Viewing profile — metafunctor

Not impossible at all with a policy-filtering HTTPS proxy. See https://laurikari.github.io/exfilguard/ In this model, hosts don’t need any direct internet connectivity or access to…

The key itself appears to have no validity period, the validity period is only for the certificate made for the key. Maybe you could create a CSR for the key/identity and then sign…

Good point! The web is going through its own endless September. And so, it seems, is everything else. Perhaps, this commentary adds no value — just old man yells at cloud stuff.

The npm team is, frankly, a bunch of idiots for saying that. It has been obvious for TEN YEARS that the bar for publishing npm packages is far too low. That’s what made npm what it…

Welcome to the web side. Everything’s bonkers. Hard-earned software engineering truths get tossed out, because hey, wtf, I’ll just do some stuff and yippee. Feels like everyone’s s…

I never saw it as a problem for nginx to just serve web content and let certbot handle cert renewals. Whatever happened to doing one thing well and making it composable? Fat tools …

It’s quite easy to run your own DNS server — I've found it a worthwhile exercise. Of course, you’ll need a server to run it on.

Those muscle mass percentages cannot be right. How were they measured?

Sabre or Sable?

I was excited to try this, since I'm a bit tired of selecting the input manually multiple times per day. Unfortunately, connecting AirPods automatically switches the input to them,…

OK, so the defusedxml.lxml submodule is deprecated and one should use the other APIs from defusedxml instead. That does not mean that defusedxml in it's entirety would be useless.

Do you mean that it is, in fact, a mistake to use defusedxml instead of lxml in Python?

Type safe and unguessable IDs are what I've been using in my projects for the past, oh, 10 years maybe? Inspired by Stripe! In my databases, I often prefer integer primary keys for…

If they can get your sqlite files, what makes you think they wouldn't be able to get the encryption key as well?

A commonly used icon or symbol for language selection seems to be the globe symbol (U+1F310). HN seems to filter it away, though, so cannot use it in this comment.

So Orange won 12 years time to pay whatever you won in the end? That's a factor of about 2.2x, assuming 7% capital gains year-on-year. If the sums are large, it would've made a lot…

Agreed, I think this is something the English language community should solve. IMHO, I think “free” should be reserved for the wider meaning encompassing all the various aspects of…

That would make it quite easy to maliciously lock someone out. Instead locking accounts, appropriate throttling might be a better idea.

Yeah, there's no amount of dedication that will make the business fly if you stubbornly want to do “your thing”. You have to do what the market can find and is willing to pay for. …

Bugs happen also in access control. Unguessable IDs make it much harder to exploit some of those bugs. Of course the focus should be on ensuring correct access control in the first…

I've ended up implementing a layer on top of "magic" which, if magic detects application/zip, reads the zip file manifest and checks for telltale file names to reliably detect Offi…

Mistakes can happen. But if code comments are frequently not updated as the code evolves, it is a level of lazy that will probably manifest in other ways as well.

Do you think you know better than the companies developing these products and the consumers buying them? Do you believe you understand what the right products and fair prices shoul…

It's a crowded market, but it IS a market. In fact, crowded markets are the ones that work the best. If people find their app, like what they see, and are willing to pay the price,…