johnp_

8 ms·

1.
by johnp_ 2y ago
> URL-safe-base64 And make sure to specify what exactly you mean by that. base64url-encoding is incompatible with base64+urlencoding in ~3% of cases, which is easily missed during development, but will surely happen in production.
2.
by johnp_ 2y ago
Looks like Mozilla is currently working on implementing `sendmmsg` and `recvmmsg` use in neqo (Mozilla's QUIC implementation) [1]. [1] https://github.com/mozilla/neqo/issues/1693
3.
by johnp_ 2y ago
Here's the code, for those interested in finding the bug: https://github.com/mozilla-mobile/firefox-ios/tree/main/Brow...
4.
by johnp_ 2y ago
It says in the article > Seabed 2030 is a long-term mapping project attempting to fully chart the seafloor and reveal all features 100 meters or larger by 2030. There is an area of interest, "Area 3: Indian Ocean: Ninetyeast Ridge&q
5.
by johnp_ 2y ago
Oh, indeed, that's quite surprising. A TLSv1.3 Client Hello always contains the supported_versions extension, which should allow wireshark to label it correctly, regardless of whether or not the handshake actually finishes. Though, tbf
6.
by johnp_ 2y ago
Certainly weird that wireshark shows TLSv1 while curl shows TLSv1.3. That shouldn't happen unless something interfered with the Client Hello. (or the wireshark version is outdated)
7.
by johnp_ 3y ago
linux-firmware does not carry any microcode update for Renoir (yet). Or what do you mean by "TFA"? The fixed Renoir microcode should have revision >= 0x0860010b as per the kernel: https://github.com/torvalds&#x2
8.
by johnp_ 6y ago
> and if Do you mean the obvious `sudo snap set system refresh.hold="$(date --date=+100years +%Y-%m-%dT%H:%M:%S%:z)"`? (no error) edit: Ah, that silently stops working after 60 days, nvm.
9.
by johnp_ 6y ago
That's why there's OCSP stapling and OCSP must staple. Ever seen an nginx server fail HTTPS connection exactly once after rotating the certificate? That's nginx lazily fetching the OCSP response from upstream for stapling pur
10.
by johnp_ 6y ago
Here's the spec: https://html.spec.whatwg.org/multipage/input.html#attr-input... > Authors are encouraged to specify both any MIME types and any corresponding extensions when looking for data in a specific form
11.
by johnp_ 7y ago
Besides all the points other people already made, the money saved by being able to switch to deploying the Starlink constellation via SuperHeavy/Starship (very likely to be cheaper in $ per satellite-to-orbit) instead of F9 earlier mak
12.
by johnp_ 7y ago
It even seems to break inline links, like in the "split-horizon" section: > System administrators can find relevant documentation here. I'm pretty sure "here" should be a link, but of course that doesn't wor
13.
by johnp_ 7y ago
fd -e py Also neatly bypasses the glob issue.
14.
by johnp_ 7y ago
You could try inputting your name as [Latin Small Letter E][Combining Acute Accent]: e◌́ => é Which should keep the `e` intact, while the combining acute accent (0xCC 0x81) may "only" get converted to a `Ì` which may be stripp
15.
by johnp_ 7y ago
Likely `dom.event.clipboardevents.enabled`: https://developer.mozilla.org/en-US/docs/Mozilla/Preferences... If someone else is in the habit of randomly selecting text and they're using linux, they may wa
16.
by johnp_ 7y ago
As long as `chrome://global/content/config.xul` still exists, you can use it. I certainly do, since the new interface is horrible and Mozilla constantly dismisses the obvious usability issues.
17.
by johnp_ 7y ago
Sadly it doesn't work in Firefox after setting `privacy.resistFingerprinting` and Mozilla refuses to allow an override :(
18.
by johnp_ 7y ago
Possibly also the IPv6 ULAs: https://en.wikipedia.org/wiki/Unique_local_address Not sure if those can be expressed in uMatrix as a prefix rule.
19.
by johnp_ 7y ago
`privacy.resistFingerprinting.letterboxing` is currently a separate setting since it's still rough around the edges. Not sure if it works on Release, I have it set on Nightly.
20.
by johnp_ 7y ago
It seems Mozilla is in the process[0] of moving the signature scheme to COSE, which allows timestamping[1]. A code comment[2] says that the current package format doesn't allow it. [0] https://bugzilla.mozilla.org/show_
21.
by johnp_ 7y ago
The video is gone (censored?), does someone have a backup copy?
22.
by johnp_ 7y ago
> more security around the data that is used for fingerprinting, such as [...] screen size, window size Available in Nightly under a hidden boolean preference `privacy.resistFingerprinting.letterboxing`.
23.
by johnp_ 8y ago
~~No, really. He's talking about the earths surface, the xkcd is about the earths volume.~~ Ok, the xkcd is about nanobots with a volume of "a few cubic microns"[1], whereas atoms are much smaller. [1] https://www.
24.
by johnp_ 8y ago
If you want to test this in Firefox you can set these prefs: security.insecure_connection_icon.enabled security.insecure_connection_text.enabled
25.
by johnp_ 8y ago
How about osd-level=0 with no-osc? In my (quick) testing this works.
26.
by johnp_ 8y ago
> Women who asked obtained a raise 15% of the time, while men obtained a pay increase 20% of the time. > Asking does not mean getting — at least if you are a female. Rather: Asking does not mean getting, more so for women than for men
27.
by johnp_ 8y ago
Implicit TLS is already favored for Email submission and access per RFC8314: https://tools.ietf.org/html/rfc8314 The problem is partly because we don't have an assigned port for MTA2MTA implicit TLS. Otoh DANE als
28.
by johnp_ 8y ago
Proceed seems to be the wrong verb here, as that dialog looks like it appeared after clicking a cancel button, and if I don't want to cancel I "return" to the previous screen where my data still is and don't "procee
29.
by johnp_ 8y ago
It is supported by AMD, the OEMs just have to support it on the motherboard site too: https://forums.anandtech.com/threads/amd-ama-starts-at-12pm-...
30.
by johnp_ 8y ago
All Raven Ridge processors have ECC support[1], but it additionally requires motherboard support. Would be great if some laptop manufacturer would undercut prices of current ECC laptops by >1k$ by pairing Raven Ridge with ECC or we get a

More ›