It would need to be through TLDs all reporting new DANE records, or DANE itself would need to change. The threat model here is the TLD was somehow unknowingly hacked and the bad DNS records are somehow not noticed. Or…
Again, I don’t get this argument. A compromised TLD absolutely kills any validation (other than EV) already. An A/AAAA can be posted for page validation or TXT for DNS validation. As far as I know, no TLD operator has…
I meant that for a compromised TLD key, the DS record at root lasts for a day. So I didn’t follow how the compromise in a theoretical DANE-only world would be inherently long-lasting. You said “no recourse,” which I…
Low TTLs aren’t incompatible with the ideal of using DNSSEC though? From what I can tell DS records typically have TTL of 1 day in the root domain. What is a difference, versus DANE, is that TLS uses CT. Compromised…
It appears to be required in the S-1. https://www.law.cornell.edu/cfr/text/17/229.407
I liked the idea conceptually of CAA record only allowing DNS validation. Then use DNSSEC. I say “conceptually” since I know: 1. Actual attacks found with CT have used compromised TLDs, which kills the whole thing…
Which userspace API was changed? Internal Kernel API changes all the time which can break proprietary drivers. But userspace API has a far higher guarantee.
I know this is true. But I don’t think “Some parts of important codebases are black boxes. Therefore it’s fine if all of that code base becomes a far bigger black box” sounds like a good argument. Also, there was…
The Windows 11 ISO on a two year old Lenovo laptop did not have the Ethernet or WiFi driver. “Have Disk” also did not work for whatever reason when I downloaded the driver to a USB drive. I had to open up a command…
The passkey method uses Bluetooth to ensure proximity.
The far bigger benefit is phishing resistance (with hardware-contained keys themselves being phishing-proof on a non-compromised system). It moves to the account recovery flows, but that can be much more difficult to…
The first FRED link shows how noisy that subgroup is. It’s bounced around with 83-84% during that time. It was 83.8% in March and 83.5% through much of 2024.
OAuth first and foremost is driven by getting secret information from, let’s say, Big Company. It’s understandable that there are many steps for some random Joe to get Google emails or Facebook DMs. OpenID piggy-backed…
When I really dove into it, I understood mostly why all the complexity was all there if I cared about data at the identity provider. When it’s only used for SSO, it’s extreme overkill.
That is for whatever it considers reverse-engineering the model to try to create a competing one.
The “enough of us” is at least a majority of voters agreeing. I’m not sure what the alternative to that is.
For doing some reporting stuff internally, there isn’t a certification. But there are definitely humans who have to certify financial statements and communications for financial offerings.
SLAAC and link-local is very different from DHCP/NAT/etc. in IPv4 world. Link-local addresses are pretty arcane in IPv4 while they are a central idea in IPv6. That’s fine. As pointed out elsewhere, DHCP was relatively…
Yeah, that’s the issue. There is a lot of boilerplate or I can ask for ideas, but outside of boilerplate the review step make generation seemingly worse.
There’s certainly a lot of uncertainty. But pro-AI posts never seem to pin themselves down on whether code checked in will be read and understood by a human. Perhaps a lot of engineers work in “vibe-codeable” domains,…
The scams are more sophisticated than getting gift cards to pay the IRS. A number saying that it’s from the bank will say they need to verify some account information. I have had to actually verify my “investment…
I’ve heard the actual OEM cost is offset by the manufacturer getting paid for all the bloatware included.
Electricity price regulation, at least for transmission, has been a thing for states for 100+ years and federally since the 1930s. Pipelines and railroads also have price regulation of some sort. Monopolies, in these…
Electric utilities face price caps and there are not electricity shortages. It depends on the level of market failure, but there are not a ton of hospitals to choose from regardless.
