Posts by chuBb.

Re: would this be...

Too many Web developers have fooled themselves that they are full fat developers, instead of framework and runtime manipulators, so everything has to shackled by dom and accreted css knowledge and practice, with js being the hammer used to crack every nut encountered.

Frankly would hate to deal with Web developer attempts at WASM, just a shame as it goes full circle desktop front end devs are a dying breed...

Re: It's not an open source problem - you forgot only

If your trading usability for security your doing it wrong and probably making it less secure as people will actively subvert the security to make their lives easier, old chestnut of very secure building rendered moot by security being so onerous that fire escape gets blocked open to facilitate fag breaks

Tis human nature to be efficient (read as lazy) and exploit any advantage for personal gain

Re: It's not an open source problem

It's not so much a skills problem or even a project management deadline meeting corner cutting exercise. They are both symptoms however. Security is a philosophy (and possibly a religion based on reactions I've had to debates on the subject).

Much like critical thinking (hate the term, but I guess credulity needs to be taught given the obsession education has with learning without understanding), security needs to be instilled from a young age, the value of your data, how to protect your data, leading to question how data will be used, personal security (cover pin pad, avoid shoulder surfing, trust nothing that's emailed etc.) with a foundation of that any one who ends up writing systems will have a better understanding than most in the industry who grew up with computers then the Internet being a bit of a frivolous novelty; which is certainly reflected in current legislation and lack of consequence , if any of the major vendors made cars they would spend more time being recalled for public safety concerns than on the road...

Throwing money at the problem would grease the wheels of change but will do little to aid the uptake of a different way of thinking.

Nope reharper is far from stable and fast see above

Certainly not with a legacy solution upgraded through multiple versions of vs, and yes have updated all projects to the new csproj format...

Re: Cloud Explorer

Reharper is pretty much disabled in terms of features

There is a years long thread on the support forum and boils down to to it choking on mixed project types particularly Web ones which have been upgraded through multiple versions of vs.

The official line is wait for out of process version of r# but frankly they have ignored the performance issues for years and seemingly decided to write rider rather than fix the thing properly.

The fact I have such performance issues on a seriously over spec machine is laughable. It's a shame as I love the dot suite of tools (cover, memory, trace and peek) so the sub is still worth it and we have no appetite to ditch teamcity for trendier CI solutions it does what we need and is well understood internally but reharper really spoils the experience. Especially given the improvements ms have added to vs

.editorconfig files, built in useful refactoring tools (not the code suggestion crud r# adds on top), ctrl+t for type/member search, roslyn code analysis etc.

Re: Out of date building plans

Finger Mouse?

Re: Out of date building plans

In a previous life spent some time doing industrial wiring, did same but with a proper access cage on the forks, the height wasn't the issue, problem was it was the middle of the summer in a WW2 corrogated steel aircraft hanger turned into a reconstituted stone factory, and everything was 2 inchs thick with coloured cement dust.

Spent 2/3rds of the time on the ground cooling down, being hosed down and getting bollocked that the job was taking too long by the big boss, in the end i told him to get up there and show me how its done, after 10 mins, he was back down on the ground and arranging to finish up installing the highbay lights at night, was a double win because time and a half pay, and he bought me an ice cream, after he lightly cooked himself for 10 mins

Re: Out of date building plans

I got a simultaneous bollocking and commendation from the H+S guy, happy he got paid upset i did what i did lol

Re: Plot For A Film

Would write an app in visual basic.net to ping it

Re: In summary then ...

Me 2, I was living in a absolute shit hole of a flat, but the rent included electric as there was no heating, so found mining to be a good way of heating, it's not like the side is ever on a techies tower...

Had mined approx 100 coins till my hard drive made all the sounds of death, moved out not long after that and never bothered to mine again.

0 regrets if I was still in possession I would have cashed out as soon as it was worth a takeaway or a packet of fags anyway

Re: I fully support this viewpoint...

Seems fair enough, deliberately sabotaging popular widely distributed libs isn't much different to locking someone up who threatens to burn house down after lighting some small fires

Loosing write access seems sensible in this case. Your ip rights and personal freedoms are less important than your ability to commit hand grenades

Re: Spotify for open source?

I would say its easier than that. Let gh sponsors work by analysing dependencies (easiest to start with projects that are published as packages that list dependencies npm nuget rpm yum apt etc) , and divine a royalty based on distance from sponsored project the dependency is referenced in the dependency chain.

Then just credit the projects account with their share. That way the popular projects consistently feedback to the building block projects, and the low level projects included everywhere benefit from there ubiquity

Re: $300K?! At market rates?

Great make it thrice as shite instead of twice...

Re: Neither does the keycard that comes with the Tesla (require a network connection).

Sounds like Web front end coders not considering ingress bandwidth and treating network like its infinite or they shipped debug code and ddossed them selves with trace messages...

Re: openssl ca tutorial

What is difficult?

you can understand it in 10 secs

Theory

---------

generate a root cert which is arbitrarily "trusted" for use in your environment

Generate an intermediate cert which used the root to vouch for it (you could skip this but i wouldnt much easier to revoke and swap out an intermediate cert than a root)

Generate a client cert which uses the intermediate to vouch for it

Verify the client by checking each cert in the chain vouches for the one beneath it

Practical

------------

1) generate root cert using a strong cipher suite and as big a key as practical

2) generate an intermediate cert using the root cert

3) issue a cert using the intermediate for signing

learning openssl's cli takes a bit longer but conceptually its as complicated as lego

I agree doing it properly and setting the associated systems (CRL's, distribution points etc.) is a lot harder and does require indepth specialist knowledge, but getting enough of an indicative system up and running to use in a dev environment is trivial and not at all complicated

It's hard to find an os without openssl out of the box so should take you 5mins including Google time to complete an openssl ca tutorial...

Re: Was web trust ever really alive in the first place?

The ever so reliable court of Internet public opinion, just look at comodo a few years ago or anything to do with the certs stuxnet used (slightly different as it was code signing but principle is the same)

Very simply otherwise intranets wouldn't work (in house ca pretty standard for lan security) and for internal certs

Typically you add to the windows cert store, mozilla java and a few others maintain their own stores all have scriptable interfaces to make remote admin possible

Re: Nice article

All tlds are rubbish compared to the commercial cooke island tld (.co.ck)

Re: I have too much time on my hands...

A TLA