4mnt

The thread is in the body of the tweet. Here is the start: https://twitter.com/axi0mX/status/1313620262768635904

They decided to skip a year for some rooms to allow other interesting topics to have a room.

https://twitter.com/fosdem/status/915543798763139074

Sure, LetsEncrypt can issue certificates for that domain. If you have a webserver you control that runs on port 80, you can use Certbot[1] to get a certificate for that domain. [1]: https://certbot.eff.org/

> If the cookie is set through HTTPS, the browser won't send it when loading HTTP resources.

If the cookie is set through HTTPS and does not have the Secure flag set, the browser will happily send it along when loading HTTP resources.

If you read the article, you would know that it is a terminal emulator written in javascript that gives you access to the computer the webserver runs on.

There is no change to the browser itself at all, just plain javascript that shows a terminal running on a remote computer.

> In the case of md5, creating a pair of inputs with the same hash is easier than creating another input with the same hash as something else which you didn't yourself generate.

This is the case with all instances of seeking a collision, due to the birthday paradox [0]

0: https://en.wikipedia.org/wiki/Birthday_attack

The site cannot detect that you have an extra root certificate lying around on your computer. If you visit the website without the Superfish program installed, you just evaluate the SSL settings of your browser.

That is: MITM SSH connections to these devices without getting any warning. Of course you first have to get in a position to MITM the person who connects to these devices.

Yep, she published too soon. http://www.frsag.org/pipermail/frsag/2015-January/005727.htm...

Snowden was not introduced until after OP posted this link

Yes they are. But only after they get dropped from the reflog, after 30 days by default.

Nope, the cert is valid till 2016, but the root certificate is not trusted.

With small receivers that are run by volunteers

http://www.blitzortung.org/Webpages/index.php?lang=en&page=3

That is basically the default of git push

Do you mean a directory name cannot contain a hyphen (-)? Or perhaps you did mean a slash (/)? I have never heard nor encountered about a package manager or filesystem that does not allow the use of hyphens.

Google has that too on the app page, right below the download button.

Why not just disclose it responsibly to github without using it on other people's accounts?

I don't think you can create a github repo over ssh. _If_ linus' key was stolen, he has bigger problems than just a fake github repo.

Not completely. s/minix/linux/ on the original announcement

Certainly a possibility. I couldn't find any references to linux-ng on the lkml or on https://git.kernel.org

You're not missing much. The only thing that I can see on the page is the old facebook header image, like this one [1]. There are some weird invisible elements in the source, but they aren't shown to me for some reason.

[1] http://en.wikipedia.org/wiki/File:Thefacebook.png

I was a bit suspicious about the truthyness of the article, until I saw "rabbits eat onions" at the bottom.