usr-local-ΕΨΗΕΛΩΝ

general recent conversations

Discussion on answer by CBHacking: Wh…

Imported from a comment discussion on security.stackexchange.c...

Oct 29, 2021 11:15

@Ferrybig1 likely the answerer referred to the PIN code. In Europe, all SIMs are sold with PIN enabled. "most users" (unsourced, correct) will remove the PIN protection

Discussion on question by Buraian: Wh…

Imported from a comment discussion on law.stackexchange.com/qu...

usr-local-ΕΨΗΕΛΩΝ

Aug 19, 2021 20:22

Christianity never banned homosexuality, at least officially. Unlike Islam, where Quran explicitly (despite I am struggling to find a quote) considers it a sin, there no explicit ban in the Gospels. Historically, it was banned by the people's culture (so called "christian morality") and by influence/effect of the Vatican authorities (at least for the Catholicism). But has no ground in the Books

Discussion on question by pigeonburge…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Aug 18, 2021 12:14

@RoryAlsop and that is IMO the reasons why "influencers" own such a terrible name

usr-local-ΕΨΗΕΛΩΝ

Aug 18, 2021 12:13

@pigeonburger ads exist for a legitimate reason (help small businesses grow by providing services for "free") but adblockers exists for another good reason (if a user just doesn't like ads you can't force them to buy a product they will never buy). That said, I live in a country where weapons are mostly prohibited: a pigeon pointing a gun to me is the worst mean of communication to convince me to disable my adblocker. Because of that pigeon, I am proud to block ads

Discussion on answer by Andrew: How d…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Jul 2, 2021 14:50

I had to use the Ingress sticker after discovering my bag model is very popular. The most unique the sticker/ribbon/tape/decoration is, the lesser chances you'll have to discuss with other passengers about whose bag is that

Discussion on answer by ThoriumBR: Se…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Mar 19, 2021 12:20

Use an automated pipeline to deploy only whitelist of files from your repository. Namely, your pipeline will checkout the correct branch and publish a zip artifact not including hidden files, which .git is a great representative. The zip is collected by the deploy pipeline and deployed to the server. I assume you have a build pipeline that at bare minimum runs a bit of unit testing/linting on the code

Discussion on question by usr-local-Ε…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Jan 26, 2021 21:25

@RobbieGoodwin why don't you open a full question about it?

usr-local-ΕΨΗΕΛΩΝ

Jan 26, 2021 21:25

@AndrewGrimm sorry but the Covid pandemic is out of scope as it's temporary

Discussion on answer by Mike Ounswort…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Nov 25, 2020 07:34

And more, the OP is likely Swedish, so there is no need to use FIPS within EU Government compliance, not to mention civilian appliances

Discussion on question by gerrit: Are…

Imported from a comment discussion on politics.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Nov 6, 2020 00:19

or where any precincts with 100% for any candidate must be grouped after the election with others ==> Rules must be set in advance. Precints must be defined earlier to voting. Once vote occurred and someone discovered a precinct scored 100%, there is no way to hide the result. Unless one wants to apply censorship to information, which doesn't fit best with democracy.

Discussion on question by csrowell: I…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Jan 20, 2020 14:51

Following is just a comment: I don't get upset when a website tells me me list of allowed/disallowed characters, it makes me feel more comfortable that the site is (trying to) implement security correctly. What makes me upset is when they disclose a maximum password length which reveals possible security holes. See also my favourite post security.stackexchange.com/a/33471

Discussion on answer by Anders: Poor …

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Jan 18, 2020 16:27

"Overly broad catch statement that catch everything could lead to security critical exceptions being glossed over." (emphasis mine) - In my experience, the worst is not catching the generic Exception, but programmers not being educated to understand which exceptions are generated from attacks or in general which one are related to security.

Discussion on question by Marc: How a…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Dec 23, 2019 16:32

Considering that you are using reCaptcha, are you sure that the alleged attacker is attacking you with a botnet instead of a human farm?

