beermonster

46 ms·

601.
by beermonster 6y ago
Debian has apt pinning for this kind of thing.
602.
by beermonster 6y ago
You even see Microsoft offering those types of install one-liners. e.g. curl -sSL https://dot.net/v1/dotnet-install.sh | bash /dev/stdin <additional install-script args> See https://docs.micr
603.
by beermonster 6y ago
And wonder how long it will take for similar repeats on other repos such as dockerhub, apt, nuget, homebrew etc etc.
604.
by beermonster 6y ago
I think image signing support (or at least was) is not as good as it can be. It would be nice if more images were signed by publishers and verification performed by default. Even then, that only gives you a stronger indication that the imag
605.
by beermonster 6y ago
O2's billing emails, and a well known bank have broken DKIM signatures as they are improperly forwarded. No chance of getting through to their tech support, especially since these types of email are usually from a no-reply@ address and
606.
by beermonster 6y ago
No they are not https://info.aquasec.com/container-security-book
607.
by beermonster 6y ago
GitHub have a historic status page [1]. Do GitLab have anything similar for comparison? [1] https://www.githubstatus.com/history
608.
by beermonster 6y ago
I read the title too quickly. I thought this was going to be about a Linux-hating hosting provider... oops!
609.
by beermonster 6y ago
https://nakedsecurity.sophos.com/2021/02/07/perl-com-gets-it...
610.
Scrapped GoldenEye 007 game 'remaster' leaks online(bbc.co.uk)
17 points by beermonster 6y ago|0 comments
611.
by beermonster 6y ago
Aside from helping mitigate MiTM, https has other benefits - Faster due to that fact HTTP/2 can be used. - Makes censorship harder as individual pages cannot be censored but rather the entire site which is more noticeable - Stops ISPs
612.
by beermonster 6y ago
Nice reference. Reaching target hosts multiple jump-hosts away, and going the wrong way through multiple firewalls segregating those lans, is another use-case of tunnels I've found handy. i.e. your_remote_client_host->internet->f
613.
by beermonster 6y ago
Actually, OpenSSH has built-in TUN/TAP support using -w<local-tun-number>:<remote-tun-number>. You can create a layer 3/point-to-point/ TUN tunnel or layer 2/ethernet/TAP tunnel. I used to run a site-to-
614.
by beermonster 6y ago
People use VPN services, as opposed to say why enterprises use site-to-site VPNs, for a variety of reasons: - Access geo-restricted content on say Netflix - Privacy - one encrypted pipe to hide what you're doing - Hide source IP addres
615.
by beermonster 6y ago
ISP modifying DNS responses, or at the least potentially logging them. A good reason to use DoH/DoT. ISP logging traffic anyway in UK in order to comply with, say, Snoopers charter. ISP providing out-of-date router hardware with unpatc
616.
by beermonster 6y ago
> Maybe someone can enlighten me why these services exist and what usecase they have? Because there are lots of people that can't create their own VPN even though these days you can spin up a lightsail instance for $3.50 pcm and be
617.
by beermonster 6y ago
Shadowsocks always used to work well enough to evade the GFoC if you hosted your own VPS. Which is simpler than say strongSwan - and IPSEC gives the game away anyway. https://gfw.report/blog/ss_advise/en/ ht
618.
A framework for shifting the discussion around vulnerabilities in open source(opensource.googleblog.com)
1 points by beermonster 6y ago|0 comments
619.
by beermonster 6y ago
Not really kept up with the latest with this, but chat over IMAP is a thing https://archive.fosdem.org/2020/schedule/event/coi/
620.
by beermonster 6y ago
Well... https://www.nytimes.com/2020/09/18/world/middleeast/iran-hac...
621.
by beermonster 6y ago
if they want it to be fast and performant they should check out source hut for inspiration. I find all the animation and interactions jarring persoally. Maybe they should just ditch it all - that should speed things up! Not having progress
622.
by beermonster 6y ago
Yes, Linus himself mentioned they'd all need to be contacted and agree. He also said he saw the GPLv3 draft and so it was an early and conscious decision to not have a 'GPLv2 or later' license.
623.
by beermonster 6y ago
10 years of security updates/critical fixes. Which means you can set it up once, install your mail server or whatever, and have a solid and secure system for a very long time.
624.
by beermonster 6y ago
I think this is true, with the MIT license being the most popular. From Linus[1] on the topic of GPLv3, he chose GPLv2 as it was the best choice for doing kernel development - giving code and getting code back in return. One of his gripes a
625.
by beermonster 6y ago
Which other distros are there which have 10 years support? It looks like there's only Oracle Linux left currently? That is like being caught between a rock and a hard place ;-)
626.
by beermonster 6y ago
IKEv2 can be configured securely, but by someone that that is familiar with that particular minefield. Both on Windows and MacOS the GUIs configure weaker security by default (the cynic may wonder why!). On MacOS you can use Apple Configura
627.
by beermonster 6y ago
In IKEv2 it’s optional but IPsec NAT traversal (NAT-T) uses UDP port 4500.