JdeBP

20 ms·

421.
by JdeBP 1y ago
One of the few manual deny-list entries that I have made was not for a Chinese company, but for the ASes of the U.S.A. subsidiary of a Chinese company. It just kept coming back again and again, quite rapidly, for a particular page that was
422.
by JdeBP 1y ago
I (of course) use the djbwares descendent of Bernstein publicfile. I added a static GEMINI UCSPI-SSL tool to it a while back. One of the ideas that I took from the GEMINI specification and then applied to Bernstein's HTTP server was
423.
by JdeBP 1y ago
Now you too are hearing a voice in your head, as I did, in the classic drawl, saying "Counties, kid. Texas ain't that big.". (-:
424.
by JdeBP 1y ago
You're yet more proof that humans cannot competently administer the Turing Test. That was me writing.
425.
by JdeBP 1y ago
Frank B. Baird Jr. was the son of Frank B. Baird, of Buffalo New York, who died some time around 1947. His son, and Flora M. Baird, his widow, set up a charitable trust in his name which did things like donate to the Buffalo Museum of Scie
426.
by JdeBP 1y ago
You and many others. Including people who retry multiple times, and even reboot their machines. * https://stackoverflow.com/a/66985424/340790 (Spot the answerer's account name!) * https://forums.d
427.
by JdeBP 1y ago
Interestingly, the GitHub doco says outright that it superseded docker.pkg.github.com. ; so it was a conscious choice to go with this domain naming scheme instead of that one. * https://docs.github.com/en/packages/
428.
by JdeBP 1y ago
Previously on Hacker News at https://news.ycombinator.com/item?id=44974240 .
429.
by JdeBP 1y ago
These aren't runit doco, but they should help with the concepts. * https://jdebp.uk/FGA/daemontools-family.html#Logging * https://jdebp.uk/Softwares/nosh/guide/logging.html
430.
What is the "af"?(jdebp.uk)
1 points by JdeBP 1y ago|1 comments
431.
by JdeBP 1y ago
Let's see how much of a talking point it is.
432.
by JdeBP 1y ago
And this is where the OpenBSD people will paraphrase Henry Spencer and say that those who do not understand OpenBSD are doomed to reinvent it badly. (Personally, I think that that's putting OpenBSD onto a pedestal. It's no ideal
433.
by JdeBP 1y ago
You have almost , with that statement, figured out what this really is and why it is there. * https://news.ycombinator.com/item?id=44970832
434.
by JdeBP 1y ago
It's not exploitable. It's an exploit mitigation, in fact. It's not a bug; it's intentional that it works this way. And Nathan Michaels didn't think that if you want to find Theo de Raadt writing on some subject,
435.
by JdeBP 1y ago
There was once an idea named IM2000. Then the world invented pull-style electronic communications systems via another route. You're looking at one. * https://news.ycombinator.com/item?id=10410164 * https://
436.
by JdeBP 1y ago
I see the error of forgetting the long distance prefix and dialling some poor innocent to squeal tones in xyr ear during Zone Mail Hour is alive and well. (-:
437.
by JdeBP 1y ago
... but entirely lacking the primary visual feature that Anubis had.
438.
by JdeBP 1y ago
Guru Meditations and Sad Macs are not your thing?
439.
by JdeBP 1y ago
It is even possibly not a coincidence that someone has delved into this and brought an article to Hacker News less than 24 hours after a Trefor Bazett video. (-:
440.
by JdeBP 1y ago
People who tell you that it also means "goodbye" are correct. It is an alternate form of "cheerio". It's not in popular use now , but it's recorded with this sense in mid-20th-century dictionaries. Indeed,
441.
by JdeBP 1y ago
M. Anderson was not wrong in this particular case. Indeed, Bernstein xyrself was on the bind-users mailing list discussing the vulnerability to packet forgery, just after the turn of the 21st century. The reason that the famous djbdns sec
442.
by JdeBP 1y ago
Just remember that it was never a "Kaminsky Bug" in the first place, and there's a whole community of people who had spotted it years before, who had been pooh-poohed and naysayed by BIND people for years about all this. * h
443.
by JdeBP 1y ago
Psst! NSD isn't a "resolver" at all. Traditional DNS terminology is tricky to use (given that what is covered by "resolver" in the RFCs does not match how most people see the system as divided up) but something th
444.
by JdeBP 1y ago
Hint: Look at the mailing list post and the repository's "About" blurb. There are probably only 2 people in the world who want their own new coined name for this old hat stuff to stick. (-: They put their demonstration cod
445.
by JdeBP 1y ago
See https://news.ycombinator.com/item?id=44954517 They're giving Google Public DNS as example of a failure here. Whereas what happens in my testing is that it's a cache miss for Google Public DNS, which takes a l
446.
by JdeBP 1y ago
The report and others are calling this "cache poisoning". That's a misnomer. It is not cache poisoning in the long-standing sense of the phrase. It is very simply equally long-standing simple DNS/UDP brute force respo
447.
by JdeBP 1y ago
Correct. And this isn't surprising to those of us who have been involved in this stuff for years. This is a very well known problem, is not specific to dnsmasq, and not a novel discovery by these people in any way.
448.
by JdeBP 1y ago
If it helps, the word is "pidgin". * https://ru.wiktionary.org/wiki/pidgin#%D0%90%D0%BD%D0%B3%D0%...
449.
by JdeBP 1y ago
What's the likelihood that it's a hex dump one of these? * https://github.com/virtualxt/virtualxt/tree/develop/bios Because if you look back far enough you'll find that this is based upon
450.
by JdeBP 1y ago
Yes. RFC 2181 § 11 explicitly contradicts this report. That said, I should point out that there is nowadays a loophole for special-casing labels that begin with underscore, called out by the SVCB document. The loophole does not allow for

More ›