Discussion on question by RyanfaeScot…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Sep 27, 2019 11:15

Being unable to trust the police is a serious issue that goes far beyond the scope of this question.

usr-local-ΕΨΗΕΛΩΝ

Sep 27, 2019 11:15

I would point that the episode(s) cited in the linked article occurred in Tunisia. So, for those who suggested 'calling the police' consider that it might not be a fast way of dispute resolution. Also consider that in "weaker-governance" countries chances are that the police officers are "friend" with the locals and will likely support them in doing legal statements (in practice, an offcer could fraudulently suggest you to pay to avoid jail etc.)

usr-local-ΕΨΗΕΛΩΝ

Sep 27, 2019 11:15

Comment/answer: this is not cited in the article, but chances are that the claims against the tourists might just be a scam. A way to get quick dirty money twice. Once from the tourist, and once from the travel operator, in the event they pay their bills, even partially. I currently have no evidence, but just asking for money to leave without plenties of paperwork clearly sounds like a way to get the money twice.

Discussion on question by zsqlman: RA…

Imported from a comment discussion on dba.stackexchange.com/qu...

usr-local-ΕΨΗΕΛΩΝ

Aug 29, 2019 21:56

I would humbly suggest that a question about the RAID-ing of a server machine should always be posted on ServerFault, no matter the server is running a DBMS cluster or anything else.

Discussion on question by jcaron: In …

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Aug 21, 2019 15:05

To all that mention what3words: are you sure that the emergency operator in Italy are equipped with software to decode what3words into coordinates? They might just need internet access to what3words.com, but what if their network is simply firewalled against a whitelist? Or air-gapped?

usr-local-ΕΨΗΕΛΩΝ

Aug 21, 2019 15:05

Even if AML was active in Italy, and in that location in particular, it took 45 minutes for the bleeding to kill Mr. Gautier, according to early investigations

Discussion on answer by F. Hauri: How…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Jul 25, 2019 23:34

Correct, but having to accept a new CA every (say) week because browsers are blacklisting all them makes user frustrated, and that is probably what privacy advocates might want.

usr-local-ΕΨΗΕΛΩΝ

Jul 25, 2019 23:34

I think we are on different pages. Anyway, a government has to issue a new CA, not a new certificate, every day. Mozilla is discussing about blacklisting the whole CA (qca.kz/qazca.cer). If government wants to bypass the blacklist by issuing a new CA, it won't be recognized by browsers. They will have to tell the population to "accept" / "trust" a new certificate every day in that scenario.

usr-local-ΕΨΗΕΛΩΝ

Jul 25, 2019 23:34

Scenario B: a government demands a national CA to issue a certificate for a new intermediate CA that is to be used for HTTPS filtering. Browser consortiums will reject the original national root CA as soon as they find out. So any commercial CA who doesn't want to go bankrupt in two days will likely act (only thing that comes in my mind is an umbrella gesture, but you can't say umbrella to a court). Anyway this goes beyond scope

usr-local-ΕΨΗΕΛΩΝ

Jul 25, 2019 23:34

@F.Hauri "to watch students activities". While Swiss is not EU, thus no GDPR, and while the sysop has the tech power to watch students, could it just be that SSL bump was used to 1) filter traffic based on fine-grained URL and/or 2) filter basing on content and/or 3) scan downloads for malware instead of 4) threatening students that were looking on (somehow educational according to their age) videos on example.xxx from the facilities? My comments are not to defend Kazaki actions in any manner

usr-local-ΕΨΗΕΛΩΝ

Jul 25, 2019 23:34

(I have reviewed the Mozilla bug you kindly linked, it's my strong understanding that such certificate is currently unstrusted and candidate to complete blacklist)

usr-local-ΕΨΗΕΛΩΝ

Jul 25, 2019 23:34

With my sentence I meant that an untrusted certificate should never be allowed in the first place into the store rather than be removed afterwards. With regards to the Kazaki-gate, the certificate imposed by regulator is not (AFAIK) part of the standard Microsoft/Mozilla trust lists, as when you attempt to do anything your browser will stop with a huge certificate prompt. Who manage trust lists (Mozilla, MS, Google...) would never ever allow a CA that issue SSL proxy certificates into such default lists

usr-local-ΕΨΗΕΛΩΝ

Jul 25, 2019 23:34

"Go to your browser ... delete unwanted certificates": better actually never trust them upfront

