click170

You can configure most major browsers to forget HSTS entries they already know about, so to the question of who owns your browser wrt honoring HSTS, I'd say it's the user.

http://classically.me/blogs/how-clear-hsts-settings-major-br...

Though now I'm curious if Chrome can be configured to forget HSTS for Google sites.

What's the deal with Dash Charging?

I see it uses USB-C but I don't understand the difference between Dash Charging and just regular fast charging over USB-C. It feels like unnecessary confusion.

Even after Googling I'm left wondering what the difference is beyond patents - as a user why do I care about this what method it uses to charge quickly?

Just charge quickly, and do it with any (specs compliant) USB-C cable if it can be negotiated with the power brick.

This is an interesting option for a phone despite that though, I'll have to find a colleague or friend who has it to checkout the OS and inspect for bloatware but this looks promising.

I think another important difference is that humans won't get stuck in a loop asking you for clarification the same way several times, after 2 or 3 times they'll typically change behaviors. Eg they'll ask you to spell the word or respond with the not-understood word with a questioning tone to signal that they don't understand what that word means.

Completely agree.

Those who make peaceful revolution impossible make violent revolution inevitable.

Downvoted because I frequently hear this sentiment from both sides of the argument but rarely is anything more than an anecdote offered to support it. Feels more and more like a mud slinging competition instead of an assessment of merit.

It does appear to require Javascript for something as simple as search, that's disappointing. Allowing Javascript can be iffy on most sites these days, but torrent sites are one category I refuse to whitelist, so that's a deal breaker for me.

KAT and torrentz were both usable without Javascript, let's not take a step backwards in usability.

This really kills me about Backblaze. I'd love to support them, I'd prefer no other backup vendor. That's why this is so hurtful:

https://help.backblaze.com/hc/en-us/articles/217664628-Is-Ba...

Spoiler alert, the answer is a surprisingly firm no. Not even an optimistic "we're working on it!".

Doesn't even have to be "Linux support", just open an API, we'll do the rest! Use quotas for API users if the concern is around abuse, but please help us Linux folks use your service! Please!

I don't see an 'undown' link anywhere, even when clicking on the timestamp of the comment I replied to. shrugs #PoorUI

Sorry - accidental down vote while trying to upvote on mobile.

Not to be confused with Zero Days (2016), which is also worth a watch.

Edit: I mis-read, you actually are talking about Zero Days (2016), which - I meant - shouldn't be confused with an earlier documentary called Zero Days - Security Leaks For Sale.

I share your frustration and I'm interested in your work on this, if you do proceed please consider making it easy for others to follow your lead by publishing, anonymously if necessary.

I get that the intention is to make the device more secure but Google's execution on this is disappointing and lazy, and the result is that my devices no longer trust me the owner, which I don't consider acceptable given the lack of liability.

I'm curious what Apple's response will be.

The difference being that people "pirating" means (typically) that they're downloading for personal use, not for the purpose of generating revenue or profit.

These companies are getting slaps on the wrist for illegal behaviour and can simply consider it a cost of doing business unless the incentives change, eg unless the proceeds of the crime are stripped from them with additional punitive damages.

If someone just has tcpdump running this won't catch them unless they actually try to use the links or credentials they retrieved.

I like this, but from the title I expected to be able to detect that tcpdump is running, akin to what you can do with malformed ARP packets to detect a NIC in promiscuous mode.

Edit: in case anyone is wondering what I'm talking about - http://security.stackexchange.com/questions/3630/how-to-find...

This is interesting because I've had similar problems with Amazon orders that come thru Canada post. One incident I was already in the middle of the dispute process when they finally delivered it. A week after the Canada post website showed Delivered.

I originally blammed Canada post but perhaps this is an AWS shipping issue after all.

I think part of the problem is people dont complain to their bank about the lack of these features, and don't ask about them when shopping around for a new bank.

Call your bank.

Ask for these features.

What have you got to lose? They'll probably ignore you, but we have to start somewhere and asking them certainly won't make things worse.

> Why should a service, that is advert free and wholly paid for by the UK licence payers, be free to people elsewhere?

Free would be great, but for the BBC I would settle for being able to pay a fair fee for access.

On the whole I dislike the way every company has their own streaming service these days but BBC pretty consistently produces good quality content and they don't focus exclusively on entertainment, their educational shows are actually what I prefer.

I'm no expert but I can think of a couple ideas.

