News for hackers. Stuff that matters.

johnfonesca

>But all projects need to have the same formatting and style.That too can be easily done with one nuget using msbuild.

That's like using a car for "traveling" 3 meters. Why not just use dotnet format + .editorconfig , they were created just for this purpose.

> HDCP is already cracked

It's being 15 years already

>Agreed, they should not be using Windows in the first place

Crowdstrike borked RHEL 1 month ago https://access.redhat.com/solutions/7068083 Literally the same situation, unbootable machines.

The reality is that shitty software broke everything. Why do we have to drag the OS into this?

Re:Elon Code Review on Tuesday February 06, 2024 @05:53AM (#39272965)
Twitter employees were asked to print some of their best code and bring it for review by Musk.
>Like Cthulhu

Cthulhu is definitely less evil than Meta.

How effective is TPM 2.0 compared to the original ? Are there any reports that demonstrate its effectiveness ?

If a specific version of TPM becomes required to use future versions of Windows, we will have swappable TPM chips ? Eg update your TPM chip just like you update your GPU :)

Re:Add dark mode to your website with a single line of code on Saturday December 02, 2023 @07:31AM (#38498155)
And the JS file "weights" 4 Kb.
Re:Last Chance to Fix eIDAS (Mozilla) on Thursday November 02, 2023 @07:30AM (#38111927)
The ETSI checker you have linked doesn't have anything to do with CA API interoperability and "switch document signer provider". That's just a basic tool which validates if a signature is PADES/ETSI compliant or not.

The real value in eIDAS would be "unlocked" if they would release a proper API specification with which a digital signatures application would integrate with any EIDAS CA to emit/sign certificates. And then enforce that any eIDAS compliant CA would implement this API.

In practice that means any company/digital signatures product could do a integration with this API once and then be able to use ANY certification authority they want/need/offer best prices for certificates.

Without this API, eIDAS is just a marketing moniker because the power belongs to the selected Certification Authorities. They set the prices, they choose WHOM can integrate with them to isse certificates and there is NO interoperability between them. This doesnt allow for a open market and makes the top players control everything while shouting "standards" and "eIDAS".....

Re:Last Chance to Fix eIDAS (Mozilla) on Thursday November 02, 2023 @06:50AM (#38111617)
>it makes it easy to switch document signer provider etc since they all are forced to implement the same interface.

eIDAS was introduced in 2016. Now 7 years later there still isn't a API specification for interoperability (there are drawings though https://blog.eid.as/new-apis-for-the-eidas-ecosystem/ )

In the meantime, any digital signature done in EU must be done with a certificate issued only by the "select" CA to be considered "valid".

Re:Last Chance to Fix eIDAS (Mozilla) on Thursday November 02, 2023 @06:28AM (#38111432)
eIDAS is a cartel created to protect the business interests of EU biggest certification authorities.
Re:Last Chance to Fix eIDAS (Mozilla) on Thursday November 02, 2023 @06:21AM (#38111371)
>Which is another way of saying "expensive certificates".

True, basically eIDAS is a cartel. With the help of EU legislation, some Certification Authorities banded together and are now saying that certificates emited by anyone but them are not good. And obviously they fully controll the pricing for the "good" certificates.

At bulksign.com we have this feature, it's called "Local Certificate" signature.
>This ensures that the signer cannot revoke the documents already signed. If the receiving party tries to modify the document, the signature becomes invalid

This,fortunately, is a feature of the PDF digital signatures standard.

