lmns

8 ms·

1.
by lmns 4y ago
>When an attacker gains a foothold in a corporate environment, they will immediately try to find any accessible credentials to assist in lateral movement. So you think this isn't the case with home users? Maybe I still misunderstand
2.
by lmns 4y ago
Have you tried a different USB-A charger? Some smaller devices have problems with USB-C to USB-C. I don't know why this is the case, though. It's just something I have observed with different devices.
3.
by lmns 4y ago
What are "absurd" amounts of CPU and memory? Calculating and pinning dependencies is just a very difficult problem which happens to be reducible to SAT. If you think a SAT solver takes a lot of time and memory, then all alternativ
4.
by lmns 4y ago
I use pip-tools with venvs for that and can‘t complain. It pins dependencies and you can create different requirements.txts for local dev and production (production for me is usually dev minus some debugging tools). It‘s not particularly fa
5.
by lmns 4y ago
Threema's protocol doesn't even implement forward secrecy. From a security standpoint Threema is closer to iMessage than to Signal or other Signal-protocol-based messengers.
6.
by lmns 4y ago
My understanding is that containers actually can access nftables with CLONE_NEWUSER even without CAP_NET_ADMIN. EDIT: Apparently the Docker default capabilities don't allow CLONE_NEWUSER: https://opensource.com/business
7.
by lmns 4y ago
Are you implying that getting init script customisations overwritten by package managers isn't a problem with non-systemd init managers? I have lost track how often that happened with sysvinit, because the "logic" how to trea
8.
by lmns 5y ago
It is different. I can run a Debian VM with GUI applications on any recent x86 Chromebook. It's pre-installed and supported.
9.
by lmns 5y ago
802.11n with 5 GHz is okayish, but using 2.4 GHz can be brutal. It's not just the bandwidth, the whole frequency band is just bad. My latency regularly goes through the roof and voice calls are noticeably worse than with 5 GHz wifi. 80
10.
by lmns 5y ago
With that budget you won't find an always-on display. OLED panels are just too expensive.
11.
by lmns 5y ago
Try 'python3' or 'python2'.
12.
by lmns 5y ago
I think the appeal of the 13 mini is that it actually has all the interesting features of the bigger phones (minus 120 hz and ProRes), just in a smaller phone. I would agree that this is true for the SE, though, but it's also significa
13.
by lmns 5y ago
They could easily do it if they wanted to, now that they have more control over the SoC. With Chrome OS they already do it. Most devices that are released now will get 8 years of security updates, which are supplied by Google.
14.
by lmns 5y ago
A toothpick also works fine.
15.
by lmns 5y ago
The author forgot to add the "duckie" item in the list.
16.
by lmns 5y ago
I guess the installation via pip is only best effort in the sense that they can't support every platform that pip is able to run on. For example their dependency on the "cryptography" library might cause problems on platforms
17.
by lmns 5y ago
It's tricky, because most phones can't be flashed with an alternative aftermarket OS. I know that LineageOS etc. exist, but most phones don't have a stable build and a lot of SoCs will never work reliably with an aftermarket
18.
by lmns 5y ago
64 characters? Why would they do that?
19.
by lmns 5y ago
Modern low- to midrange phones certainly have more RAM and storage than your 2014 phone, which matters more than the raw benchmark scores.
20.
by lmns 5y ago
This has been a problem for a long time. I'm not sure why other distributions are better at this than Debian, but I think it has something to do with how Debian splits up software in much more packages than other distributions. Maybe i
21.
by lmns 5y ago
>Most desktops today only have a browser and some office application installed. The desktops I see on a daily basis don't have only a browser and office application installed. I'm not sure which phone or OS you are using, but a
22.
by lmns 5y ago
>Chances that the average user's phone is compromised is very high. How do you know? Android and iOS apps are much better sandboxed than desktop applications (which usually aren't really sandboxed at all). I would guess the cha
23.
by lmns 5y ago
I've never heard of a phone that does this.
24.
by lmns 5y ago
I know what you mean, but as soon as you have transitive dependencies it doesn't work at all. At that point you can't reproduce the same state of your venv at a later date because some minor version of a dependent package could ch
25.
by lmns 5y ago
I'm surprised that pip-tools isn't more popular. For the stuff I do with Python (small CLI tools, casual webdev) it's completely adequate. I can pin down my dependencies, upgrade to a new pinned state and sync my venvs with t
26.
by lmns 5y ago
How do you pin all of your dependencies to a specific version with just venv, pip and a requirements.txt? How do you upgrade them later?
27.
by lmns 5y ago
I don't know, that's what the developers say (last paragraph): https://pypi.org/project/psycopg2/
28.
by lmns 5y ago
Packaging is simpler. psycopg2-binary is actually not recommended for production use, so you have to compile it yourself.
29.
by lmns 5y ago
Am I the only one who never liked Computern Modern? It works and the math symbols are very complete, but it just looks way too thin.
30.
by lmns 5y ago
I know, but just setting MemoryDenyWriteExecute=yes is even easier.

More ›