ajnin

DNSSEC is encouraged ("SHOULD" wording) in the RFC draft : https://datatracker.ietf.org/doc/html/draft-ietf-acme-dns-pe...

I guess what they're saying is that, for example, a password of length 12 has about 71 bits of entropy if using an alphabet of 62 characters, and 76 bits with an alphabet of 82 characters. But if you only increase the length by 1 you already get 77 bits with 62 characters only. So length beats adding special chars in that sense.

> I was tempted to try it until I saw the curl | bash pipe, then no

I don't quite get that argument. It's the same as the old download installer from random website, double click to run that people have been doing for decades. It only skips the download step. And it's arguably better since at least you can review the contents. When building a Go program it will also happily download stuff from github but I've seen way less complaints about that. And to be fair it's also been an infection vector, from people installing things from shady places (or reputable places but with ill-intent like installing unwanted browser toolbars, DRM rootkits ...), but it's nothing new. Same advice applies, know what you're doing, use reputable sources.

What's a better alternative ?

This coating looks like it can selectively make parts of the satellite radiators or insulators, as to regulate temperature. But I don't think it can change the fundamental physics of radiating unwanted heat and that you can't do better than black body radiation.

Some people just can't stop making other's lives more miserable, can they.

Everyday the world is becoming more polarized. Technology corporations gain ever more control over people's lives, telling people what they can do on their computers and phones, what they can talk about on social platforms, censoring what they please, wielding the threat of being cutoff from their data, their social circles on a whim. All over the world, in dictatorships and also in democratic countries, governments turn more fascist and more violent. They demonstrate that they can use technology to oppress their population, to hunt dissent and to efficiently spread propaganda.

In that world, authoring technology that enables this even more is either completely mad or evil. To me Linux is not a technological object, it is also a political statement. It is about choice, personal freedom, acceptance of risk. If you build software that actively intends to take this away from me to put it into the hands of economic interests and political actors then you deserve all the hate you can get.

I don't use IPv6 because it solves a problem that I don't have and it provides functionality that I don't want. And also because I don't understand it very well.

My points :

- I don't have a shortage of IPv4. Maybe my ISP or my VPN host do, I don't know. I have a roomy 10.0.0.0/8 to work with.

- Every host routable from anywhere on the Internet? No thanks. Maybe I've been irreparably corrupted by being behind NAT for too long but I like the idea of a gateway between my well kept garden and the jungle and my network topology being hidden.

- Stateless auto configuration. What ? No, no, I want my ducks neatly in a row, not wandering about. Again maybe my brain is rotten from years of DHCP usage but yes, I want stateful configuration and I want all devices on my network to automatically use my internal DNS server thank you very much.

- It's hard to remember IPv6 addresses. The prospect of reconfiguring all my router and firewall rules looks rather painful.

- My ISP gives me a /64, what am I supposed to do with that anyways?

- What happens if my ISP decides to change my prefix ? How do my routing rules need to change? I have no idea.

In short, so far, ignorance is bliss.

Ah, capitalism. It's only rainbows, children laughing and happiness. Well, if you're a potentially profitable customer, of course, otherwise you're left on the side of the road. And if you're not part of that low 10% that can't repay the costs and presumably gets violently thrown back to the last century.

Are massive infrastructure projects a failure ? Most definitely. But is corporate driven development the panacea this articles makes it out to be ? I don't think so. Especially telling is the last bit explaining how 3 households of a village sign a contract, then 30, but never does the whole village get solar. Public projects have that universality that is sorely needed. Should that one person that can't pay be left in the dark ? Too poor, too sick, too old, too unique, not profitable!

You'll also have to live without banking, government ID ... The "I don't need those services" rhetoric only goes so far.

Android has not been really open for a long time now.

- Many APIs have been moved to Google Play Services (which is not open source), and many apps have come to rely on them. You can emulate it partially but not fully, see second point below.

- Some features like device attestation / SafetyNet fail on non-"official" devices, for example many banking or government ID apps refuse to work on open source os like GrapheneOS

> Were you already complaining about this?

