mmd45
Re:Pro Max 5x quota exhausted in 1.5 hours despite moderate usage
on Sunday April 12, 2026 @04:16PM (#47743993)
shouldn't compaction be interactive with the user as to what context will continue to be the most relevant in the future??? what if the harness allowed for a turn to clarify the user's expected future direction of the conversation and did the consolidation based upon the addition info?
there definitely seems to be a benefit to pruning the context and keeping the signal to noise high wrt what is still to be discussed.
Re:iOS 18 breaks IMAPS self-signed certs
on Thursday September 19, 2024 @06:56AM (#41590524)
you are assuming i have users and this is a mail server not a website which has a very different access pattern more analogous to ssh where TOFU works beautifully.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @06:36PM (#41586365)
for the use case of a single user IMAP server this is all way, way, too complicated and buys you nothing in terms of security. it's completely analogous to why we dont use CAs to validate openssh host certificates.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @05:19PM (#41585676)
bad summary. it prompted you to accept the certificate upon first use and then pinned it which is far different than what you are describing in terms of security implications.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @05:15PM (#41585632)
i saw a video on youtube where a guy intercepted https app traffic from an android app for a smart scale where the app used certificate pinning. there was some very automated tool for defeating the cert pinning. unfortunately i can't find the video link.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @05:04PM (#41585460)
how are you renewing the LE certificate if the domain is resolving to an internal ip? this seems like a big hoop to jump through.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @05:00PM (#41585415)
per apple dev forums it seems like they have a history of breaking this and then fixing it. additionally, while IMAP is broken, calendars and notes seem to work just fine so hopefully it's not deliberate.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @04:51PM (#41585306)
explain how a pinned self signed cert is insecure. i don't see it. it would seem to be more secure than one signed by a public CA that's not pinned.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @04:34PM (#41585127)
unfortunately none of that applies to my setup. my imap server lives in a dmz and doesn't have all that other jazz.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @04:21PM (#41584988)
i'm just using a hardcoded private ip to connect to the imap server. are you saying i can get a certificate with a hostname of "*" that will match ANY ip address?
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @04:10PM (#41584862)
also https://www.up-ubuntu.com/forums/thread/732409
seems like the issue is specifically with IMAP- I can confirm that calendar syncing works fine with the self signed cert.
this is really disappointing.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @04:07PM (#41584826)
I'm using a private ip over a vpn so I don't think that workaround will work for me. I don't really want a public dns record.
Re:iOS 18 breaks IMAPS self-signed certs
on Wednesday September 18, 2024 @02:29PM (#41583690)
:-(
hey lurking apple devs- can someone please escalate this?
Re:Reflections on Distrusting xz
on Wednesday April 03, 2024 @09:19AM (#39917085)
There is an interesting argument to be made that pre-JT xz code is probably pretty secure due to the fact that the threat actors would have already audited the code for existing exploits prior to exerting effort to subvert it.
Ask HN: Voice ID adoption at financial institutions
Given the inevitability of easy voice cloning[1], it seems irresponsible to be using voice as a positive authentication signal.Unfortunately, major US financial institutions seem to be ramping up adoption of this technology[2].Am I missing something?[1] https://github.com/myshell-ai/OpenVoice[2] https://www.schwab.com/voice-id[3] https://www.fidelity.com/security/fidelity-myvoice/overview
Re:A deep dive into email deliverability in 2024
on Monday April 01, 2024 @09:25AM (#39893940)
thanks, that seems promising. i will look into it.
Re:A deep dive into email deliverability in 2024
on Monday April 01, 2024 @07:17AM (#39892891)
https://github.com/trusteddomainproject/OpenARC/issues/163
https://github.com/trusteddomainproject/OpenDKIM/issues/186
OpenARC/OpenDKIM don't parse email headers to spec. Help wanted.
