iou

Did they really misspell the name of their own company in a public statement?

Anyone else misread this as “on a Peloton”?

Do you do the full loop with each company? How do you select the companies? Do you feel bad if they’re smaller ones and you’re not serious about it?

I did a sideload of .mobi today after being rejected by email, no issues.

I thought the response was a bad thing, but if it just means we’re finally accepting epub as a common default that’s pretty great, right?

Also send-to-kindle today rejected a mobi I sent by email with:

>>>

Send to Kindle supports the following document formats: Adobe PDF (.pdf) Microsoft Word (.doc, .docx) Rich Text Format (.rtf) HTML (.htm, .html) Text (.txt) documents Archived documents (zip , x-zip) and compressed archived documents MOBI (.azw, .mobi) (will not support the most up-to-date Kindle features for documents) JPEG (.jpg), GIF (.gif), Bitmap (.bmp), and PNG (.png) images.

Additionally, Send to Kindle emails now supports EPUB (.epub). Later this year, we’ll also be adding EPUB support to the free Kindle app for iOS and Android devices and the Send to Kindle desktop app for PC and Mac.

Place those bets, was it BGP? My money is always on BGP somehow.

I could see this being an option for Enterprises with concerns around intellectual property or sensitive data leakage.

Conceptually, I love it. I used it since about 2016 until last year, but I had to record some video and use stuff like OBS and it just became impossible (with my skill level) to get working.

I abandoned and went back to Fedora, which is odd as I’d stuck with it through lots of other NVIDIA crap issues and such.

Hopefully adoption increases and one day I can use in a workplace setting.

I use nextcloud for my card and cal DAV, but I no longer need a lot of the other features of Nextcloud, has anyone else run something like https://radicale.org/v3.html on serverless or something?

Love that scroll effect

New and interesting writeup on what ProtonMail flagged to GMail for replaying of email where some empty fields in the original were not DKIM'd and hence injectable

https://news.ycombinator.com/item?id=29942900 (it's not my post, but it was the first one here and deserves a comment or two as it is interesting IMO)

Do both pls.

Really cool!

I did have trouble with the results aligning correctly on mobile.

Amazing, it seems reasonable that all operators would follow this, I'll have to try this out.

I didn't know GIMP had been renamed till now, the repo is archived though, is that just because it's a mirror of some email-based-git approach?

https://github.com/glimpse-editor/Glimpse

I only used OBS for the first time recently and was blown away by how stable and feature-rich I was. Truly a great OSS project.

Ah this diagram helps explain more http://docs.unikraft.org/intro.html

It sounds closer to the former (as that's KVM) https://github.com/unikraft/unikraft

What isn't clear is how it inlines kernelspace, whether that surface area is optimized down etc

As much as one could "nitpick" about ommisions or unnecessary points, for large companies these things are obvious yet necessary.

I also liked the writing style guides that Microsoft and Google put out in recent years:

- https://docs.microsoft.com/en-us/teamblog/style-guide

- https://developers.google.com/style/highlights

Exactly. On the subject of contextual vs behavior based, it was sad that summary of this study was we gave up all that privacy for just 4% improvement );

https://techcrunch.com/2019/05/31/targeted-ads-offer-little-...

I do know this, I'm currently putting together a training course on authoring SELinux policy.

Surely the fact that 'disabling SELinux' is the top result on the subject in Google or StackOverflow will tell you that you would be in the minority of developers that like working with it and find it easy to do so.

I think there's more to it than just simply running an app without receiving an AVC complaint in auditd, you need to be able to test that the controls you put in place actually protect the application in some way, this does not come for free with audit2allow and other such generative tools.

Yes,agreed.

& AWS are active in this area moreso with bottlerocket-os https://aws.amazon.com/blogs/opensource/security-features-of...

The recent release even incorporating the use of a feature I had previously dismissed as useless (MCS) is really quite neat https://github.com/bottlerocket-os/bottlerocket/discussions/...

I'm a big SELinux fan and user.

Enabling it won't in itself secure your company's applications, as the default policies in Fedora only apply to installed services (e.g ssh) that have a policy written for them.

This is probably right on the boundary of the shared-security-model, but I think it would be great if they also offered easier ways for application developers to leverage the advertised feature.

I guess v11 is a better link to share there https://docs.aws.amazon.com/corretto/latest/corretto-11-ug/p...

They do list the additional patches they do here (for example) https://docs.aws.amazon.com/corretto/latest/corretto-8-ug/pa...

I don't think this is "the rise", inline attacks had been a known weakness of these security mechanisms almost since inception.

Is that _not_ what Stripe invoicing is for?

https://stripe.com/invoicing

Not a textbook (just a book), but still a fun way to intuitively encounter formal logic - https://en.m.wikipedia.org/wiki/To_Mock_a_Mockingbird