3xblah

29 ms·

211.
by 3xblah 7y ago
Solution: Send a Referer when making payments, i.e., when using the web for commerce. No need to send one when using the web for recreation.
212.
by 3xblah 7y ago
This type of tracking seems to assume the user is not bothering to send a fake Referer, e.g. she can just use the URL she is requesting, or just omit the header. One could argue such users are "low-hanging fruit". Very few websit
213.
by 3xblah 7y ago
I was reading it wrong. It is not wireless only. Technically, it only requires that the victim is sharing a local network with the attacker.
214.
by 3xblah 7y ago
But is Cliqz a search engine, or is it a web browser with a search bar set to a default search engine (or a Firefox extension that accomplishes the same thing). Cliqz bought Ghostery to acquire a pool of privacy-conscious users. The goal i
215.
by 3xblah 7y ago
I use a similar setup. The "whitelist" is a zone served by a local authoritative server like tinydns or nsd. There is no remote server. Using a local cache such as dnscache or unbound is optional. Spotting queries to an attack
216.
by 3xblah 7y ago
"We discovered a vulnerability in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android..." What about NetBSD. This also appears to be wireless only, i.e., the need for attacker to have control over the AP. Am I reading this wrong.
217.
by 3xblah 7y ago
"You as the link aggregator have to own your own AMP cache to implement instant loading." You lost me there. By "link" you mean URL?
218.
by 3xblah 7y ago
"What AMP Caches are available? Currently, there are two AMP Cache providers: * Google AMP Cache * Bing AMP Cache AMP is an open ecosystem and the AMP Project actively encourages the development of more AMP Caches. To learn about creat
219.
by 3xblah 7y ago
"This is essentially a hijacking of the DNS as far as I'm concerned." At the last NANOG, the keynote speaker described three instances where companies have "hijacted" the DNS. https://blog.apnic.net/
220.
by 3xblah 7y ago
"18. By Keith Devon on September 7, 2018 at 11:04 If Google only cares about a faster, more semantic web, then why not just give an even bigger ranking boost to faster, more semantic websites? Where does the need for a new standard com
221.
by 3xblah 7y ago
Is it possible to submit Google queries using HTTP POST. Using POST instead of GET is an option DDG provides. Startpage uses HTTP POST as well.
222.
by 3xblah 7y ago
By now, we have all seen some of the mind-numbing approaches employed by web developers in order to try to escape the burdens of GDPR via user "consent". I recently saw a pop-up box on a website that stated that by closing the b
223.
by 3xblah 7y ago
"It all started with a realization: Most the things I search for are easy to find. Did I really need the all-seeing, all-knowing algorithms of Google to assist me? Probably not." "As a result, I’ve had a fairly tedious but im
224.
by 3xblah 7y ago
"... yay for journal asking for "suggested reviewers" to the authors [themselves])" That is common practice at a journal like Nature when there are a limited number of investigators in the field with the reputation and e
225.
by 3xblah 7y ago
Assuming you entered the name of an actor that has a corresponding Wikipedia entry you would be redirected to the actor's Wikipedia page that, in most cases, shows the actor's date of birth and calculates the age for you. Even whe
226.
by 3xblah 7y ago
https://anaconda.org/shaktidb/shakti/2019.09.20/download/lin... The k binary in this tarball is statically-linked.
227.
by 3xblah 7y ago
For such a simple question, why wouldn't you just use Wikipedia? In any event, neither a blog nor Wikipedia would likely be a "primary source". Maybe something like a driver license would be a primary source. It could be tha
228.
by 3xblah 7y ago
Maybe this is why shakti fails to start when I have tried it with 1.6 GHz Intel Atom and Celeron CPUs. When I tried on Ubuntu with Celeron I got "Illegal instruction (core dumped)"
229.
by 3xblah 7y ago
I am not a Google search user so I am not sure what they are doing with "cards", however it sounds as though they are trying more to themselves become a "secondary source" (versus, e.g., just providing some "context
230.
by 3xblah 7y ago
"Plus, you're underestimating the percentage of queries that google has never seen before." No. I am highlighting that 75% are queries that they have seen before. Note also that the 15% is a figure that is declining, based
231.
by 3xblah 7y ago
"... so Google wasn't able to cheat with privileged information about me as a user." The way they "cheated" was to look at the tens, hundreds, thousands, or tens of thousands of previous queries that matched yours i
232.
by 3xblah 7y ago
I also remember it was $50/year for a time. A 100% increase/decrease. The fees were/are arbitrary and do not correlate to administrative costs.
233.
by 3xblah 7y ago
Domain names were initially provided free of charge. I once saw an estimate that put the administrative cost of a domain name at less than 20 cents. Then came "NewCo", now known as ICANN, and the "business" of "se
234.
by 3xblah 7y ago
It is no wonder that uBlock is so popular. Not sure I understand returning 0.0.0.0. What if the user has some other servers listening. I return the address of some server I control that is bound to a local address, e.g., an authoritative
235.
by 3xblah 7y ago
"But it's really exciting to be able to `ls` and `cd` and `ssh` on a phone..." Can you boot to a shell without starting GNOME?
236.
by 3xblah 7y ago
With uBlock, is it possible to block all subdomains but allow a specific subdomain? A resolver (e.g., unbound) is only one half of the DNS method I use. The other is an authoritative nameserver (e.g., nsd). For my own purposes, the resolve
237.
by 3xblah 7y ago
"... the exact same thing an ad blocking DNS provider is doing." Just to be clear, I was not advocating using third party DNS. Using djbdns I can just "block" all non-www subdomains for a domain with a single line in a
238.
by 3xblah 7y ago
If we request each of those pages, e.g., foxnews.com, cnn.com, bbc.co.uk, etc. with a simple HTTP client (no JavaScript engine) and we look at the subdomains that appear in each page, we see that in each case the tracker links are absent. T
239.
by 3xblah 7y ago
Without using CNAMEs the third party tracker IP addresses would be less dynamic making them easier to block with a firewall.
240.
by 3xblah 7y ago
"So, in practical terms, what's the difference between this CNAME trick and building the same thing in-house to run your own analytics?" In practical terms, based on what we have seen up to now, few websites will run their ow

More ›