#grumbles — Public Fediverse posts

Ah yes, the classic Linux "upgrade" 🤡 that "enhances" security by ceasing to wipe encryption keys from memory. Genius! 🔒💡 Meanwhile, the tech elite #grumbles on #Mastodon, assuming anyone knows what Mathstodon is, let alone cares. 🦄📉
https://mathstodon.xyz/@iblech/116769502749142438 #LinuxUpgrade #SecurityTech #EncryptionKeys #HackerNews #ngated

Ah yes, the classic Linux "upgrade" 🤡 that "enhances" security by ceasing to wipe encryption keys from memory. Genius! 🔒💡 Meanwhile, the tech elite #grumbles on #Mastodon, assuming anyone knows what Mathstodon is, let alone cares. 🦄📉
https://mathstodon.xyz/@iblech/116769502749142438 #LinuxUpgrade #SecurityTech #EncryptionKeys #HackerNews #ngated

Sigh. No hashes for you in browserland if your page is served from HTTP (self.crypto.subtle.digest is unavailable). Seriously? What an enormous pain in the ass.

Now I need to setup SSL certs to do development which means either fighting with browsers hating self-signed, or jumping through hoops to get a cert for a non-public host, or moving my development to a VPS machine, etc.

Update: I'm not asking how to do these things (I know how), just complaining about the necessity.

#WebDev #Grumbles

Sigh. No hashes for you in browserland if your page is served from HTTP (self.crypto.subtle.digest is unavailable). Seriously? What an enormous pain in the ass.

Now I need to setup SSL certs to do development which means either fighting with browsers hating self-signed, or jumping through hoops to get a cert for a non-public host, or moving my development to a VPS machine, etc.

Update: I'm not asking how to do these things (I know how), just complaining about the necessity.

#WebDev #Grumbles

The model of distributing javascript modules either via "import it directly from this CDN that you have to hope will still be there in the future" or "checkout our source code and use some miserable javascript build system" is pretty infuriating.

This thing at least makes it possible to mirror/vendor this nonsense:
https://simonwillison.net/2023/May/2/download-esm/

#WebDev #Grumbles

The model of distributing javascript modules either via "import it directly from this CDN that you have to hope will still be there in the future" or "checkout our source code and use some miserable javascript build system" is pretty infuriating.

This thing at least makes it possible to mirror/vendor this nonsense:
https://simonwillison.net/2023/May/2/download-esm/

#WebDev #Grumbles

It'd be really nice if some of the load-bearing technologies for login/auth in the web stack (webauthn, oauth2) were supported/supportable with a lot less middleware (like, say, small, clean, zero-deps libraries).

#WebDev #Grumbles

It'd be really nice if some of the load-bearing technologies for login/auth in the web stack (webauthn, oauth2) were supported/supportable with a lot less middleware (like, say, small, clean, zero-deps libraries).

#WebDev #Grumbles

I'm having fun poking at some app coding in modern vanilla javascript this week and am once again repeatedly annoyed by the security model making many things impossible to do unless you fire up a web server.

I'd like to be able to use the browser as a host environment for "portable" local apps.

It'd be really nice if there was a way to package up a bundle of html/css/js/images/etc (say in a zip file!) and treat that as a unique same-origin environment.

#WebDev #Grumbles

I'm having fun poking at some app coding in modern vanilla javascript this week and am once again repeatedly annoyed by the security model making many things impossible to do unless you fire up a web server.

I'd like to be able to use the browser as a host environment for "portable" local apps.

It'd be really nice if there was a way to package up a bundle of html/css/js/images/etc (say in a zip file!) and treat that as a unique same-origin environment.

#WebDev #Grumbles

@blurk I Know, right?.. #InfoSec #Grumbles

Annoying. libusb requires you to open a device before reading string descriptors (necessitating you have read/write permission because libusb only opens devices RW).

On modern Linux (and I believe on Windows and OSX) this is not actually necessary and makes enumeration and reporting errors to users that much more complicated than need be.

This feature has been discussed, but there has been no forward motion, it seems:
https://github.com/libusb/libusb/issues/866

#projects #xdebug #libusb #grumbles

Annoying. libusb requires you to open a device before reading string descriptors (necessitating you have read/write permission because libusb only opens devices RW).

On modern Linux (and I believe on Windows and OSX) this is not actually necessary and makes enumeration and reporting errors to users that much more complicated than need be.

This feature has been discussed, but there has been no forward motion, it seems:
https://github.com/libusb/libusb/issues/866

#projects #xdebug #libusb #grumbles