Hacker Newsnew | past | comments | ask | show | jobs | submit | MrDOS's commentslogin

Sure:

  (git ls-files; git log --grep='^Assisted-by: ' --pretty='format:' --stat --name-only | sort | uniq) | sort | uniq --repeated
...will show you the names of all 6,251 tainted files. You can `git blame` them at your leisure.

"tainted". Can you point to something in any of those 6251 files that is "slop"?

For the last several months, eTransfers initiated from my desktop browser (Firefox on Linux, same as you) have required confirmation via the RBC app on my iPhone. Definitely seems like they have multiple scales of trustworthiness for people/devices/activity. Kind of wish they'd be more transparent about what they are, but I guess that sort of transparency can easily become a vulnerability.

My phone app isn't verified, so it just sends an RCS message to my phone number. Works for now, but who knows what'll happen.

These are also obnoxious - RBC has checked whatever box makes Google's RCS web app refuse to render them, so if I'm am my computer, now I have to get up and go find my phone so that I can manually input the code.

Create a separate firefox profile, all defaults, no addons, and use that only for RBC/banking.

This can easily be launched from the command line via args, when needed.

Unless you let all the tracking scripts, and auth scripts load, it thinks you're evil.


If you're using Gmail's “Send As” feature to use a different SMTP server for outgoing mail, then yes, you must have a proper DMARC TXT record configured on the domain you send from (even if it's just `v=DMARC1; p=none`).

However, it is worth mentioning that Gmail is fully dropping the ability to use a non-Gmail SMTP server as of January: https://support.google.com/mail/answer/22370.


I think I have a Gmail SMTP server? I’m running a personal Gmail but having it send as another domain

Yeah, native clients are pretty great. Why did you think people kept risking getting banned in order to use them?

Maybe a generator sized to run a regular home in perpetuity, but I bet it's much, much less than that to have an electrician install a GenerLink and to buy a regular portable generator just powerful enough to run your fridge and freezer.

Doubtful. Doom was fully software-rendered. Quake, maybe?


All the numbers were under 256. Surely they did.


Yes, as I understand it, this sort of problem is what “Name Constraints”[0] were designed to solve. (Well, really, they were intended to be used with corporate internal CAs[1], but there's no reason they wouldn't work more broadly, too.)

[0]: https://www.rfc-editor.org/info/rfc5280/#section-4.2.1.10 [1]: https://utcc.utoronto.ca/~cks/space/blog/tech/TLSInternalCAN...


I imagine, too, that as better encoders become available, we'll be able to losslessly recompress existing JXLs, much as mozjpeg's jpegtran can losslessly recompress existing JPEGs.


Right. Although the article demonstrates the changes by making requests of a public web server, I would imagine this change has been primarily motivated by a desire to reduce overhead and latency on internal communication between microservices, which very often uses unencrypted HTTP/1 traffic.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: