HNHacker News
TopNewBestAskShowJobs

ashitlerferad

12,212 karma · joined September 13, 2015

submissionscomments
ashitlerferad··on PC-BSD Evolves into TrueOS
Motif and CDE!
ashitlerferad··on The kernel community confronts GPL enforcement
Has RH ever assigned its lawyers to enforce the GPL?
ashitlerferad··on The kernel community confronts GPL enforcement
Just source code.
ashitlerferad··on The kernel community confronts GPL enforcement
What happens if the base device manufacturer goes under and removes their website? Then the board distributor is not in compliance.
ashitlerferad··on Aseprite development: new source code license
https://lists.debian.org/debian-devel-games/2016/09/msg00000...
ashitlerferad··on The kernel community confronts GPL enforcement
Indeed: https://sfconservancy.org/copyleft-compliance/principles.htm...

They don't even get their legal costs back most of the time.

ashitlerferad··on The kernel community confronts GPL enforcement
That has happened before:

https://lwn.net/Articles/404450/

ashitlerferad··on Ask HN: Who is hiring? (September 2016)
Boston, MA, USA, ONSITE. The Free Software Foundation is hiring:

Web developer: https://www.fsf.org/resources/jobs/fsf-job-opportunity-web-d...

Copyright/licensing associate: https://www.fsf.org/resources/jobs/fsf-job-opportunity-copyr...

ashitlerferad··on The kernel community confronts GPL enforcement
Conservancy are only interested in compliance, not in increasing costs:

https://sfconservancy.org/copyleft-compliance/principles.htm...

ashitlerferad··on The kernel community confronts GPL enforcement
https://sfconservancy.org/linux-compliance/
ashitlerferad··on Responsive Web Considered Harmful
Shit's responsive:

http://motherfuckingwebsite.com/

ashitlerferad··on Ask HN: Which security vulnerability feeds should I Monitor?
BTW, it would be great if you could post your final list of feeds here when you are done.
ashitlerferad··on Ask HN: Which security vulnerability feeds should I Monitor?
Some more possible sources:

https://anonscm.debian.org/viewvc/secure-testing/check-exter...

ashitlerferad··on The Dropbox hack is real
Yes, but as an extension it could just call into Firefox (which has all the passwords) to do all the work.
ashitlerferad··on Ask HN: How are credentials managed at your company?
Do you deal with any situations where public/private keys are used instead of passwords?
ashitlerferad··on The Dropbox hack is real
Can any open source password managers do this?
ashitlerferad··on The Dropbox hack is real
Anyone know of an open source Firefox extension that can do this?
ashitlerferad··on The Dropbox hack is real
So when are the browser vendors going to fix their interfaces?
ashitlerferad··on The Dropbox hack is real
I'd go with automatically stripping all utm_* query parameters from all URLs.
ashitlerferad··on The Dropbox hack is real
Anyone know of automated ways to rotate all the passwords on all of our accounts across the web?
ashitlerferad··on The Dropbox hack is real
Public-key crypto. Client side X.509 certificates for the web. S/MIME and OpenPGP keys for email. OpenSSH keys for SSH. etc
ashitlerferad··on Dropbox employee’s password reuse led to theft of 60M+ user credentials
Yes. Debian uses client-side X.509, OpenPGP and OpenSSH certificates for all service authentication (including websites).
ashitlerferad··on The Dropbox hack is real
It really is about time we stopped using passwords.
ashitlerferad··on Ask HN: Which security vulnerability feeds should I Monitor?
Take a look at some of the links on this page:

https://security-tracker.debian.org/tracker/CVE-2016-4448

ashitlerferad··on DANE and DNSSEC Monitoring tools
https://weblog.siccegge.de/DANE_and_DNSSEC_Monitoring.html
ashitlerferad··on Ledger-autosync: get transactions from your bank and add them to your ledger
http://plaintextaccounting.org/
ashitlerferad··on Multiple vulnerabilities in RPM – and a rant
Some more discussion:

https://lwn.net/Articles/698453/

ashitlerferad··on Google recruitment mistakes: part 3
They certainly do maintain such a blacklist.
ashitlerferad··on Academic Torrents: A distributed system for sharing enormous datasets
apt-p2p and debtorrent are entirely dead. The person who created them seems to be MIA from Debian. The bootstrap nodes are dead. Both packages are orphaned. apt-p2p will not be in the next release of Debian and debtorrent was removed from the last release of Debian.
ashitlerferad··on How do we explain email to an “expert”?
There have been remote code execution exploits in mail servers before, Exim most recently. There probably are more hiding somewhere in one of the many layers that are needed for modern email servers.
← PreviousPage 5 of 18Next →