Viewing profile — johnp_

> URL-safe-base64 And make sure to specify what exactly you mean by that. base64url-encoding is incompatible with base64+urlencoding in ~3% of cases, which is easily missed during …

Looks like Mozilla is currently working on implementing `sendmmsg` and `recvmmsg` use in neqo (Mozilla's QUIC implementation) [1]. [1] https://github.com/mozilla/neqo/issues/1693

Here's the code, for those interested in finding the bug: https://github.com/mozilla-mobile/firefox-ios/tree/main/Brow...

It says in the article > Seabed 2030 is a long-term mapping project attempting to fully chart the seafloor and reveal all features 100 meters or larger by 2030. There is an area of…

Oh, indeed, that's quite surprising. A TLSv1.3 Client Hello always contains the supported_versions extension, which should allow wireshark to label it correctly, regardless of whet…

Certainly weird that wireshark shows TLSv1 while curl shows TLSv1.3. That shouldn't happen unless something interfered with the Client Hello. (or the wireshark version is outdated)…

linux-firmware does not carry any microcode update for Renoir (yet). Or what do you mean by "TFA"? The fixed Renoir microcode should have revision >= 0x0860010b as per the kernel: …

> and if Do you mean the obvious `sudo snap set system refresh.hold="$(date --date=+100years +%Y-%m-%dT%H:%M:%S%:z)"`? (no error) edit: Ah, that silently stops working after 60 day…

That's why there's OCSP stapling and OCSP must staple. Ever seen an nginx server fail HTTPS connection exactly once after rotating the certificate? That's nginx lazily fetching the…

Here's the spec: https://html.spec.whatwg.org/multipage/input.html#attr-input... > Authors are encouraged to specify both any MIME types and any corresponding extensions when looki…

Besides all the points other people already made, the money saved by being able to switch to deploying the Starlink constellation via SuperHeavy/Starship (very likely to be cheaper…

It even seems to break inline links, like in the "split-horizon" section: > System administrators can find relevant documentation here. I'm pretty sure "here" should be a link, but…

fd -e py Also neatly bypasses the glob issue.

You could try inputting your name as [Latin Small Letter E][Combining Acute Accent]: e◌́ => é Which should keep the `e` intact, while the combining acute accent (0xCC 0x81) may "o…

Likely `dom.event.clipboardevents.enabled`: https://developer.mozilla.org/en-US/docs/Mozilla/Preferences... If someone else is in the habit of randomly selecting text and they're u…

As long as `chrome://global/content/config.xul` still exists, you can use it. I certainly do, since the new interface is horrible and Mozilla constantly dismisses the obvious usabi…

Sadly it doesn't work in Firefox after setting `privacy.resistFingerprinting` and Mozilla refuses to allow an override :(

Possibly also the IPv6 ULAs: https://en.wikipedia.org/wiki/Unique_local_address Not sure if those can be expressed in uMatrix as a prefix rule.

`privacy.resistFingerprinting.letterboxing` is currently a separate setting since it's still rough around the edges. Not sure if it works on Release, I have it set on Nightly.

It seems Mozilla is in the process[0] of moving the signature scheme to COSE, which allows timestamping[1]. A code comment[2] says that the current package format doesn't allow it.…

The video is gone (censored?), does someone have a backup copy?

> more security around the data that is used for fingerprinting, such as [...] screen size, window size Available in Nightly under a hidden boolean preference `privacy.resistFinger…