pricechild

I don't think this is true.

The GPL allows you to copy & modify code for your own desires very generously.

The limitations you fear apply if you distribute the code (in source or other forms) or modifications yourself.

You can work around this by sticking rclone in the middle which does support soft delete: https://pricey.uk/blog/restic-backups-without-delete/

In short, give rclone your keys, (small ~/.rclone config file) tell restic to use an rclone backend and add an extra argument when running restic. (See the blog link above, all explained)

There's an open issue for this which doesn't seem to have moved: https://github.com/restic/restic/issues/2134 - it does have a couple of PRs linked on there which implement proper soft-delete.

Plus I believe there is at least one way in which forks may be removed en masse if the original is removed.

Valve seem to have been addressing that with their runtimes.

See https://github.com/ValveSoftware/steam-runtime

See also: https://www.theverge.com/2020/12/10/22168295/cyberpunk-2077-...

> ... a certain song (CDPR didn’t say which one) during the game’s “Braindance” sequences might trigger a Digital Millennium Copyright Act strike. That’s even if you’re using the specific in-game setting designed to toggle off copyrighted music for this exact reason.

I think that's a perfectly reasonable stance for more physical businesses, e.g. shipping products.

Really though, how does it work for a business like this? How do you not serve a specific country on the internet? I'm not aware of any technical solution to this - geoip databases simply aren't accurate.

For businesses where most customers pay, perhaps you can gate the site and verify payment details but that plainly doesn't work for the business model we're discussing as most people surely don't pay anything by design? This isn't Netflix?

Should they also comply with $pick_a_dictatorship_you_find_reprehensible 's laws?

Edit: The comment I replied to has been edited and originally explained the owner was Canadian but serves US customers and so should abide by US law.

I don't want to claim to agree or disagree, I'm just not sure how to work out what's right.

Yep, might also need to set the browser agent to a chromebook. Haven't tested it recently but it worked well enough a few weeks ago.

Cool, sorry to put words in your mouth.

I guess the simple answer to the GP is "Availability is likely sacrificed", and the clue's in the submission title being all about consistency. I haven't looked too deep into it and am sure there are also still Consistency sacrifices too.

I'm still a little niggled though... "almost certainly not fully partition tolerant at the node level and requires some sort of quorum" - what does this actually mean? I'm confused why you raise the tolerance of a single node to partitions, when the partitions by definition require >1 node?

"almost certainly not fully partition tolerant at the node level"

Whoa hang on! You can't just say you're not tolerant of partitions...

I'm struggling to find the best post on aphyr.com about this but https://aphyr.com/posts/325-comments-on-you-do-it-to is a good one, specifically the line:

"CP and AP are upper bounds: systems can provide C or A during a partition, but might provide neither."

In short, Partitions happen, no matter what. No really, when you have multiple nodes they happen, you must tolerate them. You can't have CA.

Probably best you don't look into the security of other manufacturer's keyless entry systems...

Many people refer to it as "relay theft" since historically it's often just a matter of relaying/repeating a signal - there may be no real authentication involved.

Around physical security, I'm often reminded that "locks are for honest thieves".

I've been a (sometimes leading) member of multiple groups with "counter bad speech with good speech" ideals and have often wondered whether it really is the best way. As time goes on it feels ever more futile? I guess the groups are still around, so it's not impossible.

I found myself rewatching "Hated in the Nation" recently which gave me shivers. Obviously we're not there yet but I feel there's an argument to be made that "targets" lose livelihoods these days, not lives? Somehow I doubt the "twist" will ever come close to reality.

I bet we'd both seriously consider (if not prefer) sqlite over postgres in a bunch of scenarios?

I'm assuming you've seen https://addons.mozilla.org/en-GB/firefox/addon/multi-account... ?

It doesn't work in exactly the same way - you don't by default get a different window per-profile. Instead, tabs get a different colour for each.

It's been a while... but I'm pretty sure the opening of the book explained that there was a theory that should both the question and the answer exist in the same universe, it would instantly collapse on itself and begin anew.

There was also a theory that this had already happened.

The number seemed to reduce from his reporting on day 9 but day 10's report gives a clarification that there's another room with a few more.

On iOS maybe, but there's no problem installing 3rd party app stores on Android without rooting. See for example F-Droid.

Recent versions of Android have also improved the permissions model... you can specify what apps (e.g. F-Droid) are allowed to install other apps. You don't need to add a blanket allow forever.

Which RFC spec? Not 2822?

> providers/servers should ignore everything from the + to the @

Why? I'm not sure it has ever been a standard and it's certainly not a default implementation for most providers?

Related, though not necessarily in reply:

HSBC in the UK have a system they call "Voice ID" which claims to authenticate you by your voice: https://www.hsbc.co.uk/ways-to-bank/phone-banking/

I've not enrolled...

Also a massive fan of this project - seems a no brainier compared to the original for personal use.

My big recommendation is to backup the binary at the same time as your sql backup.

They've got a github sponsors link too FWIW.

The UK PM did tweet images of cabinet meetings containing the id, albeit after the meetings were finished. This turned into a few security stories e.g. https://www.theverge.com/2020/4/1/21202584/zoom-security-pri...

At the time, people were (at least) less aware of the password options for zoom calls, so it was easy to hijack meetings knowing only that id if the host wasn't careful.

I don't think you can be faulted for expecting this to have happened again.

I would be more sympathetic to this plan if it were also tied to update status.

Imagine manufacturers having the incentive to issue monthly security updates, else their users get very angry they can't watch Netflix/log into their bank app/use google pay...

Would I be right if I guessed you have a development background?

For reference, I have an ops background.

I think the point was that most u2f implementations around don't just allow OTP as backups... they require you to set up OTP first before u2f can be enabled.

It does make a bit of sense. Users can't be trusted not to lose their single token. But rarely is the option to enrol a second u2f key as backup permitted.

It looks very relevant and has more features?

Check out https://kubernetes.io/docs/concepts/configuration/secret/#ri... - this isn't free.

I can confirm it's NSF(my)W in 21st century Old England.

> 0. Forget about tracking things down to the dollar, or even the tens of dollars. That level of precision is unnecessary. If a coffee here or there is going to break your budget, it's already broken and you need to go in to panic mode.

I use Homebank[1] which has pretty useful auto-assignment rules. I then have vague categories - think groceries, lunch & dining (e.g. buying lunch is more luxurious than buying lunch and dining is even more extravagant)

Every couple of weeks I import my statements and have a quick look at anything that wasn't auto-assigned - there's usually a couple of things and I add these, based on the merchant name or description, never to worry about again.

I figure this gives me the best of both worlds.

The only reason this small amount of work works for me is that I don't have to pay cash for much. When I do, it's unique enough I remember and categorise it, no biggy. I understand this wouldn't work for most though.

I wouldn't want to lose track of the small things, as they do add up! Keeping the categories loose (and not caring about the difference between coffee and a sandwich) makes it work.

"Look after the pennies and the pounds will look after themselves." as my grandma always says.

[1] http://homebank.free.fr/en/

That's a brilliant tip, thank you!