RKearney

22 ms·

181.
by RKearney 8y ago
> This provides no basis for comparison because the App Store has been the only way to install apps on iOS This has never been the case. You’ve always been able to side load apps that are either signed by an Enterprise code signing cert
182.
by RKearney 8y ago
By default, Cisco and Juniper routers (and likely others too, those are just the ones I can speak of) will advertise all bgp learned routes to all bgp peers unless you specify a route map/export policy. Leaking a route would imply you’
183.
by RKearney 8y ago
Safari doesn't mess with my address bar. Chrome on the other hand felt it necessary to remove any instance of www or m anywhere in the domain of the URL before it was rolled back due to backslash. www.m.www.example.www.example.com woul
184.
by RKearney 8y ago
> which requires hardcoding IP addresses That statement couldn't be more wrong. It's absolutely possible to programmatically update DNS records. Set the TTL low (which you would be anyway for the CNAME records) and change them
185.
by RKearney 8y ago
As you pointed out, they own 2 /9's. While this covers the entire 3/8 space, they cannot have ROAs signed for the /8 nor can they submit route objects for the /8 until the 2 /9's are consolidated into a si
186.
by RKearney 8y ago
78.6MB. Every image is loaded on page load.
187.
by RKearney 8y ago
That is completely untrue. You can open a case and get access to downloads outside your support contract if you reference a vulnerability that’s affecting your current hardware.
188.
by RKearney 8y ago
I reported a UX bug with the new iOS feature Screen Time when the first developer beta hit. Through the entire beta releases the only updates I got were “we pushed a new release, can you test again?”. Needless to say the bug made it to the
189.
by RKearney 8y ago
Meanwhile, Samsung ran ads that made fun of iPhones for not having removable batteries, and then went ahead and started making phones without removable batteries. https://www.youtube.com/watch?v=SlelbGtPEdU
190.
by RKearney 8y ago
There are instances where completely replicating an environment in an air gapped lab is acceptable. For instance, you could be encountering some edge case where a bit is being flipped in an IP address, or a bit is stuck on somewhere and rep
191.
by RKearney 8y ago
To be fair, unallocated or unassigned IP space isn't fair game to use for testing outside of an air gapped lab. I've never in my career thought it would be a good idea to "test" unallocated public unicast address space o
192.
by RKearney 8y ago
OP never claimed that it was. They were discussing the second factor in two-factor authentication workflows. Google Authenticator is exactly that, as you pointed out.
193.
by RKearney 8y ago
Port 25 is blocked for every residential Comcast customer.
194.
by RKearney 8y ago
As I already mentioned, their wireless LAN controller uses it as a configurable default. The Cisco Wireless LAN controller is not a Cisco "router".
195.
by RKearney 8y ago
> Well, now you have. Allow me to rephrase, I've never heard of a Cisco router doing that from a reliable source. > That’s kinda the point. Then it has nothing to do with Cisco and everything to do with the person who configured
196.
by RKearney 8y ago
> I can't access 1.1.1.1 right now since I'm connected to a Cisco router. I've never seen or heard of a Cisco router doing anything that would interfere with access to 1.1.1.1. Their wireless LAN controllers on the other h
197.
by RKearney 9y ago
It's also App Store policy to not lock built-in iOS features behind in-app purchases or subscriptions, yet Google gets away with it on the YouTube.app by only allowing background audio if you subscribe to YouTube Red.
198.
by RKearney 9y ago
Comcast / xfinity was null routing 1.1.1.1/32 for residential customers up until Monday morning/afternoon. They removed the null route fairly quickly. I assume it was done to reduce the amount of garbage traffic going to 1.1.
199.
by RKearney 9y ago
Aaron Swartz faced 35 years in prison for breaking and entering and unauthorized access of a computer network / hacking amongst other things. It's a shame it ended the way it did, but please don't downplay what he did and use
200.
by RKearney 9y ago
I understand that, and I've had to use the IPv6 address since Comcast is null routing 1.1.1.1 in my area, but that doesn't explain how a wildcard certificate was issued with IP addresses in the SAN. Am I able to buy one for my own
201.
by RKearney 9y ago
I'm not sure which modem you have, but the Cisco modem I used to use with the built-in WiFi just as you describe absolutely has the ability to go in and edit the DNS servers assigned by DHCP under Connection > Local IP Network. I al
202.
by RKearney 9y ago
How was Cloudflare able to get a wildcard certificate with IP Address SANs added to it? How do I obtain one from DigiCert because I don't see the option on their site.
203.
by RKearney 9y ago
Yes, SSL has been broken for some time. That's why TLS was introduced nearly 20 years ago.
204.
by RKearney 9y ago
The fact that CloudFlare has "Flexible SSL" leads me to believe they don't care about security at all. I've asked them to at least post a "CF-SSL: Flexible" header or similar to responses so someone could devel
205.
by RKearney 9y ago
Meanwhile, Apples own iMovie app doesn’t support the iPhone X display yet.
206.
by RKearney 9y ago
Let me clarify then. In order to connect to a remote machine (in this case, a website) your computer must make a TCP connection to the remote server. A TCP connection requires a three-way handshake to begin. This requires the sender (you) s
207.
by RKearney 9y ago
Well it was nearly $20k in December, so I'd say having it fall below $9k less than 2 months later is pretty significant.
208.
by RKearney 9y ago
You'd have a difficult time spoofing your IP address for a TCP connection (HTTPS).
209.
by RKearney 9y ago
No Laredo, Brownsville, or El Paso. I really wished they considered a majority Hispanic community that has the capacity to grow. This is just going to increase in-quality. Sad really. Let's hope for Miami. Or maybe let's not turn
210.
by RKearney 9y ago
I've heard of, although never implemented, using WPA2 Enterprise authentication for public access points, and then just have your RADIUS server reply with a success regardless of username and password combination. At first I thought th

More ›