Viewing profile — brasic

The web-flow signing system is for users’ convenience in places where it’s not feasible to sign the commit with their own private key: commits made in the web interface or on an ep…

The research you do in that scenario would just tell you the prices which shares had actually changed hands at. A decentralized market-based price discovery mechanism cannot be con…

> but you still need a Personal Access Token to integrate pull requests and issues with your Git client (Nitpick from a former GH employee) PATs really are almost exclusively inten…

Thanks for the links! I guess I shouldn’t be surprised that “E2E” doesn’t mean much for a meta service.

Yep, to be clear I was agreeing with lolinder. I would have posted top level but they had already expressed almost exactly my objection to the article so I replied to avoid redunda…

It sounds almost exactly like the mechanics of a session cookie as implemented on nearly every website on earth. Exchange a password for a bearer credential that is randomly chosen…

“Please read my rant about how this useless hair-shirt I wear to clear first party cookies too often breaks the web (for me)” > the web has no notion of a “device”, and this is a v…

Mr. President, we must not allow a mutant AI super soldier gap!

It doesn’t show as flagged for me. Time heals all wounds, if your comment is not objectionable it will usually be vouched for eventually. Which is one of the reasons it’s a rule he…

What do you mean? WhatsApp rolled out E2E encryption between 2014 and 2016. It’s by far the largest messaging service that is e2e encrypted by default. I think it’s more than fair …

Process separation was already in place. The PKCS#11 library is loaded by a long lived helper process, not ssh-agent itself. > (Note to the curious readers: for security reasons, a…

How would this even be mitigated while preserving the (wacky) existing support for runtime-selected PKCS#11 provider libraries? It strikes me that the most compatible way might be …

Pre-acquisition WhatsApp was built using Erlang and had an impressively large user-to-server ratio IIRC. I expect that since then things have mostly been rebuilt to use existing me…

Glad to see a custom merge driver being used here - they’re one of the most powerful of git’s obscure features. Large teams working on a monorepo inevitably start noticing that par…

From OP: > Now with all those aptitude training [...] that require you to turn on your webcam They are referring to an automated personality or skills test to screen candidates. Th…

The conflation of “spyware” ie tracking for monetization purposes with telemetry used by developers to ensure the health of production systems is foolish and harmful. Homebrew is a…

I assume OP was referring to “source available” schemes where the source is published or sometimes selectively disclosed but not licensed for anything other than review, ie you lac…

I’ve done nothing of the sort. As I said throughout this thread, the injunction prohibits any communications based on a vague and subjective content or motive between a group of ap…

The actual letter is here: https://twitter.com/Dexerto/status/1677027980940398599 edit: It looks like this was already submitted and I missed it: https://news.ycombinator.com/item?…

Adding a list of carve outs doesn’t make the ban ok.

Thank you. The real issue here is a small number of companies have become the defacto gatekeepers of a large amount of public discourse. That’s a major problem that this debate is …

A narrowly tailored prohibition on specific speech aimed at specific government officials may be permissable in some cases. This injunction is carelessly worded to apply to million…