Medicare has overhead, but you’re not saying whether it is more than commercial insurance. The admin expense/profit portion of commercial insurers also don’t take into account provider admin costs (not to mention the…
It would need to be through TLDs all reporting new DANE records, or DANE itself would need to change. The threat model here is the TLD was somehow unknowingly hacked and the bad DNS records are somehow not noticed. Or…
Again, I don’t get this argument. A compromised TLD absolutely kills any validation (other than EV) already. An A/AAAA can be posted for page validation or TXT for DNS validation. As far as I know, no TLD operator has…
I meant that for a compromised TLD key, the DS record at root lasts for a day. So I didn’t follow how the compromise in a theoretical DANE-only world would be inherently long-lasting. You said “no recourse,” which I…
Low TTLs aren’t incompatible with the ideal of using DNSSEC though? From what I can tell DS records typically have TTL of 1 day in the root domain. What is a difference, versus DANE, is that TLS uses CT. Compromised…
It appears to be required in the S-1. https://www.law.cornell.edu/cfr/text/17/229.407
I liked the idea conceptually of CAA record only allowing DNS validation. Then use DNSSEC. I say “conceptually” since I know: 1. Actual attacks found with CT have used compromised TLDs, which kills the whole thing…
Which userspace API was changed? Internal Kernel API changes all the time which can break proprietary drivers. But userspace API has a far higher guarantee.
I know this is true. But I don’t think “Some parts of important codebases are black boxes. Therefore it’s fine if all of that code base becomes a far bigger black box” sounds like a good argument. Also, there was…
The Windows 11 ISO on a two year old Lenovo laptop did not have the Ethernet or WiFi driver. “Have Disk” also did not work for whatever reason when I downloaded the driver to a USB drive. I had to open up a command…
The passkey method uses Bluetooth to ensure proximity.
The far bigger benefit is phishing resistance (with hardware-contained keys themselves being phishing-proof on a non-compromised system). It moves to the account recovery flows, but that can be much more difficult to…
The first FRED link shows how noisy that subgroup is. It’s bounced around with 83-84% during that time. It was 83.8% in March and 83.5% through much of 2024.
OAuth first and foremost is driven by getting secret information from, let’s say, Big Company. It’s understandable that there are many steps for some random Joe to get Google emails or Facebook DMs. OpenID piggy-backed…
When I really dove into it, I understood mostly why all the complexity was all there if I cared about data at the identity provider. When it’s only used for SSO, it’s extreme overkill.
That is for whatever it considers reverse-engineering the model to try to create a competing one.
The “enough of us” is at least a majority of voters agreeing. I’m not sure what the alternative to that is.
For doing some reporting stuff internally, there isn’t a certification. But there are definitely humans who have to certify financial statements and communications for financial offerings.
SLAAC and link-local is very different from DHCP/NAT/etc. in IPv4 world. Link-local addresses are pretty arcane in IPv4 while they are a central idea in IPv6. That’s fine. As pointed out elsewhere, DHCP was relatively…
Yeah, that’s the issue. There is a lot of boilerplate or I can ask for ideas, but outside of boilerplate the review step make generation seemingly worse.
There’s certainly a lot of uncertainty. But pro-AI posts never seem to pin themselves down on whether code checked in will be read and understood by a human. Perhaps a lot of engineers work in “vibe-codeable” domains,…
The scams are more sophisticated than getting gift cards to pay the IRS. A number saying that it’s from the bank will say they need to verify some account information. I have had to actually verify my “investment…
I’ve heard the actual OEM cost is offset by the manufacturer getting paid for all the bloatware included.
Electricity price regulation, at least for transmission, has been a thing for states for 100+ years and federally since the 1930s. Pipelines and railroads also have price regulation of some sort. Monopolies, in these…
Electric utilities face price caps and there are not electricity shortages. It depends on the level of market failure, but there are not a ton of hospitals to choose from regardless.
Medicare has overhead, but you’re not saying whether it is more than commercial insurance. The admin expense/profit portion of commercial insurers also don’t take into account provider admin costs (not to mention the…