News for hackers. Stuff that matters.

nym375

Re:The Fascinating World of HTTP Strict-Transport-Security on Thursday March 30, 2023 @03:51PM (#35377955)
Not directly answering re: DNS, but even if you get correct DNS results, at the IP layer there is always a risk of BGP hijacking (https://en.wikipedia.org/wiki/BGP_hijacking#Public_incidents).
Agreed. This article doesn't try to navigate the nuance around why someone still may actually want to follow a program that sounds like disproven broscience. Whether it's about better understanding your limits, familiarizing yourself with the feel of much heavier weight, or trying to make the most of a very short workout, it often makes a lot of sense to include things that aren't the biological optimal choice.

Jeff Nippard does a much better job a presenting things as a trade-off that you should consider when choosing or designing your program.

Re:Google Pixel 7 and Pixel 7 Pro on Thursday October 06, 2022 @11:15AM (#33109286)
Includes "5 years of Pixel updates."

Great news --- long overdue!

Read the report of the problems he was trying to surface: https://www.washingtonpost.com/technology/interactive/2022/t...

This doesn't seem like he was "butthurt and caught slackin'." The tone of the report seems like he's frustrated that he was hired to do a job, and not given the resources / authority to make the necessary sweeping changes. Perhaps someone with a more political approach could have influenced leadership better. But they hired an extremely technical person, not an extremely political person.

Re:Alphabet Q2 FY2022 Earnings [pdf] on Tuesday July 26, 2022 @05:50PM (#32244532)
I think you might be mixing quarterly and yearly numbers.
Re:Benchmarking Malloc with Doom 3 on Tuesday June 07, 2022 @12:04PM (#31656333)
> I don't think Doom 3 has a benchmark mode

id Tech games have "timedemo" mode, where they replay a pre-recorded demo as fast as possible, and report how many FPS it was able to process. These were very popular benchmarks long ago.

Re:Should you use Let's Encrypt for internal hostnames? on Wednesday January 05, 2022 @12:52PM (#29812390)
You really don't actually want this. This intermediate CA would still be subject to the same extensive CAB Forum / vendor root program requirements (audited yearly via WebTrust) as a root CA. There are a ton of requirements, including mandatory response times, that inevitably makes this require a fully staffed team to operate.
Exponential backoff could DoS someone from opening their own car.
It would not surprise me if one of their signals for recommendations is whether that party has viewed your profile.
Have you tried recently? libotr version 4.0 (released last year) added handling of this very issue. Both parties need to be running >=4.0, but it shouldn't break down horribly in this scenario.