News for hackers. Stuff that matters.

minty_phoenix

Re:Font licensing is ill, please help heal it on Friday September 03, 2021 @11:54AM (#28405821)
Server use is typically its own license category. At the company I worked for, their server licensing was based on number of server CPUs (technically only those actually used by the service using the font) and was valid for a year meaning you’d have to re-up annually.
Re:How to split a string into an array in Bash? (2012) on Wednesday July 28, 2021 @01:02PM (#27986101)
Each of StackExchange's sub-sites has its own cookie consent management. That said, once I make my choices initially on each one, I haven't had any issues with them popping up again (I'm also signed in, which could impact things).
Re:Firefox to Discontinue Sideloaded Extensions on Friday November 01, 2019 @08:40AM (#21418073)
The original article only discusses a specific, non-standard (to me, at least – probably made more sense for IT departments) method that Mozilla is calling ‘sideloading’ will be disabled. Per the article, ‘sideloading’ is defined as putting an extension file in a special folder that results in all instances of Firefox on the machine automatically loading that extension.

In the page yorwba linked, it shows how to generate a signed XPI file that can be distributed and installed locally from that file in a more conventional manner (e.g. drag & drop the file onto Firefox’s Add-ons page).

Re:Getting Started with Security Keys on Thursday October 31, 2019 @09:42AM (#21408593)
Many services offering 2FA, esp. TOTP, will give you a set of backup codes – print/store them separately, safely (using the rule of backups). At the very least, Google does and allows you to view the existing ones and I think regenerate new ones on-demand as long as you can currently securely access your account.

The same can be done with security keys – typically you can add more than one to your account so have at least two and keep one stored safely somewhere.

Sadly, I recently set up an AWS account and, from what I could tell during that period, they support TOTP/hardware keys, but you can seemingly only pick a single 2FA method – so either TOTP or one single hardware key. That’s a service I would have expected better from (or perhaps I am misunderstanding my settings panel where I can’t find a way to add another factor – I am rather new to managing that ecosystem/account).

Re:A Message about iOS Security on Friday September 06, 2019 @01:48PM (#20897892)
I remember having been able to jailbreak my iPhone 3GS for a period of time entirely through visiting a website and letting it exploit such vulnerabilities enough to perform the task. Searching for a related article, appears to have been possible on iOS 4.0/4.0.1:

https://www.cultofmac.com/53323/jailbreakme-2-0-jailbreaks-i...

Edit: I use ‘letting’ above loosely meaning that the specific website mentioned allowed the visitor to control whether the exploit was actually executed or not.

Re:Security Checklist on Tuesday January 15, 2019 @08:46AM (#18911058)
BItwarden does offer the ability to use on-premise hosting [1] rather than using their infrastructure to store/sync your data. Admittedly, I personally use their infrastructure so I can’t speak to the experience (config/maintenance/etc.) of their self-hosted offering.

1: https://help.bitwarden.com/article/install-on-premise/

Re:F-Droid 1.0 released on Friday October 20, 2017 @09:27AM (#15515548)
Are you opposed to Google Keyboard/Gboard? It's had gesture typing for a while, and not too long ago added some nice gestures which use the spacebar to control cursor position and backspace key to delete one or more words at a time rather than character-by-character.