Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
Bender
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
25 ms
·
751.
▲
by
Bender
4mo ago
I really wonder who clicks ads Not I. No idea.
752.
▲
by
Bender
4mo ago
I do not browse the web from my phone. I use the phone for voice calls and limited texting with neighbors and a couple friends.
753.
▲
by
Bender
4mo ago
So using bots as an excuse, everyone will have a money trail to access websites? This sounds almost as bad as having to use a digital ID, age verification, etc... and Cloudflare is involved? If I can spot most of the bots I think they sh
754.
▲
by
Bender
4mo ago
Be careful using chatbots for this. They may have the some common solutions but may be missing the less common yet important things and will absolutely leave out the edge cases. The confidence they are programmed to communicate with is ve
755.
▲
by
Bender
4mo ago
Nothing wrong with that. I think people should be able to disable anything they want. I doubt any commercial sites will do what I am doing. I use that little blog to test all manor of unorthodox things. That's why I listed the arc
756.
▲
by
Bender
4mo ago
I actually did that on purpose since all browsers support brotli I risked the possibility someone might have disabled it with an add-on . I wanted to see how many bots that would break. It may not be the most logical process but I just u
757.
▲
by
Bender
4mo ago
My ASUS laptop had it enabled. I had to disable it as there just wasn't enough non volital memory to hold all the updates even after remove several EFI entries and resetting the BIOS. All my mini-PC's updated fine however. My L
758.
▲
by
Bender
4mo ago
I had to vouch your comment, not sure what happened there. Something in your technical output must have triggered HN. One can use mokutil to see if Secure Boot is enabled after installing it. I assume the OEM installation or update of th
759.
▲
by
Bender
4mo ago
They left out the steps to update it. I made a rough attempt at a document for this. [1] Please let me know if I missed a validation step. I have done this on six machines but they were all Linux. Not tested on BSD. Archive [2] in the
760.
▲
by
Bender
4mo ago
If one is running their own mail server they can reject emails from the sending server assuming one is fine with blocking all email that could come from it. Blocking Gmail for example would be a large blast radius for some. Another less u
761.
▲
by
Bender
4mo ago
Fundamentally I agree with everything you said but I think you also explained in your own response why this will not happen. If they don't have the funds to do it right then it will be done wrong. It's a pattern that never ends a
762.
▲
by
Bender
4mo ago
Turtles all the way down right? Well the way malware was used by the feds in the past was go get rid of the existing RAT and fix the vulnerability that the malware used in the first place so the machine could not be re-infected by the same
763.
▲
by
Bender
4mo ago
That looks interesting but it does not appear to be widely used or support a lot of hardware. I could be reading too much into it. I would not want to suggest people move from a proprietary but widely adopted thing to something obscure.
764.
▲
by
Bender
4mo ago
I don't even believe that AI is real. To me it's just a predictive chat bot using LLM with big-data shoved up it's back-side. As for trust, I do not trust anyone or anything but if our choices are mass exploitation and mass
765.
▲
by
Bender
4mo ago
If AI can do mass exploitation then it can also do mass patching. Some malware in the past has been used to mass patch machines. Get to it. Give the teams doing this presidential pardons and full immunity. Apply patches and mitigations
766.
▲
by
Bender
4mo ago
That sounds like a good idea. Can you recommend a really good document I could link to that could walk people through switching from the M$ Cert secure boot to the non proprietary methods? Ideally one you have gone through on a few machin
767.
▲
by
Bender
4mo ago
This is an intentional re-submission from yesterday to ensure people see it and plan for changes this week. Please let me know if any parts need expanding or if anything is missing. I've only done this on a half dozen machines and th
768.
▲
Update Your Secure Boot Cert Before It Expires
(nochan.net)
5 points
by
Bender
4mo ago
|
5 comments
769.
▲
by
Bender
4mo ago
I am highly skeptical of this. Show me a properly [redacted] and approved video of the bots in action at the NSA after it is cleared for public display, hosted on nsa.gov or it didn't happen.
770.
▲
More than 12.5M barrels of oil passed through Strait of Hormuz after deal signed [video]
(youtube.com)
2 points
by
Bender
4mo ago
|
0 comments
771.
▲
by
Bender
4mo ago
Does this [1] have most of the VPN IP addresses? [1] - https://github.com/X4BNet/lists_vpn
772.
▲
by
Bender
4mo ago
It would be great if it turns out to be a nothingburger. Y2K was mostly a nothingburger. Of course if that is the case then secure boot need not even exist. Let's push to get rid of it along with any other cruft in the BIOS and OS.
773.
▲
by
Bender
4mo ago
I am honestly surprised this is not being discussed more. Many Linux systems may not be able to reboot after this coming June 26th, 2026. This even includes Microsoft Windows as sometimes windows update does not apply updates correctly
774.
▲
Update Secure Boot Cert Before It Expires
(nochan.net)
5 points
by
Bender
4mo ago
|
3 comments
775.
▲
The Scam Industry Is Booming [video][15 mins]
(youtube.com)
3 points
by
Bender
4mo ago
|
0 comments
776.
▲
by
Bender
4mo ago
Bookmark this [1] some here will need this in a few days to boot. Not really specific to a Thinkpad. [1] - https://linuxblog.io/upgrade-thinkpad-firmware-linux-fwupd/
777.
▲
Secure Boot certificate changes in 2026: Guidance for RHEL environments
(developers.redhat.com)
9 points
by
Bender
4mo ago
|
1 comments
778.
▲
by
Bender
4mo ago
Which of them specifically are you asking about?
779.
▲
by
Bender
4mo ago
Websites have public key pinning. [1] HPKP Most sites don't do this any more but enough do that anyone running a Squid SSL Bump MitM proxy needs to know. [1] - https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinn
780.
▲
by
Bender
4mo ago
Certainly it's an act or this would be video evidence of him stealing a car and his Youtube career would be cut very short. Reenacting something is fine for demonstrations.
More ›