Yes, "we" were, definitely. I already can't freely choose the OS that I have installed on my phone because I'm limited in the apps that I can install. For example many government ID and banking apps will refuse to work on GrapheneOS even though that OS is security-focused and will probably keep you safer than your regular Chinese Android flavor. But it's not sanctioned by a big international corporation so it's a no. Is your argument that we shouldn't complain since it is already happening somewhere ?

What's an "official" copy of Android ? AOSP is supposed to be open-source. "Official" means controlled by a multinational corporation. I'm very puzzled that the reaction to these entities gaining even more power, outside of democratic control, is met with a "oh it may me worse, it may be not" type of reaction.

Would you be ok if for example your government's website to pay your taxes mandated a device with attestation knowing you can only get one from Google, Apple or Microsoft ?

> websites which [...] also want to know how the passkey is being handled by the user’s device to keep their accounts safe

This is exactly where passkeys go too far. "to keep their accounts safe" is always the excuse used to reduce the freedoms of users. Web sites have no business deciding how things are handled on user devices but it's precisely what passkeys enable. The boundary of control of a website used to stop at the interface between the site and the user. Now that boundary will extend to the devices. The idea of property and ownership is attacked again. The device is not something the user owns and has full control over but something that is a gateway to access content controlled by the big Internet companies.

Knowing this, how long until Netflix, Disney other content providers (sorry I don't know which ones are popular right now) demand use of a passkey originating form a device with a Trusted Platform (aka Untrusted User) Module ? This is part of a long plan initiated years ago with Windows TPM requirements, Microsoft account requirements. The gap between closed and open platforms will widen and the path is clearly to apply the Smartphone model where everything is closed, controlled, DRM'd, to other computers. We're lucky the IBM PC architecture was an open one but the war on that is on.

All the cells in the solitary confinement wing of the prison where he's incarcerated (La Santé in the middle of Paris) are exactly the same. Due to safety considerations the inmates don't have common utilities like showers or dining area so they have everything in their cells where they remain most of the time. It's not preferential treatment, in fact it could be considered quite cruel to have almost no contact with others.

This is disinformation.

The tribunal didn't rule he didn't personally benefit. It ruled that he conspired to corrupt the leaders of Lybia to steal money from the Lybian people and fund his electoral campaign. In my book becoming president of France is certainly a "personal benefit". There are numerous factual evidence, documents from Lybia, fund transfers, secret meetings of his closest friends with Abdullah Senussi, who has been convicted to life in prison in France for orchestrating the bombing of UTA flight 772 which resulted in 170 deaths and is also currently investigated for another plane bombing.

The money he got allowed him to spend about twice the allowed amount on his campaign, giving him an unfair advantage in the election. In other words he dealt with terrorists to potentially steal the presidential election. What Sarkozy did is extremely severe, I'd call that high treason. He got far less that he deserved.

Also it's worth mentioning that it is his third conviction. He already got a 2 years and 1 year sentence which were confirmed in appeal in other cases.

No, as he explains in the video, this is not a stroboscopic technique, the camera _does_ capture at 2 billion fps. But it is only a single pixel! He actually scans the scene horizontally then vertically and sends a pulse then captures pixel by pixel.

What this really means is that there are few configuration options, that it works mostly out of the box, and that it fits the tastes and needs of the developer. I can't really fault open source devs for that, it's a way to conserve resources. If I don't like something I go look elsewhere (or think about building my own then abandon the project in a git repo somewhere).

I'm surprised to learn that it is surprising that eels are fish. I mean, they live in water, they have fins, they're generally fish-shaped... What's more surprising is their incredible life cycle and reproductive journey. I'm surprised the author didn't put that in the title.

Client certificates have existed for basically as long as encryption. Passkeys are more than that, and that is a crucial point. They allow to verify the identity of the signing device, and allow access only if the device is "legitimate" from the point of view of the remote service. That is a very big encroachment on the user's privacy and freedoms and a new very big step in the process of tying everything even more tightly to accounts and devices controlled by the big service providers and making it more difficult to get out or to enter the market for new actors.

