karaziox · HackerTrans

vor 18 Tagendiscuss

They offer (extremely) discounted Claude prices but you have to go through their gateway. They subsidize part of that, and they get the low price by reselling unused Max capacity, there's been a few posts on that in the past months. People are apparently getting 90% discounts on their claude use this way, tradeoff is that you have two companies learning from your data, instead of just one. So people use the same tools they use normally, but get it for a lot cheaper

karaziox

vor 5 Monatendiscuss

This doesn't feel like a real question... Slack free tier is basically crappy Discord, limited message history, no voice channels, huddles are also behind the paying tiers. It is basically worse on all aspects unless you start paying

karaziox

vor 9 Monatendiscuss

In your example the src would be the "machine that is behind a NAT". That's the one the peer relay enable access to. And then all your other devices (that laptop) can reach it through the peer relay.

I was also a bit confused on the meaning of src/dst in the grants. The naming didn't match my thinking.

karaziox

vor 9 Jahrendiscuss

But NIST didn't make that clear. The thing they made clear is in fact the exact opposite and the OP mentions it. They called it SHA-3, saying to the world that this was a better SHA-2. If they wanted to make clear that SHA-3 wasn't to replace SHA-2, they should really have named it something else. Now everybody not knowledgeable to the details will sadly assume the 3 is better than the 2.

karaziox

vor 10 Jahrendiscuss

Because cloning the dependency is not the issue here. CocoaPods is keeping its index in a git repo that is updated by the user as a way to get the latest index. This is the repo that incur a lot of requests from everyone.

Go get on the other hand doesn't keep any index. It just uses the url to download the dependency because of the mapping "url==project name" that exists with go projects.

karaziox

vor 10 Jahrendiscuss

It will be exactly the same as 1.5.3 normally since no feature are added in those releases. The key generation problem had no visible impact on the tls negociation, it simply resolved a flaw in the key generation process.

karaziox

vor 11 Jahrendiscuss

If you can't track the binaries you are running you have a bigger problem than recompiling some of them. Security issues aren't the one in a decade thing, if you can't easily locate which code has to be updated, you are in trouble already...

karaziox

vor 11 Jahrendiscuss

Well, the specification defines two negociation procedures. You are not forced to support both, you are not even forced to support one, but then how would you make use of it? And you are also free to negociate it another way should you decide to. The spec defines the protocol, not the transport on which it is used or the way the underlying communication is established. They could have put the two negociation methods in another RFC for what it's worth, since they don't affect the inner workings of the protocol itself.

karaziox

vor 11 Jahrendiscuss

Because this one involve checking duplicates and does a fair amount of logic. When the process is crashing, all bets are off and you may not be able to allocate memory for this processing. This is why they simply dump all there is to stderr and exit.

karaziox

vor 11 Jahrendiscuss

A quick google search gave this page : https://www.cloudflare.com/ips

I think this is what you want.

karaziox

vor 12 Jahrendiscuss

They are doing it. If you have a slow connection and the video start to buffer a lot, there is a banner that appear right under the video linking to the video quality report. I saw it yesterday

comments