vtlynch

5 ms·

1.
by vtlynch 9y ago
>they seem to be resellers for DigiCert/Symantec certificates >they should at the very least have either ETSI TSP² or WebTrust³ certifications to meet the security/trust requirements for operating a CA A reseller does not ne
2.
by vtlynch 9y ago
This is a common concern, but in reality, it does not mean anything. "Sharing" your cert with a weird site is similar as taking the same bus route as someone who is bad. From a security standpoint, there is little to no risk. Wors
3.
by vtlynch 9y ago
Corrections: 1. Unicode Homograph attacks don't work in a business registration. Someone would have to be able to legally register a business name that fits your look-alike example. That is not possible in most places AFAIK. So what yo
4.
by vtlynch 9y ago
In Chrome 60+, you can enable the old-school certificate viewer with a flag. At some point this will become the default. Flag is: chrome://flags/#show-cert-link Full instructions for those less familiar: https://ww
5.
by vtlynch 9y ago
>But aren't regular non-devs supposed to verify certificate name and the name of the website they are on? But aren't regular non-devs supposed to verify certificate name and the name of the website they are on? The browser does
6.
by vtlynch 9y ago
I wrote an article that covers some similar ground, but is focused on why Chrome's team chose "Secure" over the alternatives, such as "Private." It is quite a bit longer, but I do break down the data to show some
7.
by vtlynch 9y ago
Let's edit this comment for accuracy: "[Some of us chose] to debug viruses, worry about floppy disk compatibility, learn how to change out failed hard drives, etc. if we simply wanted to use technology at all" Now, Millennial
8.
by vtlynch 9y ago
I would recommend a total redesign of your front page. It sounds like it could be a great tool, but I have literally no impression of it from clicking on any of the non-gated links on your site. The basic info on https://visualti
9.
by vtlynch 9y ago
You mean in order to place it back on the machines? Sure, just one line. But there seems to be a rather big difference between basic software that is guaranteed to be available and software that requires any amount of scripting/prepara
10.
by vtlynch 9y ago
Paint is one executable file, no? Getting rid of this does literally nothing to combat bloat and seems like a pointless move that will irritate users.
11.
by vtlynch 9y ago
"Microsoft to remove ability to right-click." Makes sense. Microsoft is missing out on recurring revenue. I'm sure there will be a Windows 10 Creators Pack for Mouse Power Users for $6.99/mo.
12.
by vtlynch 10y ago
I think Chrome's behavior is the most sensible choice. If you are in an environment where traffic inspection is required by policy, than the browser should obey that. If Chrome enforced pinning with local roots, then the outcome would
13.
by vtlynch 10y ago
>and wishing to harness violent force (government rules) aaaaand I can safely ignore everything you say.
14.
by vtlynch 10y ago
Certificate resellers are only taking money in exchange for the cert. They are not doing any validation. This is true even in cases like Gandi.net where some of the certs they sell come from a custom-branded intermediate certificate. The ro
15.
by vtlynch 10y ago
>For example, when I type the first 4 letters of my bank's URL, the omnibox has 3 suggestions prior to the direct bank URL even though it's a site I frequently visit and google knows that. They want me to search "BANK NAME
16.
by vtlynch 10y ago
>I think it's unlikely you'll find anyone reviewing vacuum cleaners online because they love the engineering prowess exhibited by a Dyson. There are literally dozens of sites for every niche and topic where people are writing a
17.
by vtlynch 10y ago
>I immediately gravitate towards the keyword descriptive dotCOM. It instantly exudes trust & authority Strongly disagree. As a result of this type of thinking, I find that the majority of "keyword descriptive dotCOM" domain
18.
by vtlynch 10y ago
Your criticism is that there isn't a foul-proof way for the rich to stay rich forever? Of course there are going to be major hurdles during total war and extreme regime change. That would be obvious to anyone who wasn't being disi
19.
by vtlynch 10y ago
It's almost as if the government is made up of many departments and people who have different goals and values...
20.
by vtlynch 10y ago
Can you please provide widespread proof of "income streams vanish[ing]"? Because for the ultra-rich, I dont believe there is any evidence of this. Do they lose money some of the time? Sure But nearly any prudent investor could man
21.
by vtlynch 10y ago
Yes, from the movie. From the source I found (linked below), this is a line Greg Kinnear spoke, that was written by the screen writers. Is there any evidence the real Robert Kearns said this? http://www.preachingtoday.com/il
22.
by vtlynch 10y ago
I think it says a lot about you and your political leanings if you think this game is mostly strategy
23.
by vtlynch 10y ago
You are right, Im sure most people, even the best, have to deal with this at some point.
24.
by vtlynch 10y ago
I think the best people in tech are probably not put into this interview/test situation.
25.
by vtlynch 10y ago
This is exactly why Amazon's behavior are so unacceptable. They abuse the fact that most people do not have those luxuries to create an unhealthy and exploitative work environment.
26.
by vtlynch 10y ago
>And aren't "liberals" now pitching for unequal chances? Like, HRC should be President because she's a woman, affirmative action, get women into tech funds etc? Saying this reveals a dire mis-understanding of access a
27.
by vtlynch 10y ago
Would you mind sharing the domain?
28.
by vtlynch 10y ago
So thats worth $6,888,100?
29.
by vtlynch 10y ago
You say this in a snide way as if it would be a good thing if governments didn't try to keep us safe. It also raises the question of what you think the Bill of Right's purpose is.
30.
by vtlynch 10y ago
There are a lot of reasons that CT does not make sense for private CAs, and there is no indication that Google will be requiring it any any point.

More ›