pckspcks
Joined 11 years ago
Joined 11 years ago
Most people who make comments like this have only seen languages which differ in syntax, but many do differ in semantics.
1. There is large variation in TN displays. I'm very happy with the Acer TN panels I have at home. I find good TN gives me less eye strain than a lot of the IPS panels. IPS is the way to go for photo editing and similar tasks which require color calibration, but for coding, I actually prefer a good TN panel. Again, the trick is to find the right one. Try them at a store, for example.
2. Consider getting one 4k, and keeping the 1080p monitors. I have a 5 display setup like that. It works pretty well, actually. The 4k is great as a main display, and all the auxiliary stuff lives on the 1080p panels.
What actually scares me about the design is if my machine is compromised, an attacker can grab my Password Safe file (plus keylogs or whatever) and has access to all of my passwords. The design seems not very robust at a designs+protocols level.
(In contrast, right now, if a machine is compromised, it only compromises the passwords I've used from that machine).
In it, Sussman shows you how to:
* Write a Lagrangian
* Symbolically convert it into Lagrange's Equations
* Compile those into native code
* Numerically integrate the with an optimized numerical algorithm to get a path of motion.
And all of this, with beautiful, clean, concise, simple code.
A-fing-mazing.
However, they are cumbersome to work with for some complex, compound phenomena, such as friction.
Step 2: Advertise to the community you'll be deprecating unencrypted on port 80 after 2 years time. Ideally, make patches to nginx and apache such that it's a small config change.
Step 3: Change behavior such that:
1. Port 80+old http+no encryption: Show a small warning
2. Port 80+encryption+self-signed cert: No warning. Also, unlocked padlock. "HTTP" in URL. Behavior as for current unencrypted web sites.
3. Port 443+encryption+self-signed cert: BIG SCARY WARNING.
4. Port 443+encryption+cert without identity: No padlock. HTTPS in the URL, but grey, and unlocked padlock.
5. Port 443+encryption+cert with identity: Padlock. Green. Name of organization. Indicated as trusted.
One of the problems with a push like this is that, aside from preventing open web, it also undermines the meaning of a cert. With initiatives like https://letsencrypt.org/, I a cert means I actually don't know who I'm talking to (at least in a legal sense -- I can identify the entity, and take them to court if they rob me).
To answer your question: I'm actually not too unhappy with the current state of affairs. I'd be more happy with the state of affairs I proposed above. I'm very unhappy with the state of affairs Mozilla proposes. I value an open web more than I do an arguably more secure one.
This stuff ain't rocket science. Mozilla has smart people. If it's being done a dumb way, there's a reason for it.
1. The technical solution is trivial. You always have encryption, but http=self-signed cert, and no authentication, and no lock icon. https=CA cert, encryption, authentication, and lock icon.
2. There are strong government and corporate interests in being able to filter the open web. This closes the open web.
3. For the first time in my life, I have a comment on Hacker News or Reddit at -4. I've posted much more controversial things before (I do care about anonymity; I do use one-off cypherpunks accounts, so my post history won't indicate things). Good debate was virtually always well-received, up-voted, and not censored. The only exception was here, and one place where there was a strong, clear, well-financed astroturf campaign. That's one datapoint, but overall, the debate on the topic smells of financed astroturf rather than genuine grassroots.
Doing something you're passionate about and having an impact on the world is living. It is much more living than going to a job you don't give an f- about for 40 hours per week so you can buy a house in the suburbs and an SUV, retire after 40 years, and then die having left no impact on the world.
I know a number of other folks like me. I'm not unique here. It's that sort of person that you want to hire.