rb12345

7 ms·

1.
by rb12345 6mo ago
Assuming US gallons, $8/US gallon works out as £1.60/litre. That sounds about right for current UK prices, depending on what and where you're buying it. (Yes, fuel is expensive here compared to the US; that's largely dow
2.
by rb12345 1y ago
Usernames for new users always show up in green.
3.
by rb12345 2y ago
That's true for SAML2, but not SAML1 - not that anything should be using SAML1 these days.
4.
by rb12345 2y ago
Outdated certificates are actually fine with regards to SAML, oddly enough; the logic being that the trust is handled out of band at metadata level, and the certificate is just a public-key distribution method. (That applies to Shibboleth
5.
by rb12345 2y ago
I'd say the main difference is that OAuth is granting the SP the ability to "do stuff" as the original user (including reading the user's profile details, as OIDC does), as opposed to SAML's approach of just sending
6.
by rb12345 2y ago
> What is an "OAuth key"? Do you mean an OAuth token? No, Golden SAML is worse than stealing an OAuth token, because an OAuth token is valid for 1 user, but Golden SAML can be used to impersonate any user. Also, OAuth tokens ex
7.
by rb12345 2y ago
> But that's the thing: deciding how software is built and which features are shipped to users _is_ under our control. The case with xz was exceptionally bad because of the state of the project, but in a well maintained project havi
8.
by rb12345 2y ago
Yes, but as MongoDB is a document database, storing and updating giant blobs of JSON as a single operation as opposed to breaking the JSON down into individual fields is intended behaviour. This works in Postgres too, of course, but then y
9.
by rb12345 2y ago
Try https://infinitedigits.co/tinker/thx/ instead?
10.
by rb12345 3y ago
In fairness, they also gave us the joys of `strcpy(src_ptr, dest_ptr)` and `scanf("%s", str_ptr)`, which with the benefit of hindsight and many buffer overflows later were a terrible idea.
11.
by rb12345 3y ago
Those numbers look like they could be about right for 2020/2021, but using them in a 2023 article is meaningless given the effects of the war in Ukraine on gas and electricity prices. I don't know how much Portugal's grid de
12.
by rb12345 3y ago
"EnableSendfile On" will enable that on Apache, and has been around since Apache 2.0.44. It's not enabled by default though, and as you say, TLS breaks it.
13.
by rb12345 4y ago
It's true that Blue Pill and friends were an issue 15 years ago. I would have expected VT-x to be on by default now though given that Windows 10 and 11 both use virtualisation for various security features (Credential Guard, HVCI and
14.
by rb12345 4y ago
LXC/LXD are probably the closest to that on Linux, although I'm not sure about nesting containers.
15.
by rb12345 4y ago
Linux has supported 240/4 addresses for years, but Windows still does not.
16.
by rb12345 4y ago
The 50.03% is specifically US traffic; for global traffic, it's 36.89%.
17.
by rb12345 5y ago
The thing is though that 40% of the German gas supply comes from Russia at the moment. That means that if you can eliminate the 15% used for electricity, you've reduced the demand for Russian gas by about 38%. Put that way, reopening
18.
by rb12345 5y ago
You can actually do most of this today; you just need to have the metric equivalent amount at least as visible on the packaging and pricing labels to satisfy the EU rules. Milk is still sold in pints (technically some multiple of ~0.57 l,
19.
by rb12345 5y ago
Even the kilogram is defined via physical constants these days ( https://www.bipm.org/documents/20126/41483022/SI-Brochure-9.... , pages 21 and 205 in the PDF).
20.
by rb12345 5y ago
Likely because DNS worked just fine without EDNS client IP (and indeed DNS) for decades. For example, I remember the use of the 4.2.2.2 server, which was globally accessible but US-based. The responses though were 100% usable wherever you
21.
by rb12345 5y ago
I'd say the main argument for using microk8s over minikube is that Canonical supports it, assuming that's a relevant concern. The issue for both microk8s and minikube is how to actually build the containers in the first place. Wi
22.
by rb12345 5y ago
The problem you're possibly missing here is that oil is used for a lot more than just fuel and energy production. It's used for everything else: road surfacing, plastic production, synthetic fibres, chemical and pharmacutical pro
23.
by rb12345 5y ago
The real issue is that the people who want to use the product and the people needed to make it usable aren't necessarily the same. Marketing generally caters for the former set of people, who are the people buying the product they w
24.
by rb12345 5y ago
There were similar issues more recently (2018/19) with custom XML entities or comments. The XML signature was unaffected, but if code used the equivalent of element.children[0] to get the contents, it was possible for attackers to tru
25.
by rb12345 5y ago
I would be tempted to skip the Docker part entirely and use raw EC2 instances plus Packer or whatever tool of choice to.deploy the code. You still get autoscaling that way, and additional isolation of processes too. In addition, Amazon ha
26.
by rb12345 5y ago
They haven't been accepted in shops for over 10 years now. Cheques still see some use elsewhere, but are slowly being replaced by cash, cards and bank transfers depending on the use case. The Wikipedia entry ( https://en.wi
27.
by rb12345 5y ago
No, the real reason is because it's trying to use an optional technical flag to enforce a social/political policy, and as such was doomed to failure from the start. If I recall correctly, the "tech community" was largel
28.
by rb12345 5y ago
The problem here is that the latent firepower can be used in two ways: to help defend the blockchain, or to destroy it. With 62% of hashrate offline, it's entirely possible to buy up the old miners cheaply, wait for complexity to fall
29.
by rb12345 5y ago
As said elsewhere, for U2F/Webauthn, the biggest threat is creating a duplicate of the key rather than third parties using the physical key. The idea is that physical security plus needing to know the account password should be suffic
30.
by rb12345 6y ago
The Register used it back in 2018: https://www.theregister.com/2018/11/19/wombat_cube_poo_demys...

More ›