DCKing

51 ms·

481.
by DCKing 8y ago
> This is a really dangerous way of thinking of container security. Isn't "really dangerous" a bit hyperbolic here? I'm describing a process by which you figure out the actual risk of vulnerabilities before treating
482.
by DCKing 8y ago
Although vulnerability scanners can be a useful tool, I find it very troublesome that you can utter the sentence "this package contains XX vulnerabilities, and that package contains YY vulnerabilities" and then stop talking . You
483.
by DCKing 8y ago
Linux SBCs are in a bit of a sad state. There was a rush to the market, which has led to many boards being in a very sad state when it comes to software support. Moreover, no interesting SoCs have come out for these things in just about for
484.
by DCKing 8y ago
It's worth noting that historically that RFC 2109 and RFC 2965 specified that user agents should respect the user's privacy and not allow cross-server cookies. Since browsers have flat out ignored this recommendation since the beg
485.
by DCKing 8y ago
I find Windows 8 complaints so full of hyperbole. I used Windows 8 daily on my work laptop for years, and these are the items I needed to adjust to. Launching programs: Windows key + type type <enter> to Windows + S + type type <en
486.
by DCKing 8y ago
End to end encryption of all your chats by default. Telegram has you cross-device chats stored on their servers. This is not the case for Matrix (when they finally enable this) and e.g. Wire. Telegram's "secret chats" don&#x2
487.
by DCKing 8y ago
Why does it matter that search engines use other search engines by proxy? Using DDG for Bing, or Startpage.com/Ixquick for Google, or Searx for either of them, should not provide the original search engine with your data. Bing and Goog
488.
by DCKing 8y ago
> GDPR does not allow you to trade services in return for using your data for ads. Yes it does. If users consent to it in a lawful way, close to everything is possible under GDPR. > A website can't deny you service if you opt out
489.
by DCKing 8y ago
The problem on the Android side goes deeper, as the "Onavo Protect" app is still alive and kicking in the Google Play store [1]. The Facebook Research app here is a shallow repackaging of the iOS version of Onavo Protect, which wa
490.
by DCKing 8y ago
Maybe I should not have started with the distinction between "technical" and "non-technical". My argument is that even technical users, with the skill to install Debian [1] or far beyond, should not have to figure out th
491.
by DCKing 8y ago
Yes. The Firefox website should ideally provide some instructions - including a way to open the Firefox entry in the Ubuntu/Gnome Software Center, instead of giving users a tarball most don't know how to handle (and if they do kno
492.
by DCKing 8y ago
The pretense that all Linux users should be (or already are) technically capable is really harmful to the ecosystem. No, you should not expect Ubuntu or Debian users to figure out on their own (1) why the tar.gz file they download doesn&#x2
493.
by DCKing 8y ago
Checklists are fine if you have a fixed problem space. Just to go by your example - aviation safety is a mostly fixed problem space you can make mitigations in. Any item on the checklist would be there to mitigate safety issues almost any a
494.
by DCKing 8y ago
Not out of the box, no. The FreeNAS implementation (and I assume many others) depends on rclone [1], which describes it as rsync for cloud providers. For protection against that you would have to implement periodic snapshots (which many NAS
495.
by DCKing 8y ago
Telegram - unless you deliberately take action and opt out of cross-device sync for individual chats - stores all your messages in plaintext on their server. If you want your chats secure, you will need to convince everybody you're cha
496.
by DCKing 8y ago
It's easy to grab your pitchfork when seeing just a headline, but I'm quoting the article verbatim here: > Mr. Zuckerberg has also ordered all of the apps to incorporate end-to-end encryption, the people said, a significant ste
497.
by DCKing 8y ago
I've always backed up my NAS to B2 since its early days, and honestly have forgotten about the 30 day deletion limit. I've never encountered the limit in various NAS setups, even when I backed up using cronjobs using the B2 Python
498.
by DCKing 8y ago
Synology and FreeNAS support backing up to Backblaze B2, both easily configurable in their respective GUIs. Many other popular NAS solutions allow you to install Duplicati, which will allow you to do the same.
499.
by DCKing 8y ago
That's exactly it. Lists like this exist to give administrators and their managers (1) a false sense of security when implementing it and (2) a subconscious excuse not to actually have to think about what you actually have to defend ag
500.
by DCKing 8y ago
Ah yes, I thought DLNA was just for streaming but it also supports a "Digital Media Controller" spec for remote control devices that don't stream. So I suppose that ís an open Chromecast alternative.
501.
by DCKing 8y ago
Miracast is not an alternative to Chromecast (officially called Google Cast nowadays). Miracast is a standard for wireless screen mirroring. If you play a Netflix show on your Miracast device, it plays on your phone , which then subsequent
502.
by DCKing 8y ago
Of course no-one is spying casually on HTTP APT traffic specifically. Nobody is arguing that strawman - nobody here is "living in that world", give me some credit please. But people spying casually on HTTP traffic in general d
503.
by DCKing 8y ago
I'm not sure I understand your reply. Are you replying to me as if I said that determined attackers cannot trace back HTTPS traffic to individual APT packages? Because I said no such thing. I just made the distinction between casual
504.
by DCKing 8y ago
> Or, looking at it from the other perspective, I wouldn't really feel much safer if apt were using https. I'm not against it, but I don't think it's a priority, especially if it needs a lot of coordination between di
505.
by DCKing 8y ago
Agreed, went a bit overboard there. Removed the part about self-signed certificates.
506.
by DCKing 8y ago
I find this argument not very convincing. Suppose an attacker wants to track people downloading stuff over APT. This is what they would need to do: In case of HTTP - Step 1: Read the HTTP request payload. Step 2: There is no step 2. In case
507.
by DCKing 8y ago
I'd like to point out that you're responding to me as if you assume I have no to little experience with this law and its consequences for organizations. That's not a reasonable assumption - my post is speaking from organizati
508.
by DCKing 8y ago
Every regulation is a trade-off. > There is a cost to businesses in complying with and implementing regulations, regardless of the size of the business and how good or bad their behaviour has been with respect to the intention of those r
509.
by DCKing 8y ago
I think calling GDPR over-regulation is extremely suspect. The GDPR does a good job in codifying basic privacy principles of what you can do with personal data. Clear communication, consent, control over your own data and data protection pr
510.
by DCKing 8y ago
In July 2015 AMD released a 28nm chip with more GCN compute units than this card at a lower price - the Radeon R9 Fury X had the full 64 CUs / 4096 shaders enabled for $649. And it was considered a bit of a dud as a product. This Radeo

More ›