- stop doing exclusive agreements for a region

- explicitly exclude streaming from agreemnets that do region locking

- treat the internet as a new region entirely

Thoughts?

Edit: mobile typos & formatting

Not to mention that Facebook has intentionally changed the email address of contacts in people's phones without asking them [0].

This does not change my mind about banning all Facebook apps from my devices, it just means even less Facebook for me.

[0] http://www.cnet.com/how-to/facebook-changed-your-e-mail-addr...!

Especially after that incident where the Facebook app intentionally changed the email address of contacts in your phone to use Facebook.com email addresses instead of their real ones. All Facebook apps have been banned from all my devices since then.

Gathering license plate info? "Intercepting" cell phone pings?

On it's own, meh, but combined with this...

>> All the information is streamed to Knightscope’s cloud software and then streamed back either to the customer’s control center, or in some cases to a mobile app held by a human security guard.

Am I the only one that feels like this is a bit of a datagrab by this Knightscope company? If there's an option for purchasers to have the data streamed directly to their servers then my concern is lessened, but I'm increasingly turned off by the relentless vacuuming up of data that is becoming so prevalent in new devices these days.

This.

Whether it's what they intended to sell or not, ISPs, through their own marketing material, sell a connection to "the Internet", and unfortunately for them that term cannot fairly be applied to just Comcast's network anymore (though it would make for a comical court case).

If they can't provide what is advertised, specifically "Internet access", then it's false advertising and I expect, and will fight for, my money back.

I'm actually wondering if one of the reasons that they're having trouble buying WDC drives is because WDC keeps trying to add a clause into the purchase agreement saying BackBlaze can't release information about WDC drive failure rates. Anyone from BackBlaze able to comment on that?

I like that they've said they'll start banning the cables, but I'm disappointed that - from my reading of the article - Amazon isn't doing any testing to detect these bad cables and are instead relying on customer reviews to report bad cables. That means for most cables someone's going to have to buy a cable and have it damage their device or have the equipment and know-how to detect it ahead of time.

Having Amazon test every cable obviously doesn't scale either but couldn't they require the vendors to provide test results showing that the cable is spec compliant? Of course the vendor could forge the results, but that's intentionally malicious and this would at least catch non-malicious accidents.

This makes me think of John Oliver's last segment about science publications that show up in the media.

Thanks. I hadnt seen that.

That last comment makes me wonder if they understand the objections being raised in that ticket though.

8443 != 443

I just wish Signal was easier to get through a firewall.

"You need to open TCP 31337 and all UDP ports in order for Signal to work." Emphasis mine.

http://support.whispersystems.org/hc/en-us/articles/21369721...

When I first read that I was sure that must largely apply to the calling (voip) features, but testing showed me I was wrong. I couldn't even make messaging work through a firewall so now I sourly use Telegram instead (no private chats by default in telegram??).

BBC Horizon actually did a show on the importance of checklists and how they save lives in medical settings, and because of that I'm trying to start using checklists at work as well when practicable.

The episode is called How To Avoid Mistakes In Surgery for those interested.

Available at torrent sites near you!

>Bluetooth might eventually replace it for mainstream use cases.

As somewho who uses Bluetooth audio I strongly disagree. I think Bluetooth audio is going to remain niche until batteries get better. Who wants to have to charge their headphones or Bluetooth (often battery powered) speakers every few days?

One nit to pick is that applying traffic shaping to incoming traffic is usually called "traffic policing" in docs that go into more detail - for those looking for more info. Many docs just flatly say "QoS on incoming traffic isn't possible", which is partly true in that you have a choice of dropping traffic or accepting it, but with egress traffic you can buffer it for later.

The LARTC docs are a good read for those interested in Linux networking internals, though it is falling more and more out of date (nftables) IIRC.

This looks like a very neat tool, I love that it makes TC easier to work with, thank you!

I always assumed antivirus venders were given a copy of the list as well.

It's a way to scan millions of computers without the owners of those computers knowing they are even being checked. It's perfect.

It also begs the question can you get around detection by re-encoding the files so the hashes don't match?

It's OK to have your own definition of what 'stable' software is. For some folks, its what's on the master branch of the repo, for others its software that's been tested for years by a large community already.

Debian has a specific documented process of how their stable releases are produced, and though that can cause problems for some developers because they get bug reports for old versions, that specific documented process is part of what makes Debian special to me.

I sympathize with devs for having to put up with those bug reports, but putting messages into the software to specifically goad the OS package maintainers is just poor form. Surely there's a better way to have handled that.