Think Trusted Computing. Soon it will be impossible to log in to some media streaming platform, for example, if you don't have a passkey sanctioned by an OS with a TPM. Then everything will be locked in and the only flaw will be our eyes and our ears.

What backward compatibility are we talking about here? Backwards compatibility of images will be fine, backwards compatibility of decoders might be impacted, but the article says the major image viewers (browsers) and image editors already support the 3rd version. Better compression is only planned for the 5th version of the spec.

Also if you forbid evolving existing formats, the only alternative to improve is to introduce a new format, and I argue that it would be causing even more fragmentation and be more difficult to adopt to. Look at all the drama surrounding JPEG XL.

Yeah I understand the need for an university to make the news once in a while, and the fact that this made the front page here proves the effectiveness of the method, but the terms "Passively Harvest" and "Defies Physics" should be used very carefully in the context of a scientific publication, even though it's only a blog post so we don't expect peer-reviewed journal levels of rigor.

I feel that it disserves science in the end, the belief that some magic material is going to break the second law of thermodynamics is closer to alchemy than chemistry.

A real throwback, I remember using JFreeChart back in 2006 or so. Looks like the design hasn't changed a bit since then. That's thanks to Java's backwards compatibility ethos I suppose ...

Hum I'm definitely not the target for this but I don't see the value to obfuscate all the info in an UUID, I'd have kept things simple and stored things into an URL fragment, that way it's possible to operate client-side only and nothing gets leaked to a server I don't know much about like headers or whatever tokens or API keys could be passed in an URL.

Yes, using the analogy used in the article, programmers are not the students trying to learn how to drive, they are the professional engineers and mechanics that build and maintain the cars. They don't need teaching, they need technical documentation. They already should possess the know-how to transform such documentation into practical applications.

The "be a teacher" motto is how you end up with "documentation" that is a bunch of examples of how to do various things and then no exhaustive and rigorous technical reference or even none at all. And then good luck scouring blog posts and StackOverflow or ask help on IRC (pray it's not on Discord) in the hellscape that has become Internet search if you want to do anything not in the examples.

Well you can't really trust an LLM to give you reproducible output every time, you can't even trust it to be faithful to the input data, so that's nice to have a standard format now. And for like a millionth of the computing resources to parse it. Also Whois was barely human-readable, with the fields all over the place, missing or different from one registry to the other. A welcome change that should have come really sooner.

I had the same reaction as you. And that's for 4 simultaneous clients, too, for a single client you get 3159 ops/s (from https://dicedb.io/benchmarks/). I'm not too familiar with in-memory databases in general but I would have expected figures in the millions on modern hardware. Makes me feel there's some hidden bottleneck somewhere and the benchmarks are not purely measuring the performance of the software.

To give a voice to both sides, Brother denies it made any of the alleged firmware changes. Also Louis Rossman's source for his claims is a Reddit post from 2022. Source : https://arstechnica.com/gadgets/2025/03/brother-denies-using...

FWIW Brother denies it made any of the customer-hostile firmware updates Louis Rossman recently accused them of, according to this other Ars Technica article: https://arstechnica.com/gadgets/2025/03/brother-denies-using...

Interesting article but that feels like wasted effort for what is probably the most bare-bones calculator app out there. The Android calc app has the 4 operations, sin cos tan ^ ln log √ ! And that's it. I think most people serious about calculator usage either have a physical one or use another more featureful app and the others don't need such precision.

> Una ex his erit tibi ultima

For those who don't speak fluent Latin, that means "one of those will be your last". Ominous reminder indeed.

Good for you, it means either your system was sufficiently simple to be fully implemented in 3 months from scratch including all business rules, or you build a new system which left out some amount of rules from the original system without this posing a problem. I don't know much about how central banks work so that might be possible. But not all systems present those characteristics.