• 0 Posts
  • 58 Comments
Joined 2 years ago
cake
Cake day: June 30th, 2023

help-circle




  • You can distribute your public key, and have people manually add it to their trust stores.
    But OSs and browsers ship with preloaded trusted certificates. This way, the owner of a preloaded trusted certificate can issue new certificates that are automatically trusted by people’s OSs and browsers.
    To become a preloaded trusted certificate owner, I imagine that there are stringent audits and security requirements. Part of that will be verifying the identity of the requester before issuing them a certificate.

    With LetsEncrypt, they either need to talk to a server hosted at the domain to retrieve a token (generated when the request is initiated).
    This proves the requester owns/controls the domain and the server (the requester has correctly set up DNS records, and placed the required token on the server). This is HTTP challenge mode.
    The other method is by a DNS challenge. The requester adds a TXT record to their nameservers with the token value, letsencrypt then inspects the DNS records for the domain and will issue a cert when it sees the token. This proves the requester owns/controls the domain.

    So, proving identity is required (otherwise anyone could generate a trusted cert for any domain). And trusted certificate issuers are required, so people don’t have to constantly import (possibly dodgy) public keys




  • The issue is that nobody trusts corporations/capitalism.
    Companies will have to increase prices due to tariffs because the line has to go up.
    And when trump implements tariffs and the (if) he folds, the prices won’t go back down. They will stay at that level. Because suddenly, C-suite get to show a huge line-go-up and they get to receive a huge bonus that reflects this 25% (well, lower. But the required rise due to tariffs suddenly being free real-estate) profit increase that they pull out of their ass.



  • Google says University of Technology Sydney.
    Adding “medical” to the Google search returns… University of Technology Sydney, and a health consultant in Australia.

    So… I’m going to go with University of Technology Sydney.
    While Google results have tanked the past few years, I can’t find a combination of keywords that even suggests some sort of sexual/urinary (“naughty bits”) infection.

    DuckDuckGo returns Ultimate Tennis Showdown.
    Adding “medical” suggests to add “syndrome” and got me to “Ulnar Tunnel Syndrome” (“ulnar neuropathy at the wrist where it passes through the ulnar tunnel”)… So, too much masturbation? I’m struggling to make it naughty



  • Default config is defined in the firmware. It can’t be deleted or changed (well, easily. I think there is a reseller option to have a custom default config).
    The “no default config” means the default config will not be applied after the reset.
    If you reset it again without checking “no default config”, then the default config will be applied.

    “No default config” is very useful for applying your own config script. It gives you a blank canvas, making scripting a lot easier!

    I have my “config.rsc” file that has the required configuration. And I have a “reset.auto.rsc” file that only has the command to reset the mikrotik with no defaults and to run the “config.rsc” script after reset.
    “filename.auto.rsc” will be executed as soon as it gets FTPd (it’s a feature of mikrotik).
    I use a bash script that FTPs the config.rsc file to the mikrotik, then the reset.auto.rsc file.
    Makes it trivial to tweak the config then apply it, and I get all the config for the devices in easy to edit/diff script files.







  • 99% of the police, yeh.
    There are a few dodgy ones. And the system generally works to get rid of them. There are miscarriages of justice, and excessive use of force.

    But, generally speaking, UK Police police by diffusing situations instead of eliminating them.
    I’ve never had a bad encounter with the police. They’ve always been helpful, had some banter, or been polite but firm.
    But I’ve never been on the wrong side of them. And I’ve never encountered them in a situation where the population is in the right but the laws are against the population (like a protest that gets “managed”). And it probably helps that I’m native etc.

    I have no doubts that it’s different for other UK residents. So, I still judge news by the ACAB.
    Withdrawing from X reinforces my beliefs that UK Police police in a good way.
    If they move to Donny’s site, then I’m cooked.



  • Hello everybody out there using minix -

    I’m doing a (free) operating system (just a hobby, won’t be big and professional like gnu) for 386(486) AT clones. This has been brewing since april, and is starting to get ready. I’d like any feedback on things people like/dislike in minix, as my OS resembles it somewhat (same physical layout of the file-system (due to practical reasons) among other things).

    I’ve currently ported bash(1.08) and gcc(1.40), and things seem to work. This implies that I’ll get something practical within a few months, and I’d like to know what features most people would want. Any suggestions are welcome, but I won’t promise I’ll implement them :-)

    Linus (torvalds@kruuna.helsinki.fi)

    PS. Yes - it’s free of any minix code, and it has a multi-threaded fs. It is NOT portable (uses 386 task switching etc), and it probably never will support anything other than AT-harddisks, as that’s all I have :-(. — Linus Torvalds[18]

    From the History of Linux wiki (https://en.wikipedia.org/wiki/History_of_Linux)

    So yeh, Linux was always free