Viewing profile — ralala

What is the threat model you want to mitigate using encryption at rest? Is it that a physical disk is not properly wiped after usage? Then you could just use luks and store the key…

This is where artifact binding can greatly increase the security…. Browser sends artifact to RP, RP fetches assertion from IdP via HTTPs, afterwards verifies the signature. Signatu…

OIDC is newer and many of the issues with SAML were addressed in the architecture. However I’m curious to hear which attack vectors you are thinking about.

OIDC is better when using the authorization code flow because it does not only rely on cryptography while validating the token. The relying party needs to talk to the IdP. This is …

For protecting your developer machine, devcontainers will provide at least some isolation.

I’m sticking with iShares MSCI World SRI + a small amount stock picks

Interesting read. I have just setup a very similar cluster this week: 3 node bare metal cluster in a 10G mesh network. Decided for Debian, RKE2, Calico and Longhorn. Encryption is …

Is there a solution like this which supports mobile app development? (iOS + Android). I guess USB would be needed as well.

Actually this is a EU legislation, which forces all member countries to do so.

Software development is easy, maintenance is challenging. When your system integrates with other systems and you want to make changes, it's critical to understand the details. I do…

I drive a 2023 ID.5 for 2 months and I have not faced many issues yet. Yes, the touch interface could be a bit more responsive, but I am overall very happy with the driving experie…

I have fructose malabsorption and when I eat or drink too much of it, I get brain fog (slow reaction, dizziness etc.) for one or two days. Would be interesting to see if fructose m…

I think we also have lazy evaluation, heuristics (wave-particle duality), out-of-memory killers (black holes, hawking radiation) and bandwidth limitations (speed of light). It seem…

Isn't that what conferences and journals are for? Reviewing and selecting the most important papers? When something is really solved (a solution exists without negative side-effect…

I guess you also don't need insurances for nuclear plants. Nobody will be able to pay in the worst case.

I have not looked at kitemaker yet, but we are in the same situation. On premise Jira will have to be replaced by something else. Cloud is not option due to privacy/security/compli…

I don't know exactly. There has to be enough liquidity in Bitcoin locally to find enough persons to trade with. Starting a new cryptocurrency in such a situation will be difficult …

The rising of Bitcoin can be a threat to working democracies - at least if it is used as a currency. Monetary politics are important for our society to function properly. On the ot…

Thank you for the explanations and your hard work! How stable is Ory? How often will breaking changes occur during the next months/years? Can you provide an ETA for the cloud servi…

How does Ory compare to alternatives like e.g. Keycloak and Authelia? From experience, can anyone make a recommendation for a system that can be rolled out to an organization with …

"With Starlink revenue, SpaceX will be able to do the work on life support systems and mission planning to enable a human mission by 2029. NASA could be involved as a partner, but …

I'm playing on an older PC: i5-2500k (from 2011!); 12gb RAM, Geforce 1070; 1920x1080. It works well on Ultra settings, but I have occasional tree glitches. Story and gameplay are e…

And mirroring! Reminds me of those wooden games with just four pieces.

There are currently very serious issues with the wd19tb docking station. https://www.dell.com/community/XPS/XPS-13-9300-and-WD19TB-li... This leads to random black external screens…

It's a bit unfair to compare with synchronous python. Better: FastAPI, aiohttp, Quart,....