Viewing profile — profmonocle

A federal court, sure. But this was a state court ruling on a state law.

> It operates in Texas if it is serving Texas users. What do you mean "serves"? Does that just mean not actively blocking users from Texas? Allowing your web site to be accessible …

Replace "climb the social ladder and have power and influence" with "be able to afford a home, have kids, and go on vacation occasionally." It's become very difficult to have even …

Even if example.com is unsigned, the delegation from .com to example.com will still be signed (including an attestation that example.com is unsigned). So lack of DNSSEC adoption by…

It's not like the long-haul fiber not owned by FAANG is a public utility, at least not in most places. Traffic that goes over "the Internet" traverses some mix of your ISP's fiber,…

Possibly naive question, why should Wikimedia do anything at all? Do they have a legal presence in the UK? If not, why not just say "we aren't a UK based organization so we have no…

Assuming that RFC1918 addresses mean "local" network is wrong. It means "private". Many large enterprises use RFC1918 for private, internal web sites. One internal site I spend hou…

I don't think OP was specifically stating we need to save these specific jobs, rather they were pointing out the interconnected nature of the economy. Less importing hurts the work…

I'm fine with this as long as they include the tariff in the listed price. I'm worried businesses are going to use tariffs as an excuse to have a fake list price, then hit you with…

> 4Chan's "Not your personal army" mentality vs. the widespread doxxing/"call their place of employment!" witch hunts That's too generous. "Not your personal army" started because …

When the first-gen iPhone was out there was a TIFF vulnerability so bad that you could jailbreak an iPhone just by visiting a specific web site. I remember going to Best Buy and se…

I would also say don't run ghostscript with the same permissions as the web server, especially not if you can just hand it your PDF through stdin and take a PNG through stdout. San…

There are portable SCIFs, basically specially designed trailers, to allow senior staff to communicate securely on the road. It's very likely Vance had one of these nearby.

In the early days of the iPhone, there was a vulnerability that allowed you to jailbreak your phone by visiting a specific web site. IIRC it was some vulnerability in the TIFF hand…

Endpoint integrity is also critical. If Apple or Google were compromised, they could silently push an update that replaces the real Signal app with a modified version that forwards…

Treating a proprietary API as a standard is risky - this is a good example of why. From Amazon's point of view there's no reason to keep the S3 SDK backwards compatible with old ve…

Who is this actually for? It seems like most people who need private security need it on an ongoing basis, not just for a one-off thing. Even if the need arises suddenly (i.e. a st…

Chrome launched their own root program a couple years ago: https://blog.chromium.org/2022/09/announcing-launch-of-chrom...

And it's worth noting that you can't just ignore this problem if you're using websockets - websockets disconnect sometimes for a variety of reasons. It may be less frequent than a …

The next long-polling request can include a list of the ID(s) returned in the previous request. You keep the messages in the queue until you get the next request ack'ing them.

The problem is people don't really see wage increases and inflation as things that balance each other out. They think of raises as something earned that will improve their lifestyl…

> if LLM training involves merely reading a dataset, but it is not strictly necessary to copy, or even store it verbatim to be useful, then does it even fall under copyright protec…

Would that matter if the company wants to do business in countries with more restrictive laws? I.E. if I wrote my own spin-off of a popular book series, which was somehow considere…

I'm honestly surprised that the US doesn't have a legal framework to force ISPs to block IPs / DNS hostnames. I've been expecting that for 10+ years now, but it hasn't happened.

`sudo tcpdump port 53` says yes, they do use unencrypted DNS. AFAIK Chrome has a hardcoded list of DNS servers which offer encrypted DNS. I.E. if your DHCP server tells your PC to …