Dimmu Borgir presents their new album "Undying Chainsaw"...
Re:eSignature for Google Docs and Google Drive (Beta) on Friday August 11, 2023 @05:35AM (#37086783)
We are developing a digital signatures solution, https://bulksign.com which also has a on-premise version (in addition to SAAS). In Europe, at least, we see an increase in interest for customers having the solution installed on their own servers for security reasons. So more people become aware that sending your confidential documents to a 3rd party is not that great security wise.
Out product Bulksign https://bulksign.com does this, the name of the product is directly inspired by that feature (sending same documents for signature to hundreds of recipients).
Re:I Still Use Windows 95 (archived, 2008) on Wednesday May 17, 2023 @01:48PM (#35978844)
As a KDE user i agree with this point of view. KDE is the most customizabile DE ever created. You can tweak the crap out of it to make it look and behave EXACTLY the way you want it. And, from my experience, the performance of the current 5.x version (running on Wayland) is very good.
As a user, hanging on to a arbitrary and unsupported middle of the road version of Windows 10 is dumb anyway.

Either update to latest or move to Windows 11 or Linux.

Re:A detailed comparison of REST and gRPC on Saturday April 29, 2023 @05:22AM (#35751415)
>What is openAPI of gRPC?

The proto file. Grab that , use protoc to generate bindings for your language and off you go....

>How is it different than having to use GOG's website to install a purchase you made or download an updated version?

You buy game on GOG, dowload the installers, move it to a external HDD and you can install that game forever. This is the only thing that is actually DRM free.

Needless to say, you can't to that with ANY other store (be it Steam, Epic etc). All of them requires you to install their crap to access your bought games and they don't give you full offline installers.

Re:Is it time to open source SublimeText? on Thursday March 30, 2023 @11:23AM (#35374120)
"I feel that open sourcing SublimeText is the only way for SubmlineText to be relevant and compete against VSCode."

The SublimeText people make a living by developing and selling a honest product (and they're probably happy doing that).

There's nothing wrong with not competing with VSCode.

Re:Is it time to open source SublimeText? on Thursday March 30, 2023 @11:19AM (#35374025)
Some variant of BSD probably...
Re:Privatizing Our Digital Identities on Friday March 10, 2023 @01:49PM (#35099079)
Speaking as a application developer (digital signatures solution) which has to integrate with government related entities, i'd love an official government-run authentication. Just give me an OAuth endpoint for the government solution which allows me to authenticate users and it will make the life simpler for everyone.
Re:Hacking Your Keyboard with Karabiner on Sunday February 12, 2023 @02:57AM (#34760857)
I'm doing the same things with Autohotkey but in a much less convoluted way.
Re:DocuSign to cut workforce by 9% as part of restructuring plan on Thursday September 29, 2022 @07:22AM (#33019033)
Good catch, it is fixed now and everything is in English. Thank you for this.
Re:DocuSign to cut workforce by 9% as part of restructuring plan on Wednesday September 28, 2022 @03:49PM (#33012367)
Thank you for providing feedback, we will improve UW support for the landing page.
Re:DocuSign to cut workforce by 9% as part of restructuring plan on Wednesday September 28, 2022 @03:48PM (#33012343)
Yes, we actually have a mass download application (it's Windows only so far) which downloads all signed PDF files.

https://bulksign.com/docs/EnvelopeDownloader.htm

Re:DocuSign to cut workforce by 9% as part of restructuring plan on Wednesday September 28, 2022 @03:25PM (#33012112)
Thank you for providing constructive feedback.
Re:DocuSign to cut workforce by 9% as part of restructuring plan on Wednesday September 28, 2022 @02:57PM (#33011784)
My company is developing a digital signatures platform called Bulksign https://bulksign.com

We want to encourage broader use of advanced digital signatures and we are giving the on-premise version of this platform for FREE to any NON-PROFIT organization from anywhere in the world which wants it.

With droughts and up to 10l of water being used to make 1 sheet of A4 paper, i think natural resources are better spent elsewhere and digital documents and digital signatures should become the norm.

Re:DocuSign to cut workforce by 9% as part of restructuring plan on Wednesday September 28, 2022 @02:36PM (#33011538)
I'm very curios how many developers DocuSign has.

At Bulksign https://bulksign.com, we're building a digital signatures platform which has comparable features with a tiny team.

Older »