News for hackers. Stuff that matters.

f0ff

Re:I am a heroin user. I do not have a drug problem on Thursday February 18, 2021 @11:39AM (#26181993)
When you rationalize your drug habit so hard you write a book
Re:Slack is down on Monday January 04, 2021 @10:41AM (#25632724)
>Why is migration so hard?

Why would anyone make it easy

Re:Johns Hopkins: Heart Disease Deaths Dropped in 2020 [pdf] on Monday November 30, 2020 @08:50AM (#25253633)
Tl;dr: "This suggests, according to Briand, that the COVID-19 death toll is misleading. Briand believes that deaths due to heart diseases, respiratory diseases, influenza and pneumonia may instead be recategorized as being due to COVID-19."
Re:Oxford University vaccine shows 70% protection on Monday November 23, 2020 @04:08AM (#25184907)
From the article: "There is also intriguing data that suggests perfecting the dose could increase protection up to 90%."
Re:Wish S-1 on Friday November 20, 2020 @10:17AM (#25161221)
There's little reason for a company owners to dilute their holdings with an S-1, if they are already profitable and don't have huge investments planned ahead.
Re:Wish S-1 on Friday November 20, 2020 @10:15AM (#25161207)
Buying stuff is not a hobby.
Re:PCalc for macOS on Friday November 20, 2020 @06:16AM (#25159349)
Thanks for the Numi clone, I can start converting all my linux buddies!
Re:Pressing YubiKeys on Friday October 02, 2020 @07:30PM (#24668098)
As long as the table is bolted to the floor, you're replacing posession (of a phone) factor, with location (in SOC) factor. Keeps both client happy, and security architect sleeping soundly.

Nice solution.

Re:Pressing YubiKeys on Friday October 02, 2020 @07:25PM (#24668063)
I'd hazard saying that the purpose of a YubiKey is to provide two factor authentication. A YubiKey acts as an item, posession of which implies identity. When you allow for the YubiKey to be activated without human interaction, it's moved from domain of posession into the domain of knowledge - identifying party needs to know where to knock, not to possess they key. It's no better than appending the URL at the end of your password.

If you allow for a YubiKey, or any other physical artifact in that matter, to be remotely invoked it negates its utility as an authentication factor in the physical domain.

Re:Pressing YubiKeys on Friday October 02, 2020 @01:04PM (#24664652)
Congratulations, you've defeated the purpose of having a YubiKey
Re:I don't trust Signal (2018) on Tuesday August 11, 2020 @12:43PM (#24122380)
As to the interjection that Signal is lacking a FBI canary - Moxie was clear on the subject:

https://web.archive.org/web/20141027143819/https://github.co...

Re:The Four Quadrants of Conformism on Friday July 24, 2020 @07:52AM (#23938382)
Take Peterson for example.
Avoiding cloud works well for small requirements too - worked for a company that ran a global store; we've opted for dedicated servers on OVH, all together had about 40 of them. It was 1/10th the price of running the infrastructure on AWS. We still used S3 though.
Comment of the year. Absolutely wonderful.