WhyJiffie

I’m sorry, yeah I was trying to figure that out. sorry for that. if it means anything, I’m not happy that I feel I have to find out.

your text formatting is very cool! where have you learned this style?

or use the integrated graphics on your CPU (something I believe pretty much all consumer CPUs of the last two decades have)

many ryzen CPUs don’t have integrated graphics. I think it might have become baseline from just ryzen 6000? but plenty of very still good chips were released before that. I wouldn’t trade them for an intel.

updating 5 major versions in one step? that’s brave

This is the 2nd and last time I will ever recommend Anubis anywhere at work to deal with bots because of how unprofessional, un-serious and weird others perceive it.

tell them its professional enough for kernel.org, qemu.org, the freedesktop gitlab server and several other serious software projects.

but I understand it. I just find tye priorities funny.

what kind of company is this? do you believe your work benefits the public? if yes, have a look at gandalf from nerdvpn, but I guess they’ll laugh just the same. if no, you are better off not recommending them effective bot blockers.

ddg still has results for their site, maybe they just took it down recently

I would almost suggest some kind of system where you could set aside a certain amount of money, and it would donate automatically to all your installed packages, with some kind of weighting system I suppose.

that could be a new feature in liberapay or opencollective

this year there were 2 updates to bitwarden clients that fucked up vaultwarden servers, because the bitwarden developers “accidentally” reused a variable name in the data that was unused for a few years. but vaultwarden forgot to remove it, and now it is used in a different way, and the clients bugged away so hard that you had to uninstall them, because even if you was fortunate to be able to get to your passwords list you could not get it to sync otherwise

That you didn’t need to sync it yourself?

and that you have to never deal with sync conflicts. It’s a huge deal for those who are using tech but not understanding it, and a convenience for the rest

oh right, because the TV is not available on the network when it’s sleeping.

then you could save the desired brightness into some variable, and when the TV gets turned on apply the settings. I believe HA should be able to make an event when that happens. if there’s a large delay, you could make a timer that forcibly refreshes the TV state every few seconds

did you think about automating even the switching of the brightness? HA could do this based on the day-night cycle, dawn, etc. or it could also work with a room light detector

I mean, “america” (specifically USA) bad, but that user has no idea bitwarden encrypts the password before sending it to the server.

and details: wiki.mozilla.org/…/Certificate_Transparency

this sounds important:

This information has a 10 week expiration time. That is, if 10 weeks have passed since the information has been updated (typically by updating Firefox itself), the implementation will no longer enforce certificate transparency.

this also means, it can’t truly verify SCT’s that were issued since the last browser update?

it seems Firefox started doing the CT validation too, without needing to contact the CT log service: developer.mozilla.org/…/Certificate_Transparency#…

apparently certs can have a cryptographic proof of having been included in the CT logs. but what do browsers do if the letsencrypt cert has no such proof?

if its not human readable, how will people know its the place they want to go to? I don’t think bookmarked onionsites is a particularly good idea

Actually the problem is that they are too widespread. if something happened, and they started creating fake certificates, for outside force or otherwise, they can’t just be blocked because literally half of the internet or more breaks. what’s worse, if browser vendors trued that, people would be downgrading their browser to the last version accepting it, and become exposed to publicly revealed security vulnerabilities. not all because its a bit complicated, but enough would do to have it cause an even greater problem.

It’s actually to prove that a web server belongs to (or is trusted by for delivering their content) a specific website.

qualified certificates go a step further, by proving that a web server belongs to a specific company or a real person. but that’s costly, because verification is inherently more difficult.

you don’t know how bitwarden works, do you?

which is still there if you are not using lets encrypt, because they can strongarm them to make a fake cert for your domain, and install a proxy repackaging HTTPS traffic with the fake certificate. all browsers trust the lets encrypt root certificate, so they won’t see anything suspicious.

the only thing there today to detect this (but not avoid) is certificate transparency logs. all modern certificates are required to be added to this log, for the CA to remain compliant. but browsers are not checking the logs, that would be a lot of additional traffic and how do they decide if a certificate was created maliciously? also, lets encrypt could afford being noncompliant, browser vendors can’t realistically just distrust their root certificate, many sites would become inaccessible.

the whois info for the IP might have an abuse email address, try that

that mostly matters for domains on billboards, flyers and in ads. but you’ll only see this domain in links on your computer, where it’s just a click regardless of the length.

maybe a friend has the 3d printer? also, reduce, reuse, recycle. and finally, it likely consumes less power.

what made you choose that distro?

I already considered that, and for an untrusted website I already don’t trust the content or the scripts. So it doesn’t matter if it was modified or not, it’s still untrusted.

but then why are you reading it? is it cat photos and cooking recipes only? or does it have articles about pricey things you could buy, news, life improvement tips, car and other thing repair docs/advice?

I remember reading about some kind of an alternate DNS root servers. they have some unique TLDs (sounds risky though, the possibility of future name clashes). not too popular, but it is being used. I think this is it: opennic.org

but there are more: icannwiki.org/Alternative_Roots

though, it will not salvage the .org TLD. such a shame it got to that…

I don’t agree, I think there is a difference in likely outcomes. but even without scripts, you don’t want you article’s content (text, images, statements or names) be falsified by an attacker. Unless you are just reading the article to waste time, and magically what you read will not influence your views.

If you inspect the generated timer you see the same format in the OnCalendar line.

but without the command

What do you mean by persisted? The service and timer will both be there as long as the timer doesn’t end. Which it won’t in my example.

I mean saved to a file so that it will still be there after reboot

SSL/TLS have very specific benefits. None of which matter that much for reading random articles on the web.

it is a huge benefit if a man in the middle cannot run scripts on your computer.

So I don’t see the problem with this website doing their own thing to bring attention to the potential issues of the current system.

there is no problem with that. this could work, with the required patch to firefox, also in the repo.

then why use DANE. this is just plain old TOFU