janosdebugs

7 ms·

1.
by janosdebugs 2y ago
Yeah, like the shares being transfered under duress. It's not like that can't be undone. The only thing this would achieve is a bunch of prison time and possibly destruction if data. Not to mention that modern-day IT systems are s
2.
by janosdebugs 2y ago
This seems awfully complicated. A lot of applications will happily respect system proxy settings and connect to mitmproxy directly.
3.
by janosdebugs 2y ago
Content gating behind login screens. Scraping content behind a login screen could constitute a contract violation and would give rise to a lawsuit independent of copyright.
4.
by janosdebugs 2y ago
After reading the specs, this sounds like an awful lot of complexity for something that should be simple and low cost. The spec also seems to be very loosely defined, more like a recommendation than a spec. This means you'll likely hav
5.
by janosdebugs 2y ago
Legitimate interest still requires the data subject to be informed under Art 13. Not sure how that would be accomplished without at least an info banner. (This goes for server logs too.)
6.
by janosdebugs 2y ago
Unreal Engine and Steam Audio may be worth looking into before you invest significant amounts of time into this.
7.
by janosdebugs 2y ago
Name recognition? You know exactly what you get, which isn't necessarily true for the bajilion clones out there. You know that if you buy an rPi, you can buy a replacement tomorrow and it will work the same. In a world where I can&#x27
8.
by janosdebugs 2y ago
There are very legit reasons to use passwords, for example in conjunction with a second factor. Authentication methods can also be chained.
9.
by janosdebugs 2y ago
As far as OpenSSH is concerned, I believe the main problem is that there is no centralized revocation functionality. You have to distribute your revocation lists via an external mechanism and ensure that all your servers are up to date. The
10.
by janosdebugs 2y ago
Not necessarily. There is a fork of OpenSSH that supports x509, but I remember reading somewhere that it's too complex and that's why it doesn't make it into mainline.
11.
by janosdebugs 2y ago
As I said, "should". In some places there will be enough people in the chain that won't be bothered to go to the LIR directly. Think small rural ISPs in small countries.
12.
by janosdebugs 2y ago
The provider doesn't care, the owner of the server who needs to log in from their home internet at 2AM in an emergency cares. Bad actors have access to botnets, the server admin doesn't.
13.
by janosdebugs 2y ago
Use TOTP (keyboard-interactive) and password away!
14.
by janosdebugs 2y ago
I saw a Postgres story like this one. Badly managed AWS org with way too wide permissions, a data scientist sort of person set it up and promptly reconfigured the security group to be open to the entire internet because they needed to acces
15.
by janosdebugs 2y ago
That may be true mathematically, but there are no guarantees that a small provider won't end up having only a single /64, which would likely be the default unit of range-based blocking. Yes, it "shouldn't" happen.
16.
by janosdebugs 2y ago
The hard part is making sure every one of your servers got the CRL update. Since last I checked OpenSSH doesn't have a mechanism to remotely check CRLs (like OCSP), nor does SSH have anything akin to OCSP stapling, it's a little b
17.
by janosdebugs 2y ago
There is nothing wrong with this approach if enabled as an informed decision. It's the part where they want to enable this by default I have a problem with. Things that could be done is making password auth harder to configure to encou
18.
by janosdebugs 2y ago
IPv6 has the potential to be even worse. You could be knocking an entire provider offline. At any rate, this behavior should not become default.
19.
by janosdebugs 2y ago
You can use SSH certificate authorities (not x509) with OpenSSH to authorize a new key without needing to deploy a new key on the server. Also, Yubikeys are useful for this.
20.
by janosdebugs 2y ago
Having written an SSH server that is used in a few larger places, I find the perspective of enabling these features on a per-address basis by default in the future troubling. First, with IPv4 this will have the potential to increasingly pen
21.
by janosdebugs 2y ago
It's for making game sounds. Fairlight looks like it could work though, thanks!
22.
by janosdebugs 2y ago
The deal fell through: https://www.theverge.com/2023/12/18/24005996/adobe-figma-acq...
23.
by janosdebugs 2y ago
NDAs are not the only problem. Adobe Acrobat is used to work on a whole host of documents that may be straight up illegal to share.
24.
by janosdebugs 2y ago
Does anyone have a reasonably feature complete alternative for Audition? I tried several paid and free ones, none seem to make it easy to work with multitrack audio in a non-destructive fashion.
25.
by janosdebugs 2y ago
Last I checked you are allowed to store CC info apart from the security code if you follow the PCI-DSS rules.
26.
by janosdebugs 2y ago
I had to switch back to X11 because both nVidia and nouveau would produce around 5 fps on my A2000 RTX on multiple distros. This is just for basic usage, not even painting-related.
27.
by janosdebugs 2y ago
Some very large entities have become quite open about them only wanting to take but contribute nothing back in the open source and adjecent spaces. While working on one of my former projects I also received requests for several hundred hour
28.
by janosdebugs 2y ago
I'm guessing it's relativity doing its job.
29.
by janosdebugs 2y ago
I'm confused. Why would they be forced to? Also, there's way more than copyright that covers this: trademarks, patents and trade secrets also play into it.
30.
by janosdebugs 2y ago
No, ever since PSD2 came into effect, banks here refuse to do SMS-based verification and have switched to apps. They also don't support hardware authenticators for consumers. I asked.

More ›