rjst01

10 ms·

1.
by rjst01 1y ago
Are you able to share how you evaluated this? Is this based on gut-feeling or is it data-driven?
2.
by rjst01 1y ago
If you're involved in the hiring process at your org at all, and they ask these type of questions, I'd encourage you to try to as-objectively-as-possible evaluate how much of a signal they actually provide.
3.
by rjst01 1y ago
Thanks for the suggestion. I'm on iOS but the notification settings look the same. I already had all but one of the settings you mentioned disabled, along with most of the others. I'll report back in a day or two.
4.
by rjst01 1y ago
Yes, but once that access is revoked, that is enough to be certain that the attacker can no longer issue certs. With your proposal, I would then have to audit my TXT records and delete only attacker-created records. (Which in general would
5.
by rjst01 1y ago
Of course - but that requires the owner to know they were attacked, know the attacker added a TXT verification, potentially overcome fear of deleting it breaking something unexpected, etc.
6.
by rjst01 1y ago
> DNS auth would be okish if it was simply tied to a txt entry in the DNS and valid as long as the txt entry is there. Why does LetsEncrypt expire the cert while the acme DNS entry is still there? Which attack vector does this prevent? A
7.
by rjst01 1y ago
I think the parent commenter would be satisfied if they could authorize their DNS by creating a DNS challenge entry one time, and then continue to renew their certificate as long as that entry still existed. And I'm sympathetic to the
8.
by rjst01 1y ago
I had to completely turn off notifications for Instagram because none of the provided settings appear to disable the almost-daily "for you" and "trending" notifications. Now I don't get notified when someone DMs me
9.
by rjst01 1y ago
I was wondering exactly how hard factoring RSA-1024 would be today and found this stackexchange answer: https://crypto.stackexchange.com/a/111828 In summary, it estimates the cost at $3.5 billion using commodity hardwa
10.
by rjst01 1y ago
> Encryption for 30 years ago? Trivially breakable with quantum I wouldn't be so sure - quantum computers aren't nearly as effective for symmetric algorithms as they are for pre-quantum asymmetric algorithms.
11.
by rjst01 1y ago
The headline here makes it sound (to me) like Salesforce did the study.
12.
by rjst01 1y ago
In practice, whether or not this actually works can be very hit-or-miss. We've found several UEFI implementations will not consider a disk bootable if the pMBR doesn't exactly match the spec, which specifies that the 'protect
13.
by rjst01 2y ago
Why? We are running the exact same images that we would be mirroring into and pulling from our private registry if we were doing that, pinned to the sha256sum.
14.
by rjst01 2y ago
It is a trade-off. For many services I would absolutely agree with you, but for hosting public open-source binaries, well, that really should just work, and there's value in keeping our infrastructure simpler.
15.
by rjst01 2y ago
> Your case is simply prioritizing work that you would have wanted to complete anyway It's busy-work that provides no business benefit, but-for our supplier's problems. > specific outbound IP addresses that they can then wh
16.
by rjst01 2y ago
Amazon ECR for instance provides the option to host a public registry.
17.
by rjst01 2y ago
Let me give you an alternative perspective. My startup pays Docker for their registry hosting services, for our private registry. However, some of our production machines are not set up to authenticate towards our account, because they are
18.
by rjst01 2y ago
Yeah, I agree that's problematic. And I would have no objection to implementing a UI feature that displayed a warning banner of some kind if it detected that the page had been translated.
19.
by rjst01 2y ago
They probably understand it just fine. Someone higher-up has just over-ruled them. There may even be a good reason for it, but because of the way companies work, we will probably never find out what it is.
20.
by rjst01 2y ago
Locale I'm using as a shorthand for "the bundle of variables that your service or business needs to tweak between customers in different markets". It may determine things like currency, date/time or currency formatting,
21.
by rjst01 2y ago
> When I first ran into this issue back in 2017, I posted in the React issue tracker that I had ”fixed” my app by blocking translation entirely. Please do not do this! In almost every instance I've encountered severe Translate-relat
22.
by rjst01 2y ago
I was recently looking for an article I remember reading a bit over a year ago. I could even remember some exact phrases that appeared. I tried to find it on Google for more than 10 minutes, ultimately to no avail. I then went looking throu
23.
by rjst01 2y ago
One day I will give a lighting talk about the load bearing teapot, or how and why I made HTTP Status 418 a load bearing part of an internal API, and why it was the least bad option considering the constraints.
24.
by rjst01 2y ago
> I've had to do some ridiculous things to get them to behave after installing Linux, like tricking the BIOS to deal with UEFI correctly I would suggest going for a couple of generations newer - the M92p is from an era before UEFI b
25.
by rjst01 2y ago
This was actually shown off at CES earlier this year, here's the only video I can find: https://www.youtube.com/watch?v=GqCwLjhb4YY In this it's claimed that Intel is doing a direct framebuffer copy. I'd say
26.
by rjst01 2y ago
Yes - but as this is a purpose-designed protocol for display transport over thunderbolt, I would expect it to perform better than a remote desktop solution intended to go over a potentially low-bandwidth network. In the past I've found
27.
by rjst01 2y ago
I hope we get a mac client for this at some point - travelling with two laptops sucks, so bringing a NUC I could remote into with good performance would be a huge win.
28.
by rjst01 2y ago
I agree in principle, but I think there has to be some room for exceptions here. Some portable devices like smartwatches are too space constrained for USB-C and some devices might use too much power for USB-PD but still be too small to incl
29.
by rjst01 2y ago
A hill I will die on is that tech products should just stop bundling cables, for anything, with the possible exception of unit-specific power adapters. A while back I purchased a KVM switch - it came with 3 DP cables, which went straight in
30.
by rjst01 2y ago
Embedding the Starlark interpreter into a Rust program took me less than an hour. There's little more to it than adding the crate and calling into it. No futzing with the build process. If starlark does everything you need (and especia

More ›