Promarged
Joined 8 years ago
Karma
192
Submissions
86
Member since
Jan 17
Recent submissions
Comment · 8 years ago
http://hnblogs.thume.net/feed.xml returns 500 for me :(
Comment · 8 years ago
Sounds nice, too bad there are no screenshots so I can't see what does it look like without giving my e-mail.
Does it run on an open protocol? (Maybe HTTP or XMPP based?)
Comment · 8 years ago
> It has the advantage of not relying on the Certificate Authority system
I wouldn't say it's an advantage, while CA system has many flaws at least it's monitored somehow (for example via Certificate Transparency) while putting keys in DNS would require the app to validate records (does GnuPG do that?), not to mention the queries are not encrypted (so are visible to any hop) and could be transparently replaced by your government or TLD operator. Many DNS providers do not allow adding "exotic" records.
For further info see e.g.: https://sockpuppet.org/blog/2016/10/27/14-dns-nerds-dont-con...
> and not requiring a full web stack (which some email clients and servers wouldn't want to open themselves up to).
Email clients and servers that do PGP usually have "full web stack" already to connect to keyservers.
Additionally while DANE or PKA lookups can be enabled in GnuPG only WKD is enabled by default ("auto-key-locate" is "local,wkd").
Nice nick by the way :)
Comment · 8 years ago
Or cleaning up their work-in-progress, currently there are around 11307 issues open: https://gitlab.com/gitlab-org/gitlab-ce/issues
Comment · 8 years ago
Actually CSP can also block content modifications by extensions. I frequently get CSP reports from browsers using plugins that want to insert something on my site. Some time ago I also got CSP reports that indicated the AdBlocker couldn't touch the site too...
Comment · 8 years ago
> I was only able to get the situation sorted because I know people who work at Google on the Chrome team.
Hehe, one thing all successfully resolved issues have in common - a friend inside of Google. Maybe that's by design... Google employees are not friends with bad guys!
Comment · 8 years ago
33mail probably...
Comment · 8 years ago
> put my own domain-specific CA Cert in DNS directly.
Remember that this allows any of your government or people controlling the zone to transparently put the cert there too. (For potential problems see [0]).
With the CA system (that I personally also don't like) at least the certs are logged in Certificate Transparency logs so you see any potential attacks.
[0]: https://www.theguardian.com/technology/2010/oct/08/bitly-lib...
Comment · 8 years ago
> Oh, I guess the vulnerability needs an extremely tenuous name and logo right? Here goes
I admire the extra touch here :)
Comment · 8 years ago
> I recently sold an XPS 13, an i7 9543 model from 2015, which was the first laptop in a long time that I regretted buying.
I've got 9350 and it's also bad. Coil whine, one firmware update completely bricked it (fortunately was on warranty), "fun" with accessories (TB15 was a disaster). Would not recommend.
Actually it's only the NBD warranty that keeps me with Dell (used that and it's very convenient). Does Microsoft have something like that?
Comment · 8 years ago
This paper [0] (from 2013) linked from this article [1] was also executed on chain, see date here [2] and the actual script via API here [3].
[0]: https://eprint.iacr.org/2013/784
[1]: https://curiosity-driven.org/bitcoin-contracts
[2]: https://blockexplorer.com/tx/7ae5760af2105a5ba54a914f188686e...
[3]: https://blockexplorer.com/api/tx/7ae5760af2105a5ba54a914f188...
[Verifying my OpenPGP key: openpgp4fpr:c6045c813887b77c2dff97a57c56acfe947897d8]