aaronmdjones

8 ms·

61.
by aaronmdjones 1y ago
Industrial electricity consumers pay lower unit rates per kWh, but they also pay for any reactive power that they consume and then return -- residential consumers do not. As in, what industrial consumers actually pay is a unit cost per kVAh
62.
by aaronmdjones 1y ago
Malicious USB dongles capable of achieving this have been demonstrated before. For example, a Windows-targetting variant injects the keyboard sequence Super+R (Sleep for 1 second) powershell.exe (Enter) (Sleep for 1 second) wget
63.
by aaronmdjones 1y ago
> For example, right now my laptop is at 63% battery and currently charging. It’s drawing 36W at the moment. When the battery charge is lower, it’s drawing more power from the outlet, and the higher the battery charge is getting, the les
64.
by aaronmdjones 1y ago
Those work by sitting between the real keyboard and the computer, often deliberately designed to appear as an innocuous adapter (say, a USB-A keyboard plugged into a PC's USB-C port or vice versa) or extension cable.
65.
by aaronmdjones 1y ago
> As for inserting keystrokes, that will be obvious if it enumerates as a keyboard. This is true, but this also doesn't need to happen at insertion time. An HID keyboard can show up, say, 3 hours after you plug it in. I miss grsecur
66.
by aaronmdjones 1y ago
If it were only one data block in one stripe I'd be confident re-adding the same drive (and have done so); this is overwhelmingly likely to be a transient error (e.g. bit rot on the drive or a RAM bit flip while writing; either in the
67.
by aaronmdjones 1y ago
Yeah, that would be the "error detection at a higher level" (than MD) part. It'd still be on you to pull one drive at a time from the array until the errors go away (then you know which drive has the corrupted block in that s
68.
by aaronmdjones 1y ago
> If you ignore explicit warnings at mkfs time and then get upset the warning was accurate, you can't really fully blame the file system for it. Oh, no doubt. I agree. > Just raid on a lower layer and btrfs on top. That has its o
69.
by aaronmdjones 1y ago
The venn diagram of "people who want a modern copy-on-write filesystem with snapshots to manage large quantities of data" and "people who want a massive pool of fault-tolerant storage" (e.g. building a NAS) has some pret
70.
by aaronmdjones 1y ago
As far as I know, the license incompatibility is on the GPL side of the equation. As in, shipping a kernel with the ZoL functionality is a violation of the GPL, not the CDDL. Thus, Oracle would not be able to sue Canonical (Edit: or, rather
71.
by aaronmdjones 1y ago
Not at the moment; to achieve this, you typically put it behind something like dnsproxy [1][2]. I have done this on my router, along with a couple firewall rules to prevent plaintext DNS queries leaking out of the WAN port. dnsmasq is confi
72.
by aaronmdjones 1y ago
Right. What I proposed is scarcely different from doing HTTPS over a SOCKS5 proxy. It's just that the proxy would infer your destination from the ClientHello rather than being instructed by the client in advance (Edit: and it would hav
73.
by aaronmdjones 1y ago
> A certificate has to be signed by a trusted CA (one your browser already trusts). Yes. > A DNS provider could mint a self-signed cert for pornhub.com, but your browser would reject it immediately. I never said anything about the DNS
74.
by aaronmdjones 1y ago
No you wouldn't. The current situation: - You ask Foo DNS Provider for the IP address of pornhub.com - Foo DNS Provider responds with the real IP address - You connect to that address, send a TLS ClientHello containing a Server Name In
75.
by aaronmdjones 1y ago
If there's one thing you can trust a government to do, it's to not be able to keep secrets for very long. https://www.vice.com/en/article/hackers-published-replicas-a...
76.
by aaronmdjones 1y ago
We also tax those already. EDIT: There is a fixed VAT charge of 5% on electricity, as well as a currently 16% levy on electricity to cover various environmental and social benefit schemes. Which is hilarious, as the UK is moving away from f
77.
by aaronmdjones 1y ago
In the UK, VED is based on the vehicle's CO2 emissions per kilometre traveled under prescribed driving conditions. This means the registered keepers of EVs (and some hybrid ICE/EVs) pay nothing. There are talks about scrapping thi
78.
by aaronmdjones 1y ago
It's a permanent double conversion UPS; it's always inverting. You could activate the "high efficiency" bypass mode to directly connect the input to the output in the presence of mains AC input, but this would also pass
79.
by aaronmdjones 1y ago
I have a 12U 19 inch rack built into my computer desk, and I have a couple of NASes in it (2x HPC-8316SA-55RB1). The 40mm fans in the included CRPS PSUs are loud, whiny, and rattly, all at the same time. I replaced all 4 of them with Noctua
80.
by aaronmdjones 1y ago
There have been no edits for the last 6 days; then 18 days prior to that. I don't think so.
81.
by aaronmdjones 1y ago
Their homepage certainly is.
82.
by aaronmdjones 1y ago
> We investigate them, and maybe issue new regulations, not to punish mistakes, This is not quite accurate. In the US for example, the NTSB investigates the causes of an incident, and the FAA carries out any subsequent enforcement action
83.
by aaronmdjones 1y ago
This app's data store was "breached" in the same way that one breaches a castle by walking across the lowered drawbridge, through the open gate, past the empty guard stations.
84.
by aaronmdjones 1y ago
For writing lists with one item per line, Use two line breaks on HN to start a new line Like this
85.
by aaronmdjones 1y ago
And most US law enforcement uses Glock pistols, which are also famous for having no external safety. There's a lever integrated into the trigger such that the trigger must be pulled before it can travel backward, and there's a saf
86.
by aaronmdjones 1y ago
The attacker did not change the To: header. This would invalidate the DKIM signature and result in a DMARC fail and the message landing in Spam (or being rejected). You can receive e-mail with a To: header saying anything. It doesn't h
87.
by aaronmdjones 1y ago
The To header was included in the DKIM signature. The reproduction section of the article shows the result of final delivery to the victim which shows the original To header. If that were removed it would invalidate the signature.
88.
by aaronmdjones 1y ago
The body of the e-mail was not modified whatsoever. Nor were any of the signed headers of the e-mail, including the Subject, From, and To headers.
89.
by aaronmdjones 1y ago
> The other reason is: If a user figures out a way to upload javascript and have it work, you don't want them to steal other users' login cookies. This was solved a long time ago by marking such cookies as "HTTP only"
90.
by aaronmdjones 1y ago
> It does seem surprising the To: header isn’t one of the headers that is covered by the dkim signature It is, which is why they had to preserve it. The screenshot of delivery under the reproduction section shows the original To: address

More ›