PowerBar

8 ms·

31.
by PowerBar 6y ago
> Besides deleting letters under it could affect layouts. Which is in and of itself a security risk. Not only can the length of the redaction give an estimate on the length of the password, but for variable width fonts, could even rule o
32.
by PowerBar 6y ago
No, but if I were a bat designer, I would be hesitant to sell a baseball bat full of nails under the guise of "meat tenderizer". Even though it may actual work as intended (tenderizing steaks), the way it is most likely to actuall
33.
by PowerBar 6y ago
As a long time puppet user, I started forcing myself to use ansible for my homelab so I can learn it's intricacies and limitations. Recently I had a use-case where I wanted to re-use some data from a defined variable (list of objects)
34.
by PowerBar 6y ago
> A female bear is startled and charges towards the people Which is why the #1 preventative step taught in Canada (where we also have large bears and moose) is to be noisy. If the Bear, Moose, Deer, etc can hear you from a decent distanc
35.
by PowerBar 6y ago
> I think we can now conclude that covid19 behaves seasonally, just like other respiratory viruses. I don't know how you can possibly establish a seasonal trend before we've even observed it for a single seasonal rotation. htt
36.
by PowerBar 6y ago
It's definitely not fair to the employees of company B (assuming the jobs are equivalent).
37.
by PowerBar 6y ago
In theory. I very much want IPv6 to take over, but a firewall does not provide the same level of security as a NAT when a bug is found. If a bug is found in a non-NAT firewall that prevents it from blocking a packet for some reason, you hav
38.
by PowerBar 6y ago
That would only work, at best, in 1 direction. If Alice has IPv6 and Bob has IPv4, Alice can send Bob a packet to either 1.2.3.4 or ::01:02:03:04, but if Alice's IPv6 number isn't in the IPv4 range (ex: ::10:11:12:13:14), then her
39.
by PowerBar 6y ago
Congratulations, you're now being tracked by the government of whichever country your VPN is proxy'ing your data to. And that government also certainly has much less legal restrictions on tracking you since you're probably no
40.
by PowerBar 6y ago
I've been there. I an built entire deployment/change-management system in very small IT teams (1 other person with different skills from mine). We eventually got the go-ahead to grow the team, including more admins with my skill s
41.
by PowerBar 6y ago
After I broke my ankle (crushed between trees), they had to re-attach part of one of the bones (the ball part that goes into the socket) with 3 temporary pins. Once the pins were removed and I started walking again (after lots of physio), m
42.
by PowerBar 6y ago
>> Do not store secrets in environment variables > Yes, definitely don't put secrets in the Dockerfile itself. I'm curious if there are reasons not to use a .env file though? Environment variables are a terrible place to
43.
by PowerBar 6y ago
It astounds me how many developers don't realize just how many places environment variables end up, even on a properly functioning server. common info pages (ex: phpinfo), core dumps, debug errors and logs are notorious for containing
44.
by PowerBar 6y ago
Every time I print something and see the bits of extra plastic (nozzle cleaning, supports, the odd failure, etc), I feel a little guilty until I remember how much plastic would have been in the packaging alone had I ordered the part online
45.
by PowerBar 6y ago
Only if your vehicle requires hit. Premium gas is rated for higher compression (generally turbo or supercharged engines). If your owner's manual doesn't recommend a particular octane, just get regular.
46.
by PowerBar 6y ago
In an ideal world, yes, at least to a certain extent. How many times has the security of entire phones been compromised because of an app? Obviously software written for use in medical devices and banking systems should be held to a higher
47.
by PowerBar 6y ago
It's an upgrade you earn in a later level.
48.
by PowerBar 6y ago
That's one of the other popular strategies, but relies on both devices have accurate clocks. With computers and servers (where the strategy is used quite a bit, sometimes in combination with challenge-response), it's quite easy. I
49.
by PowerBar 6y ago
Why would your A records change depending on context? Do you have separate networks where "server.localdomain" has different IPs? The typical way to solve that is to use different sub-domains for each one. For example if you have
50.
by PowerBar 6y ago
They were alternative ways to prevent a MITM, but they both have solutions solved by existing TLS.
51.
by PowerBar 6y ago
While I with rodolphoarruda that you need a page that sells the product to the user, I applaud the existence of this page. As the person often tasked with evaluating, approving and deploying software, a page like the one linked to in this a
52.
by PowerBar 6y ago
That would still rely on A) some kind of secret that only the server knows that the client can verify in order to ensure it's not trading nonces with the MITM. B) A way for the client to ensure that the nonce isn't being passed th
53.
by PowerBar 6y ago
Critical thinking and evaluating evidence.
54.
by PowerBar 6y ago
You don't need to disclose anything on the public DNS. Just register the domain, then use it internally. For example, if you buy "example.com", just set your public DNS (assuming your registrar provides one) to resolv it to 1
55.
by PowerBar 6y ago
Which is one of the reasons I always insist our dev and prod teams use FQDNs (under domains the company owns) in all of their configurations. In more dynamic environments, the config may have the domain as its own setting and each service
56.
by PowerBar 6y ago
And that doesn't even touch on replay attacks. If you have a door lock that accepts "lock", "unlock" and "report status", a MITM attacker only needs to capture the encrypted & signed "unlock"
57.
by PowerBar 6y ago
Canada is kind of in a middle ground. You need to register to vote, but when you file your taxes there's a checkbox for "Allow Revenue Canada to share your information with Elections Canada" which basically auto-registers you
58.
by PowerBar 6y ago
https://www.office.com/ I know it's not perfect yet, but the better and better it gets, the fewer reasons Microsoft is giving people to stick with Windows. I wouldn't be surprised if Microsoft stopped selling the
59.
by PowerBar 6y ago
Parts of lower mainland BC (Canada) are the same. For example, I can recycle glass in Vancouver, but Surrey stopped accepting it years ago because they changed recycling companies and the new one considers it a safety hazard for their works
60.
by PowerBar 6y ago
Honeypots are fun, but be VERY careful how you deploy them. Ideally they are on a completely separate network on the WAN side of a second firewall. The last thing you want is for someone to find an exploit in your honeypot and use that to g

More ›