News for hackers. Stuff that matters.

lwheelock

Re:EU Passes Law to Switch iPhone to USB-C by End of 2024 on Tuesday October 04, 2022 @07:19AM (#33078820)
I don’t understand it. Apple has only changed their connector once since 2007. Where I have untold number of USB devices that are either A, Mini, Micro, or now C.
Re:How Silicon Valley destroyed Parler on Tuesday January 12, 2021 @03:05PM (#25752686)
> Fifty days — September 17th to November 3rd. > > Let us once again summon the sweet, revolutionary nonviolence that was our calling card in Zuccotti Park.

If your stated intent explicitly calls for ‘non-violence’, I expect this doesn’t violate ToS despite potential inferences from the sensational branding.

I never heard of this before so I don’t even know what happened on Sept. 17. Was it violent?

Irony aside, there is some degree of credibility lost when offering a critical opinion on availability and your cloud hosted site throws a 502
Re:GitHub isn't fun anymore on Tuesday June 16, 2020 @11:27PM (#23547415)
> This would genuinely make me migrate off github permanently, both for personal projects and work.

A-men.

That’s exactly what the dissenting opinion says. You should read it fully so that you don’t confuse their argument with “my claim”.
I take their meaning as; The court’s role is to interpret the law in letter and spirit at the time at which it was enacted. It is not to invent legality or update definitions with modern social norms.

The argument in dissent is that none of the members of either house or senate intended “sex” to include orientation or identity in 1964. Despite society having a different opinion on that today, redefining “sex” is not the courts prerogative.

Re:Capitol Hill Autonomous Zone on Friday June 12, 2020 @10:56AM (#23499852)
With what logic is it “safe to assume that”?

Police presence ergo more rape?

Perfectly reasonable if granted in the 1950s.
Re:Ask HN: What skills to acquire in 2019? on Wednesday December 26, 2018 @06:03PM (#18765645)
Leadership skills.

Whether or not you need them today or not, whether you want to be in a leadership role soon or not, they are essential for anyone seeking to progress and you can’t start too soon.

There are many many ways to approach this and I’ll just offer two book titles that I believe would be beneficial.

1. Start with Why 2. Extreme Ownership

Re:DNS Queries over HTTPS on Monday November 26, 2018 @11:03AM (#18534236)
Certainly could. My assumption would be that the client implementation would have a way to exclude specific domains.
Re:DNS Queries over HTTPS on Monday November 26, 2018 @10:53AM (#18534147)
I know your pain. This is a big issue especially with GDPR kicking in.

Security teams have competing directives.

Board & Investors: “Prevent customer data exfiltration”

Privacy / Legal: “Employee activity monitoring Violates our regulatory obligations”

HR: “BYOD is essential to talent retention, cultural comfort, and workforce optimization”

Employees: “I refuse to use VDI or Jump Hosts”

Re:DNS Queries over HTTPS on Monday November 26, 2018 @10:35AM (#18534026)
Not necessarily, it depends on the egress architecture. There are ways to do corporate monitoring that cannot be done by your ISP.

Web content filters (aka Proxies) in a transparent mode deployment that are not performing TLS interception would not be able to monitor these queries if wrapped in TLS.

However, an explicit mode deployment and all 80/443 traffic enforced by an egress firewall through the proxy that was performing TLS interception can still monitor this traffic. In fact, even if you’re not brokering TLS, the GET method described can still leak the query (but not response) unless your client uses tunneling (ie. CONNECT method).

ISPs can’t force you to use an explicit proxy, but corporations can.

Re:Data Center TCP: TCP Congestion Control for Data Centers on Wednesday October 18, 2017 @05:47AM (#15497927)
How is this practical considering known incompatibilities with traditional ECN and most enterprise environments include inter connectivity with systems out of the “controlled environment”?

The demand for this type of congestion control is seemingly driven by top of rack topology used in cloud architecture.

It would then stand to reason that hardware manufacturers would better solve variable queuing requirements in the switch than developing protocol support known to have a major incompatibility and potentially introduce interoperability problems between vendors in mixed networks.