Discussion on question by DavGin: How…

Imported from a comment discussion on workplace.stackexchange....

usr-local-ΕΨΗΕΛΩΝ

Jun 19, 2019 15:29

Seems not drinking coffee looks weird, and I was no more invited to such breaks ==> have you ever tried to drink something else, but actually drink? Or grab a cookie? Nuts? Rather than keep standing with a bored face

Discussion on question by Feuermurmel…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Jun 5, 2019 12:39

Additional comment: did you register on the legitimate homeaway.com before getting contacted by the alleged Homeaway? If you register on the original HomeAway, do you have access to the same house listing?

Discussion on question by Draken: Why…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

May 14, 2019 22:04

@ToddWilcox in Europe train take kilometres too to stop, normally 1245 metres according to speed. Immediate was meant to the activation of the emergency brake. We use an electronic signaling system that is placed at enough distance from the crossing. If the barrier is failed, the light is red and if the train crosses the red its emergency brakes activate immediately on all carriages.

usr-local-ΕΨΗΕΛΩΝ

May 14, 2019 22:04

Really????? Don't train barriers have plenties of redundant safety system in the USA? I expect that a power or mechanical failure preventing the arm from lowering and the car lights/alers to trigger causes the train light to RED STOP. And if the train driver happens to ignore that red on his side the train should immediately halt to emergency. Indeed, the federal rule depicted in the answer is another level of safety redundancy

Discussion on question by Franck Dern…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Feb 23, 2019 23:43

Another comment, more political, is that the speed limit reduction could be planned as an act of disincentive towards private mobility in favour of public transport, in particular trains. But speed limits apply to coaches too. The subject is more complex, I wanted to extra-simplify

usr-local-ΕΨΗΕΛΩΝ

Feb 23, 2019 23:43

As an additional comment, electric cars are not really clean as they claim. A gasoline/diesel engine produces pollution by the time it runs, but the electricity used to power electric cars produced pollution when it was made at the plant (unless the electricity network is fully green etc.)

usr-local-ΕΨΗΕΛΩΝ

Feb 23, 2019 23:43

@FranckDernoncourt what I wanted to say that the ticket processing has to be done by a human or by a completely different ANPR-based system, which is not sold on the shelf round the corner

usr-local-ΕΨΗΕΛΩΝ

Feb 23, 2019 23:43

They must apply to all vehicles under 1) equality provision and 2) speeding machines must be set to only one speed, then tickets should be separated from wheat and chaff. This is not what speeding machines are capable of.

Discussion on answer by Philip Kendal…

Imported from a comment discussion on workplace.stackexchange....

usr-local-ΕΨΗΕΛΩΝ

Jan 19, 2019 07:21

@Michael even if you have felt all your expectations betrayed, that is no excuse to have a poor (in the sense of performance) candidate screwed out and stranded in an airport. You (the company) invested money in interviewing this candidate, you must fulfil your duty and have him back home. Every suggestion on "phone screening first" is a very good advice for future interviews. The whole matter, if true, sounds like personal revenge against OP.

Discussion on question by Suzan: What…

Imported from a comment discussion on workplace.stackexchange....

usr-local-ΕΨΗΕΛΩΝ

Jan 12, 2019 22:17

Comment/reminder: situations like this often occurs in countries with strict labour regulation by means of unethical employer in order to bypass the laws. The employee is demanded to sign blank paper that will be later printed into a post-dated resignation letter, just in case law forbids (or makes it expensive) to fire the employee. A sad example is the one of women once they disclose to be pregnant.

