brewmarche
Joined 8 years ago
Karma
516
Submissions
323
Member since
Aug 5
Recent submissions
Comment · 10 hours ago
Comment · 1 day ago
Interestingly, this blog post says it is implemented in the Win32 and kernel API (in RtlGetFullPathName) and thus should also work outside of cmd.exe: <https://projectzero.google/2016/02/the-definitive-guide-on-w...>
Comment · 1 day ago
Comment · 3 days ago
> Unless they need Linux GPU/WIFI/BT drivers to make things work, of course. Then it's fine.
The parts of Linux that get integrated into BSDs should not be GPL-licensed, e.g. <https://github.com/torvalds/linux/blob/c339f4010dea8b0d754f8...> and its siblings use MIT.
Comment · 4 days ago
I think it’s possible to add intermediate certificates with distrust marker attributes to bundles with OpenSSL. But other libraries consuming the bundle would not understand it, so the problem remains.
Comment · 4 days ago
Apple’s own security framework is supported by curl with OpenSSL or GnuTLS (build with ./configure --with-apple-sectrust). That blocks the intermediate certificates via the same mechanism Safari uses for example.
Not sure why macOS doesn’t ship such a build of curl.
Comment · 5 days ago
Maybe we should do registered trademarks? For disambiguation location and class of goods/services might still be needed, but a certificate showing as “Google (search engines, US)” (taken from [0], picking Nice class 42) would be recognisable to many users, I guess.
Comment · 7 days ago
I’m not sure I’m understanding this comment [0] correctly, but even back then it seemed possible to get PHP involved?
Comment · 12 days ago
https://github.com/xscreensaver/xscreensaver/issues/3
This was linked in the blog
Comment · 12 days ago
Just delete the cookies of jwz.org (to be specific, the cookie called HN)
Comment · 16 days ago
I’d say most ‘mainstream’ libraries pretend that every day, even a day with leap seconds, has 86400 regular-length seconds. But I thought that within UT1 the length of a second varies every day, so I would not have called that UT1.
Comment · 17 days ago
Didn’t Julia choose UT1 for their standard date time library? Although they might want to reconsider with this decision
Comment · 22 days ago
IIRC there were some UNIX Linux distributions in the past but the certification wasn’t renewed
Comment · 28 days ago
> Landscapers sometimes accommodate desire paths by paving them, thereby integrating them into the official path network rather than blocking them.[…] Sometimes, land planners have deliberately left land fully or partially unpathed, waiting to see what desire paths are created, and then paving those.
from <https://en.wikipedia.org/w/index.php?title=Desire_path&oldid...>
Comment · 28 days ago
Location: Germany (UTC +1/+2), EU citizen
Remote: preferred
Willing to relocate: no
Technologies: C# and previously C++ and Java, I like functional programming and data-oriented where appropriate. I know SQL, Azure, Docker, high performance computing (Monte Carlo simulations), see also CV
CV: https://pub.999568.xyz/wwtbh/rcv-202610-vfay7k0zano.pdf
Email: see CV
Happy to provide you with an unredacted CV personally.
Some older RFCs even recommended using it for passwords, which needlessly reduces entropy (yes we need to normalise passwords because of combining characters, but we don’t need to collapse symbols that a user can choose from, like ſ and s).
In my opinion, the compatibility form makes mostly sense for searching text, and even then it’s sometimes annoying (I want to search exactly for ss and not ß, browser). If you know of other good use cases let me know.
It also OK to disallow registering two identifiers with the same compatibility normalisation form (edit: this does not prevent all homoglyph attacks BTW, that is another can of worms), but I don’t see the need to normalise the identifier when it’s used.