ralala

What is the threat model you want to mitigate using encryption at rest? Is it that a physical disk is not properly wiped after usage? Then you could just use luks and store the key anywhere else, e.g. another machine or an external volume…

This is where artifact binding can greatly increase the security….

Browser sends artifact to RP, RP fetches assertion from IdP via HTTPs, afterwards verifies the signature.

Signature verification is not implemented correctly? The attacker still needs to break HTTPS…. And then you would have a big problem anyway.

OIDC is newer and many of the issues with SAML were addressed in the architecture. However I’m curious to hear which attack vectors you are thinking about.

OIDC is better when using the authorization code flow because it does not only rely on cryptography while validating the token. The relying party needs to talk to the IdP. This is better from a security perspective, because past vulnerabilities have shown, that implementing the cryptography right in every relying party is challenging. You can achieve similar security with SAML when using the artifact binding. Note: I work professionally with Keycloak and also offer reviews of OIDC and SAML implementations.

For protecting your developer machine, devcontainers will provide at least some isolation.

I’m sticking with iShares MSCI World SRI + a small amount stock picks

Interesting read. I have just setup a very similar cluster this week: 3 node bare metal cluster in a 10G mesh network. Decided for Debian, RKE2, Calico and Longhorn. Encryption is done using LUKS FDE. For Load Balancing I am using the HCloud Load Balancer (in TCP mode). At first I had some problems with the mesh network as the CNI would only bind to a single interface. Finally solved it using a bridge, veth and isolated ports.

Is there a solution like this which supports mobile app development? (iOS + Android). I guess USB would be needed as well.

Actually this is a EU legislation, which forces all member countries to do so.

Software development is easy, maintenance is challenging. When your system integrates with other systems and you want to make changes, it's critical to understand the details. I doubt people without IT background should be in charge of such processes.

I drive a 2023 ID.5 for 2 months and I have not faced many issues yet. Yes, the touch interface could be a bit more responsive, but I am overall very happy with the driving experience.

I have fructose malabsorption and when I eat or drink too much of it, I get brain fog (slow reaction, dizziness etc.) for one or two days. Would be interesting to see if fructose malabsorption and Alzheimer's correlate.

I think we also have lazy evaluation, heuristics (wave-particle duality), out-of-memory killers (black holes, hawking radiation) and bandwidth limitations (speed of light).

It seems obvious, hopefully it's not going to kernel panic!

Isn't that what conferences and journals are for? Reviewing and selecting the most important papers?

When something is really solved (a solution exists without negative side-effects; and this fact has been verified several times), they should indeed look for new problems.

I guess you also don't need insurances for nuclear plants. Nobody will be able to pay in the worst case.

I have not looked at kitemaker yet, but we are in the same situation. On premise Jira will have to be replaced by something else. Cloud is not option due to privacy/security/compliance reasons.

I don't know exactly. There has to be enough liquidity in Bitcoin locally to find enough persons to trade with. Starting a new cryptocurrency in such a situation will be difficult because of deflation. Deflation is extremely dangerous for the economy.

The rising of Bitcoin can be a threat to working democracies - at least if it is used as a currency. Monetary politics are important for our society to function properly. On the other hand: For broken countries, it can help the people as a temporary replacement.

Thank you for the explanations and your hard work!

How stable is Ory? How often will breaking changes occur during the next months/years? Can you provide an ETA for the cloud service?

How does Ory compare to alternatives like e.g. Keycloak and Authelia?

From experience, can anyone make a recommendation for a system that can be rolled out to an organization with confidence (long-term support, security, performance)?

"With Starlink revenue, SpaceX will be able to do the work on life support systems and mission planning to enable a human mission by 2029. NASA could be involved as a partner, but SpaceX would tolerate zero government obstacles."

I still hope such a big step will be driven by democracy.

I'm playing on an older PC: i5-2500k (from 2011!); 12gb RAM, Geforce 1070; 1920x1080. It works well on Ultra settings, but I have occasional tree glitches. Story and gameplay are excellent.

And mirroring! Reminds me of those wooden games with just four pieces.

There are currently very serious issues with the wd19tb docking station.

https://www.dell.com/community/XPS/XPS-13-9300-and-WD19TB-li...

This leads to random black external screens and network/usb disconnects. It is so unreliable that I stopped using it for real time communication. (Note: I have the xps 13 2-in1 2019 laptop, i7-1065G7)

It's a bit unfair to compare with synchronous python. Better: FastAPI, aiohttp, Quart,....

Could it be that just both, vitamin D deficiency and covid-19 risk, are much higher for people that stay inside most of the day (e.g. have office jobs)? Vitamin D is created from sunlight. Covid-19 is transmitted by aerosols. Is there additional evidence that Vitamin D supplements may help or do we just know about the correlation?

> Production wise, an economy that is not concerned with democratic institutions or reducing inequality will outperform one that is.

The question is: How can the market be adapted to create a fair, innovative and sustainable society, globally?

How can a single government force any rules with these goals without lowering the welfare of its inhabitants and thus threaten its reelection?

What you describe sounds dangerous if overdone.

Acceleration is very important, but it's even more important to be able to keep going for a long time. If you cut down Life-Balance to hard, you might give up before you reach your goal.

Thank you for your great work, Zulip is overall a very great experience!

(OT: The one thing I still miss on Android is the handling of the share Intent)

You will probably have to compile the mobile apps yourself. The Zulip docs explain this very detailed: https://zulip.readthedocs.io/en/latest/production/mobile-pus...

Another possibility is to not include content in the push messages and just send an "there is new content" using the official Zulip push service.