3xblah

15 ms·

61.
by 3xblah 7y ago
Correction: -n and -x are obviously mutually exclusive. Have to use -v instead. curl https://example.com/setup.sh | bash -vn As for trying to hide commands from an execution trace, it is not possible to hide the set
62.
by 3xblah 7y ago
"You can only be sure of what you're running if you download it first, examine it, then run what you downloaded ." What if, before "run what you downloaded", first perform a dry run and observe it while it is runn
63.
by 3xblah 7y ago
"In Wacom's defense (that's the only time you're going to see that phrase today), the document was short and clear, although as we'll see it wasn't entirely open about its more dubious intentions (here's t
64.
by 3xblah 7y ago
"I believe that privacy policies should describe how the data will be used, not how it could be used." Google's policy does not tell the user how her data will be used by Google's customers. The policy states Google wil
65.
by 3xblah 7y ago
The Google employee argues that through UA-CH Google wants to disincetivise "allow" and "block" lists. After many years of testing HTTP headers, IMO this really is a non-issue. Most websites return text/html just f
66.
by 3xblah 7y ago
Right-click in the Name column, select "Save all as HAR with content". Then grep for the headers, e.g., sed -n '/headers\":/,/\]/p' example.com.har While running Chrome, try ps ax |
67.
by 3xblah 7y ago
"Tor exit node block Operators of Internet sites have the ability to prevent traffic from Tor exit nodes or to offer reduced functionality for Tor users. ... The BBC blocks the IP addresses of all known Tor guards and exit nodes from i
68.
by 3xblah 7y ago
"The double quotes are of course technically correct, but when ... it's overkill and makes everyrthing ugly." The only way you know this is being a person who routinely writes shell scripts. There is no substitute for knowing
69.
by 3xblah 7y ago
Add Google to the list. It is unfortunate that not even one of these companies can differentiate from the others on this practice. They each assume that the user gives them a free pass to make automatic outbound connections, where no cons
70.
by 3xblah 7y ago
"So when you visit HTTPS sites, anyone along the communication path - from your ISP to the Internet backbone provider to the site's hosting provider - can see their domain names (e.g. wikipedia.org) and when you visit them.&quot
71.
by 3xblah 7y ago
As someone else pointed out, the issue is mainly NAT not necessarily just "blocked" ports. What works with your ISP may not work with someone else's.
72.
by 3xblah 7y ago
"No reason to run DNS." Hmmm, it was a yes or no question. Are you suggesting it work would if you did.
73.
by 3xblah 7y ago
Maybe running dynamic DNS client that keeps logs of IP address changes. Do DDNS clients keep logs. Maybe passive DNS would detect changes. The point of the comment was that cannot just assume it never changed unless monitoring it contiuou
74.
by 3xblah 7y ago
Not speaking for all ISPs worldwide.
75.
by 3xblah 7y ago
Finally some truth.
76.
by 3xblah 7y ago
"I have run services on port 443 on Optimum and FIOS for years." What is Optimum, FIOS. WG does not work over TCP. Try running a UDP-only DNS server from home on some random port. If you know the port can you reach it via UDP fro
77.
by 3xblah 7y ago
"This means you can use it to create inbound network tunnels to computers that don't have a public IP, are behind firewalls or get assigned new IPs frequently." Sure enough, look what appears on HN front page a few hours late
78.
by 3xblah 7y ago
Can you be sure that during 4yrs it never changed >1 even for a short time, maybe hours or days, then reverted back
79.
by 3xblah 7y ago
A previous thread about WG had some discussion about obtaining a publicly reachable^1 IP address. No doubt many readers are interested Can you tell us anything about how you obtained one 1. No ISP firewall blocking unsolicited incoming tra
80.
by 3xblah 7y ago
Your home has publicly accessible^1 IP address Or you are using a third party-controlled server with direct internet access to make home IP accessible 1. No ISP firewall blocking unsolicited incoming traffic Do you configure WG to use per
81.
by 3xblah 7y ago
Seems there is a ever-growing list of Linux bootloaders. Which ones are not satisfactory and why. I was very satisfied with the BSD bootloaders. Plus the kernels comply with the multiboot specification so it was possible to use other boot
82.
by 3xblah 7y ago
"... but impossible to use domain-based adblock like pi-hole since both ads and content are served through the same Google domain." However, ads and video are not served through the same Google domain. Further, the ads are not s
83.
by 3xblah 7y ago
What happens when out of memory on Tinycore.^1,2 1. On NetBSD, I could make RAM-only, no swap distributions that might thrash but would gracefully recover once some RAM was freed. 2. On Ubuntu, when running from a tmpfs root, I have found
84.
by 3xblah 7y ago
Long live privoxy. However, I wonder how privoxy users handle TLS. I use localhost proxies to decrypt TLS before it reaches destination programs as well as encrypt outgoing plaintext HTTP traffic from non-TLS enabled programs. Using proxies
85.
by 3xblah 7y ago
"I currently have no desire to make minitrd available outside of distri. While the technical challenges (such as extending the generator to not rely on distri's hermetic packages) are surmountable, I don't want to support peo
86.
by 3xblah 7y ago
This and the other stuff described in these discussions relies on Javascript, CSS or certain HTTP headers. If the results are requested with a simpler HTTP client that does not automatically execute Javascript or CSS, where we can control t
87.
by 3xblah 7y ago
BUGS The -F option is not necessary given the command line variable assignment feature; it remains only for backwards compatibility. EXAMPLES Print and sort the login names of all users: BEGIN { FS = ":" }
88.
by 3xblah 7y ago
"In the end, E-HAWK was able to wrest back its hijacked domain in less than 48 hours, but only because its owners are on a first-name basis with many of the companies that manage the Internet's global domain name system. Perhaps m
89.
by 3xblah 7y ago
s/EDNS0/& Client Subnet
90.
by 3xblah 7y ago
UTF-8 complexity

More ›