Discussion on question by ThePassenge…

Imported from a comment discussion on workplace.stackexchange....

usr-local-ΕΨΗΕΛΩΝ

Dec 4, 2018 05:19

This might not happen in countries like Italy: national regulation dictates working hours and the possibility to apply flexibility depending on your role ("contract level"). Employees do normally work 9-13/14-18. Managers may have certain level of flexibility. Excecutives do not have generally working hours and clock-ins. First application that comes in my mind where work hours matter: workers benefit from government insurance against injuries during the home-office commute, and being in the street at 9:15AM can at very minimum result in investigation and questions (one's to justify)

Discussion on answer by Guntram Blohm…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Nov 29, 2018 10:14

Unfortunately, that is the standard of corporate/government organizations. I am talking from experience of being a supplier, but I also know how a number of government approach supply chain problem (and security is just one of the reasons, other is public auditability and tendering, procurement)

usr-local-ΕΨΗΕΛΩΝ

Nov 29, 2018 10:14

Rocket scientists may very well be obliged to retrieve hardware from their supply chain which has been previously vetted by the employer after several security inspections. This may include government-level security clearance

Discussion on answer by Daisetsu: Wha…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Nov 6, 2018 22:23

That sounds great. My conclusion is that account activations shouldn't be done via HTTP GET. Actually, that violates the HTTP verb semantics now that I think

usr-local-ΕΨΗΕΛΩΝ

Nov 6, 2018 22:23

Does returning a redirect (302) to the real activation controller solves antivirus-prefetch problem? I mean... do them follow all redirects until they land on a page?

Discussion on question by sd7fsjdf887…

Imported from a comment discussion on workplace.stackexchange....

usr-local-ΕΨΗΕΛΩΝ

Oct 3, 2018 19:03

I cant' find a question that was very similar to this. Anyway the suggested answer was to speak to manager, plead sorry, and have the manager sent an email "The issue was addressed and will not happen again".

@JoErNanO ok, so when you call, say, at 2PM asking for taxi at 8PM I consider that prebooking. It is something the traffic rules do not foresee. Taxiing is very well regulated, with fares dictated by cities and not by operators. Often drivers will give you their business card so you can phone them directly. I have never said it is "disallowed" or "against" the rules. Need some free time to review le iene tv coverage and point the moment where presenter describes this

Discussion on answer by jpatokal: Is …

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Sep 6, 2018 15:56

@JonathanReez what mean by "biometric keys"? Please do not confuse a public key infrastructure with a fingerprint database. The latter is meant not to exist under developed countries privacy laws

Discussion on question by Sushil: Sho…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Aug 30, 2018 18:53

I would also like to point out that IT installing software on pupils' machines is meant to be a service done by school to digital illiterate parents. Surely, school is doing it the wrong way and I agree with all the answers that I wouldn't allow such a thing on my kid's laptop. But consider a parent that is not skilled with computers... either he learns IT and security, or he/she drops the laptop to the IT guys and silently forget. At very absolute minimum, the IT should offer parents the option to install software on their own by providing CDs and docs.

Discussion on answer by dda: Duty Fre…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Aug 30, 2018 13:19

Example at MXP: duty free is not segregated. You go through outbound passport control only after the huge DF gallery (with all its excessive smell of parfume). And consider that international flights within Schengen countries are domestic by definition. DF shops ask you for your boarding card but nothing prevents me to kindly ask someone headed outside EU to pretend to buy cigarettes, especially after befriending. And of course at your arrival with the green labels on your baggage you breeze through the blue "EU" customs line.

Discussion on question by Fez Vrasta:…

Imported from a comment discussion on travel.stackexchange.com...

usr-local-ΕΨΗΕΛΩΝ

Jul 22, 2018 14:59

As soon as you have proof of income any bank will be happy to issue you a simple credit card with a standard monthly plafond around EUR 1500. Actually they are a paid service for most banks, so they are happier to sell cards

Discussion on answer by forest: Is mo…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Jun 14, 2018 17:34

I would refrain from naming existing countries along with questionable ("high-risk") adjectives.

Discussion on answer by allo: Can an …

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Jun 14, 2018 14:48

Maybe the blockchain entry could be encrypted/hashed so that you and xxx.com are the only ones who can audit the login

Discussion on question by Jamie Bull:…

Imported from a comment discussion on security.stackexchange.c...

usr-local-ΕΨΗΕΛΩΝ

Dec 15, 2017 08:14

Any private key should not be owned by more than one individual. Public key cryptography is designed upon this principle