Re:Detroit man steals 800 gallons using Bluetooth to hack gas pumps at...
on Tuesday October 03, 2023 @09:40AM (#37751778)
maybe its an nfc hack. pretty scary how wide open it is/was:
https://www.youtube.com/watch?v=eV76vObO2IM
Re:Jiko Money Storage
on Thursday May 04, 2023 @02:06PM (#35819660)
anyone have any thoughts or experience with this?
Jiko Money Storage
Re:Europeans drain billions from banks, fed up with shrinking savings
on Thursday May 04, 2023 @02:04PM (#35819630)
i've never heard the term narrow banking, but after looking it up isn't that effectively what this company is attempting:
Re:Financial innovations brought by technology
on Friday October 29, 2021 @02:42PM (#29042118)
interersting. does mercury support bill pay? can you get a cashier's check? how long do deposited checks take to become available for withdrawal?
Re:Self directed IRAs under attack in proposed tax bill
on Thursday October 07, 2021 @11:09AM (#28787337)
The killer is the "The bill also prevents investing in an entity in which the IRA owner is an officer." which is generally how the checkbook IRA is structured (IRA owner is the Manager of the single member LLC that is wholly owned by the IRA).
Sec. 138314. Prohibition of Investment of IRA Assets in Entities in Which the Owner Has a Substantial Interest.
To prevent self-dealing, under current law prohibited transaction rules, an IRA owner cannot invest his or her IRA assets in a corporation, partnership, trust, or estate in which he or she has a 50 percent or greater interest. However, an IRA owner can invest IRA assets in a business in which he or she owns, for example, one-third of the business while also acting as the CEO. The bill adjusts the 50 percent threshold to 10 percent for investments that are not tradable on an established securities market, regardless of whether the IRA owner has a direct or indirect interest. The bill also prevents investing in an entity in which the IRA owner is an officer. Further, the bill modifies the rule to be an IRA requirement, rather than a prohibited transaction rule (i.e., in order to be an IRA, it must meet this requirement). This section generally takes effect for tax years beginning after December 31, 2021, but there is a 2-year transition period for IRAs already holding these investments
Re:Self directed IRAs under attack in proposed tax bill
on Thursday October 07, 2021 @11:08AM (#28787309)
No, the LLC is the same as the plan in terms of rules against prohibited transactions. Apple thought experiment works, but if you are personally generating revenue that moves the needle on a IRA investment that would be a no-no.
Re:Self directed IRAs under attack in proposed tax bill
on Thursday October 07, 2021 @10:57AM (#28787139)
They can easily stop the next Pete Thiel by capping the appreciated IRA balance which they have in fact added a provision for. I don't comprehend the scare tactic of killing the self-directed IRA.
Re:Self directed IRAs under attack in proposed tax bill
on Thursday October 07, 2021 @10:51AM (#28787041)
some additional information
(see page 10, part 3 for Retirement Account provisions) https://waysandmeans.house.gov/sites/democrats.waysandmeans....
https://www.irafinancialgroup.com/learn-more/podcast/self-di...
Re:Self directed IRAs under attack in proposed tax bill
on Thursday October 07, 2021 @10:47AM (#28787001)
That may be the case but they are casting a very wide net. The numbers I've seen say there are on the order of 100k-1MM self directed IRA accounts that exist. Approximately 0% of which are lucky enough to be Peter Thiel and invest in founders stock of Paypal.
Re:Self directed IRAs under attack in proposed tax bill
on Thursday October 07, 2021 @10:45AM (#28786953)
No it doesn't as that would fall under the rules for prohibited transactions of which there are strict rules and penalties. See https://www.irs.gov/retirement-plans/plan-participant-employ... .
Re:Self directed IRAs under attack in proposed tax bill
on Thursday October 07, 2021 @09:59AM (#28786335)
Self directed IRAs are commonly used with a wholly owned single member LLC to invest IRA funds into real estate related investments such as rental properties or many other types of private investments. The new proposed tax bill seems to remove the ability of the IRA owner to manage that LLC and effectively end the use of checkbook control IRAs.