asimops

Easy answer. If you are not comfortable with the basic requirements that each and every CA in the PKI is required to follow, you should host your own PKI and manage trust yourself as well.

Welcome to german quasi-government-agencies.

> [...] researchers [...] found a population of neurons in the brain that controls food intake without causing nausea in an animal model.

This is not something they should have to care about. And once you leave the tech savvy community then can not take care of it via content-blockers... You should do the correct thing by default, which is not supporting adtechs' psychological warfare agains the population imho.

Do you also plan on talking with the Mozilla people? And with Apple? Or will this be a kind of big daddy Google knows what's best for you, ads included?

There is no redirect in place. They also have a http rss feed where all links are http. Maybe the poster uses this feed.

PSA: If you change the feed to https, it will also serve all links as https.

> Zotero is a free, easy-to-use tool to help you collect, organize, annotate, cite, and share research.

I do use LibreOffice for my academic writing and Zotero help me manage my citations in a super reliable and user friendly way. If you are okay with the looks of a word processor and want a nice experience with citations, have a look at Zotero :)

Not if you disable Universal SSL

https://developers.cloudflare.com/ssl/edge-certificates/univ...

> The absence of seeing such a thing contributes to the idea that spacefaring life is incredibly rare.

This could also be due to the fact that the dark forest hypothesis is correct.

https://en.wikipedia.org/wiki/Dark_forest_hypothesis

But MFA is there to prevent this compromise from affecting the service and alert users/admins to the compromise, right?

If you have username and password and are able to force the TOTP in the 60s window, the TOTP would be useless imho.

Have you tackled the issue of session management or are you planning to do so? Essentially wireguard key are just eternal session keys.

I would expect software that implements the wireguard transport layer to implement session management to be called a working VPN server solution. This means a second channel to the server for periodically rotating session keys, terminating sessions, changing IP addresses, configuring new routes and repeating authentication if necessary.

It's advertised as running Android 11. A 4 Year old OS that does not get patches anymore. Du you trust Unihertz to back port even security updates? I certainly do not.

This was first posted on HN almost 2 years ago. While the Pixel 8 is slightly smaller than the Pixel 7, it doesn't come close to a Pixel 3, 4 or iPhone Mini in terms of smallness. If you're interested in a small phone, please share this campaign. If not, maybe share your thoughts on why a phone needs to be so big.

This is a talk by Mike Sperber at 35C3 (35th Chaos Communication Congress, by German Chaos Computer Club)

Sperber discusses a completely different approach to teaching programming which, supported by research, appears to be quite effective.

Why not Racket?

https://media.ccc.de/v/35c3-9800-how_to_teach_programming_to...

https://racket-lang.org/

Why could zipper not update the stuff on disk, then prompt you to logout/login to load the new binaries? Windows and MacOS afaik don't require you to change to a tty to update the GUI.

That's not the point they were trying to make. They were asking what would prevent malware from imitating the UAC prompt to steal administrator privileges.

Nothing will prevent that. The question is, what would you do with the stolen credentials in terms of privilege escalation? Suppose we are in a situation where the UAC is on and asks for every action on the secure desktop. Even if you were to authenticate with the stolen credentials, you would end up in an unprivileged session due to UAC's token filtering mechanisms. If you were then to request elevation, the UAC would prompt the user on the secure desktop, which you cannot control from within the user session. It is therefore not enough to imitate the prompt. You also need to convince the user to accept the real prompt.

This looks like a full VPN service for me. Since wireguard is only the session part of a VPN service, i.e. missing session management and key distribution, this would not be a proper comparison IMHO

> ActivityPub puts timestamps on things so you can ask your Mastodon server for everything that's been updated since the last time you polled. RSS makes you poll over and over again and download everything. so instead of downloading X kb of content you could be downloading 20X kb if you are polling too fast, alternately you could be losing content if you poll to slow.

You have to download the feed when something changes, correct. But you do not and should not download the whole thing over and over again. That is exactly what If-Modified-Since [1] is for.

[1] https://datatracker.ietf.org/doc/html/rfc1945#section-10.9

I have zero issues with paying in general.

What I don't see, is me paying for the worse service.

Youtube Premium is 12.99€ a month for me. For that small price I get to create a Google Account, accept their TOS, let them track and profile me, keep logging in everywhere (because I delete all local storage in the browser routinely) and replace the small and efficient NewPipe with the Youtube app. Futhermore I cannot download a video now and play it next month without connecting to the internet, or move it to my small dedicated video player that doesn't even have connection to the internet.

What is Googles CPM (revenue per 1000 clicks)? I don't think it comes down to more the a low cent amount. I do not watch enough video to justify the price of premium and I will never watch ads, because those are psychological warfare and completely underregulated...

If Google and all the others make a nice micro payment platform for the browser, which work anonymously and without much hassle, I will by all means pay them the amount of money which me watching the ads would have generated plus 10% service fee since they build the platform.

But not like this!

Good germans have a business phone, so they can justify to be reachable 24/7! Obviously, the companys data protection office will prevent WhatsApp on the business phone, so no work phone numbers were at risk!

The thing I am missing the most is some kind of HTTP-01 by proxy, like https://github.com/acmesh-official/acme.sh/wiki/Stateless-Mo...

If DNS-01 is not an option or to complicated, this saves you from exposing a host to the internet for no good reason.

PSA: systemctl reload caddy will call this api. If you disable it, then reloading the server will no longer work.

Use this static analyzer to check for such mistakes: https://github.com/yandex/gixy

Personally i am really happy with mailbox.org German provider that tries to be a gsuite replacement. I cannot know challenges that come from non eu payments, but it is a prepaid model.

139.7mm x 79.5mm Just imagine, they would remove the crap in the middle and sell it for a reasonable price. Finally an android flagship with proper sizing and GrapheneOS.

OT:

The only thing I see when visiting the site is "An unexpected error has occurred.", despite transporting ~1.3MB of data and having all text content there in the ~5KB of initial html response... Why is web like this?! Why does it need to load highlight.js to show me the content of the page, especially since the code stuff is alrady in a <pre>?

Have a look here: https://smallandroidphone.com/

Well, I don't deny that there should be an option. Look at the parent post.

But having root in the running OS seems to be a bad idea. I got this position after an extensive talk on this with some of the graphene os developers. They explained pretty good how rooting the device would impact the security measures taken in graphene.

This is why I suggested putting the access behind a special boot mode.