciu 2y ago
The double empathy problem explains why it may not be a deficiency, just a "different brain language" between ND and NT people. Basically, from autistic perspective, it's the non autistic people who have deficiencies in commu
30.
by hiciu 2y ago
So I'll bite: the apt thing: author should make himself familiar with https://www.debian.org/doc/manuals/debian-faq/pkg-basics.en.... and --no-install-recommends option. The "debian way" of dea

More ›