ralala

7 ms·

1.
by ralala 1y ago
What is the threat model you want to mitigate using encryption at rest? Is it that a physical disk is not properly wiped after usage? Then you could just use luks and store the key anywhere else, e.g. another machine or an external volume…
2.
by ralala 2y ago
This is where artifact binding can greatly increase the security…. Browser sends artifact to RP, RP fetches assertion from IdP via HTTPs, afterwards verifies the signature. Signature verification is not implemented correctly? The attacker s
3.
by ralala 2y ago
OIDC is newer and many of the issues with SAML were addressed in the architecture. However I’m curious to hear which attack vectors you are thinking about.
4.
by ralala 2y ago
OIDC is better when using the authorization code flow because it does not only rely on cryptography while validating the token. The relying party needs to talk to the IdP. This is better from a security perspective, because past vulnerabili
5.
by ralala 2y ago
For protecting your developer machine, devcontainers will provide at least some isolation.
6.
by ralala 2y ago
I’m sticking with iShares MSCI World SRI + a small amount stock picks
7.
by ralala 3y ago
Interesting read. I have just setup a very similar cluster this week: 3 node bare metal cluster in a 10G mesh network. Decided for Debian, RKE2, Calico and Longhorn. Encryption is done using LUKS FDE. For Load Balancing I am using the HClou
8.
by ralala 3y ago
Is there a solution like this which supports mobile app development? (iOS + Android). I guess USB would be needed as well.
9.
by ralala 3y ago
Actually this is a EU legislation, which forces all member countries to do so.
10.
by ralala 3y ago
Software development is easy, maintenance is challenging. When your system integrates with other systems and you want to make changes, it's critical to understand the details. I doubt people without IT background should be in charge of
11.
by ralala 3y ago
I drive a 2023 ID.5 for 2 months and I have not faced many issues yet. Yes, the touch interface could be a bit more responsive, but I am overall very happy with the driving experience.
12.
by ralala 4y ago
I have fructose malabsorption and when I eat or drink too much of it, I get brain fog (slow reaction, dizziness etc.) for one or two days. Would be interesting to see if fructose malabsorption and Alzheimer's correlate.
13.
by ralala 4y ago
I think we also have lazy evaluation, heuristics (wave-particle duality), out-of-memory killers (black holes, hawking radiation) and bandwidth limitations (speed of light). It seems obvious, hopefully it's not going to kernel panic!
14.
by ralala 4y ago
Isn't that what conferences and journals are for? Reviewing and selecting the most important papers? When something is really solved (a solution exists without negative side-effects; and this fact has been verified several times), they
15.
by ralala 5y ago
I guess you also don't need insurances for nuclear plants. Nobody will be able to pay in the worst case.
16.
by ralala 5y ago
I have not looked at kitemaker yet, but we are in the same situation. On premise Jira will have to be replaced by something else. Cloud is not option due to privacy/security/compliance reasons.
17.
by ralala 6y ago
I don't know exactly. There has to be enough liquidity in Bitcoin locally to find enough persons to trade with. Starting a new cryptocurrency in such a situation will be difficult because of deflation. Deflation is extremely dangerous
18.
by ralala 6y ago
The rising of Bitcoin can be a threat to working democracies - at least if it is used as a currency. Monetary politics are important for our society to function properly. On the other hand: For broken countries, it can help the people as a
19.
by ralala 6y ago
Thank you for the explanations and your hard work! How stable is Ory? How often will breaking changes occur during the next months/years? Can you provide an ETA for the cloud service?
20.
by ralala 6y ago
How does Ory compare to alternatives like e.g. Keycloak and Authelia? From experience, can anyone make a recommendation for a system that can be rolled out to an organization with confidence (long-term support, security, performance)?
21.
by ralala 6y ago
"With Starlink revenue, SpaceX will be able to do the work on life support systems and mission planning to enable a human mission by 2029. NASA could be involved as a partner, but SpaceX would tolerate zero government obstacles."
22.
by ralala 6y ago
I'm playing on an older PC: i5-2500k (from 2011!); 12gb RAM, Geforce 1070; 1920x1080. It works well on Ultra settings, but I have occasional tree glitches. Story and gameplay are excellent.
23.
by ralala 6y ago
And mirroring! Reminds me of those wooden games with just four pieces.
24.
by ralala 6y ago
There are currently very serious issues with the wd19tb docking station. https://www.dell.com/community/XPS/XPS-13-9300-and-WD19TB-li... This leads to random black external screens and network/usb disconnects
25.
by ralala 6y ago
It's a bit unfair to compare with synchronous python. Better: FastAPI, aiohttp, Quart,....
26.
by ralala 6y ago
Could it be that just both, vitamin D deficiency and covid-19 risk, are much higher for people that stay inside most of the day (e.g. have office jobs)? Vitamin D is created from sunlight. Covid-19 is transmitted by aerosols. Is there addit
27.
by ralala 6y ago
> Production wise, an economy that is not concerned with democratic institutions or reducing inequality will outperform one that is. The question is: How can the market be adapted to create a fair, innovative and sustainable society, glo
28.
by ralala 6y ago
What you describe sounds dangerous if overdone. Acceleration is very important, but it's even more important to be able to keep going for a long time. If you cut down Life-Balance to hard, you might give up before you reach your goal.
29.
by ralala 6y ago
Thank you for your great work, Zulip is overall a very great experience! (OT: The one thing I still miss on Android is the handling of the share Intent)
30.
by ralala 6y ago
You will probably have to compile the mobile apps yourself. The Zulip docs explain this very detailed: https://zulip.readthedocs.io/en/latest/production/mobile-pus... Another possibility is to not include c

More ›