Readit News logoReadit News
dingaling commented on Stop Breaking TLS   markround.com/blog/2025/1... · Posted by u/todsacerdoti
jeroenhd · 6 days ago
On Android, macOS/iOS, and Windows, this is a solved problem. Only on the extremely fragmented Linux/Posix runtimes do these problems surface.

Rust's solution is "it depends". You can use OpenSSL (system or statically compiled) or rustls (statically compiled with your own CA roots, system CA roots, or WebPKI CA roots).

I'm afraid that until the *ix operating systems come out with a new POSIX-like definition that stabilises a TLS API, regardless of whether that's the OpenSSL API, the WolfSSL API, or GnuTLS, we'll have to keep hacking around in APIs that need to be compatible with arbitrary TLS configurations. Alternatively, running applications through Waydroid/Wine will work just fine if Linux runtimes can't get their shit together.

dingaling · 6 days ago
I absolutely do not want to be constrained to a single system cert store controlled by the OS vendor.
dingaling commented on Pebble Index 01 – External memory for your brain   repebble.com/blog/meet-pe... · Posted by u/freshrap6
lopis · 7 days ago
If you had read the post you would know the answer.
dingaling · 6 days ago
"This was tough to use while bicycling or carrying stuff."

That seems an incredibly limited set of use cases for the complication of adding another device to one's life.

dingaling commented on 10 Years of Let's Encrypt   letsencrypt.org/2025/12/0... · Posted by u/SGran
chippiewill · 6 days ago
Lets Encrypt are doing is because of the decision that CAs and browser makers made that it needs to be reduced (browsers have been reducing the length of certs that they trust).

The why is because it's safer: it reduces the validity period of private keys that could be used in a MITM attack if they're leaked. It also encourages automation of cert renewal which is also more secure. It also makes responding to incidents at certificate authorities more practical.

dingaling · 6 days ago
> it reduces the validity period of private keys that could be used in a MITM attack if they're leaked

If a private key is leaked, 45 days is sufficient to clean-out the accounts of all that company's customers. It might as well be 10 years.

If cert compromise is really common enough to require a response then the cert lifetime should be measured in minutes.

dingaling commented on Ireland's Inability to Defend Itself   irishpoliticsnewsletter.i... · Posted by u/arthurz
culi · 9 days ago
I assume you're referring to the 1952 agreement that the RAF is allowed to intercept unidentified or hostile aircraft in Irish airspace?

That's because the UK does not want Ireland to have an army. Ireland has a long history of standing with Native Americans, Palestinians, and other groups facing colonization. They even have a military base in Lebanon and a very long standing partnership with Hezbollah (Hezbollah was born out of the struggle to take back the bottom third of their country that was occupied by the US and Israel so they are often seen as an anti-colonial movement).

Ireland having any sort of military capacities would directly contradict UK military interests.

dingaling · 9 days ago
> Ireland having any sort of military

> capacities would directly contradict

> UK military interests.

Contradicted by the fact that the Irish military forces were entirely equipped with UK-supplied aircraft and vehicles until the 1960s, at which point Ireland turned towards France instead.

The UK never intervened to prevent Ireland acquiring any weapon system, in contrast it was Irish budget frugality that consistently undermined the military.

At present Ireland is considering the purchase of Gripen interceptors, and the UK seems at worst indifferent and probably actually quite relieved.

dingaling commented on After Windows Update, Password icon invisible, click where it used to be   support.microsoft.com/en-... · Posted by u/zdw
MrLeap · 14 days ago
I remember a different apocrypha for why they skipped from 8 to 10. They wanted avoid OS specific code that conditionally activated from the substring "windows 9" but meant for windows 95 and 98. One would imagine any code like that not being quite as helpful a few decades later.
dingaling · 14 days ago
Windows 95 and 98 VersionStrings were 4.00.nn and 4.10.nn
dingaling commented on China Has Three Reusable Rockets Ready for Their Debut Flights   china-in-space.com/p/chin... · Posted by u/speckx
tzs · 19 days ago
In https://news.ycombinator.com/item?id=46061943 danishSuri1994 said that if others like China and ESA did not also develop reusable rockets they would be priced out of orbit access entirely. I have a question about that, but their comment got killed faster than I could type and submit my question so I'll ask it a level up.

Why would not having reusable rockets price someone like China or ESA out of orbit access?

I can see how it could price them out of the business of selling orbit access to other parties, but I don't see how it would stop them from accessing orbit for their own purposes.

dingaling · 19 days ago
If a nation with RLVs can sustainably launch 10 anti-satellite interceptors per day but the nation without reusables can only launch 10 satellites per month, they're going to lose access to orbit.
dingaling commented on McDonald's is losing its low-income customers   latimes.com/business/stor... · Posted by u/PaulHoule
walthamstow · 25 days ago
I paid £5.09 for a sausage and egg mcmuffin meal with coffee and a hash brown this morning. I think that's pretty reasonable, especially for London.
dingaling · 24 days ago
£5.09 is about 25 minutes work at National Minimum Wage ( £12.21 per hour ), about 5.6% of daily income at NMW and standard working hours.

A bacon & egg McMuffin provides 336 kcal, which is 13% of an adult male's RDI. So on a purely kcals:price level it does seem to provide decent value.

dingaling commented on NTSB Preliminary Report – UPS Boeing MD-11F Crash [pdf]   ntsb.gov/Documents/Prelim... · Posted by u/gregsadetsky
barbazoo · 25 days ago
> The referenced AA Flight 191 is shockingly similar. It makes me wonder if aviation really is back sliding into a dangerous place.

I think it's cut throat capitalism at its best. Surely it was much too safe before, let's see how far back we can scale maintenance on the operations front but also how far back can you scale cost during development and production and then see where it takes us. If that changes the risk for population from 0.005 to 0.010, the shareholders won't care and it's great for profits.

I think we can see both but especially the latter with Boeing.

dingaling · 25 days ago
The entire MD-11 project was a budget-limited rush-job to try to capture some market share before the A340 and 777 came into service.

It produced an aircraft that failed to meet its performance targets, was a brute to fly and was obsolete the moment its rivals flew.

Douglas* by the early 1990s was a basket-case of warmed-over 1960s designs without the managerial courage to launch the clean-sheet project they needed to survive.

* as a division of MDC

dingaling commented on NTSB Preliminary Report – UPS Boeing MD-11F Crash [pdf]   ntsb.gov/Documents/Prelim... · Posted by u/gregsadetsky
inferiorhuman · 25 days ago
Most of the DC-10s in service in the US are used for fire fighting.
dingaling · 25 days ago
And with Omega Air, for contracted air refuelling

https://www.omegaairrefueling.com/

dingaling commented on 'Calvin and Hobbes' at 40   npr.org/2025/11/18/nx-s1-... · Posted by u/mooreds
dingaling · a month ago
It's curious that of all the famous American syndicated strips, only The Far Side, and maybe Garfield, seem to have bridged the Atlantic divide to the UK.

Maybe C&H and Peanuts were just too rooted in US suburban family culture. Dilbert had a niche following here and beyond that I struggle to even name another strip.

u/dingaling

KarmaCake day8274September 6, 2013
About
A all b bb. Ds sees
View Original