c0nsumer

25 ms·

241.
by c0nsumer 4y ago
Kerberos, actually, not NTLM. And it is used in macOS (a *nix-like) and works great, either via WPAD (DNS), directly configured PAC file, or directly configured proxy server. It's Linux end user devices, specifically Ubuntu, that gives
242.
by c0nsumer 4y ago
The cost of this sort of thing for a company comes from support and maintenance, not initial device acquisition or setup. As a thought exercise, consider a company with 50,000 of these... - How do you patch and update them? - How do you dep
243.
by c0nsumer 4y ago
OP here. It was... I was really fortunate that some other company had figured it out in parallel with MS, because I was hitting a dead end. I got to the point where I was pretty sure that WPAD wasn't working right, and was in the midst
244.
by c0nsumer 4y ago
How do you MITM HTTPS without control over the cert store on the client, or access to private keys that let you generate certs that are trusted? You don't, and the threat of this is nation-state-level stuff. The article you link to pos
245.
by c0nsumer 4y ago
OP here. And anecdotes, but almost everyone at this company as a Verizon mobile that has data enabled for tethering as needed, but then some people would... ...use it for Netflix and actually hit the "unlimited" data caps and get
246.
by c0nsumer 4y ago
OP here. Honestly, in my experience here in the US, /most/ people's home networks are just fine. There's just edge cases, and then there's weirdness like this. I think COVID WFH / School-From-Home was actually
247.
by c0nsumer 4y ago
Malware can easily just pick up and use the system proxy settings. Hell, on Windows it just has to use WinHTTP and it'll use the system's paths to the internet.
248.
by c0nsumer 4y ago
OP here. This isn't quite my space, but from what I recall there's a couple wrinkles with transparent proxying. It's overall a good idea, but has some edge cases: - Authentication can go sideways in weird ways. A 407 from wha
249.
by c0nsumer 4y ago
OP here. That's where WPAD conversations get interesting... I imagine that for a whole bunch of folks something like default-path-to-internet is sufficient, or having everything hit the proxy and then hairpin some things back internall
250.
by c0nsumer 4y ago
OP here, and yeah... You nailed it. Absolutely nothing can be presumed about home networks. Most folks seem to think that because their phone shows a good WiFi signal and apps appear to work that all is good. The stuff we ran into in the su
251.
by c0nsumer 4y ago
I've been fighting with this for years, and I'm pretty sure Yandex is the problem. Hell, I even signed up for Yandex's webmaster tools as part of trying to fix this. Years ago Yandex was flagging on some sample perl code that
252.
by c0nsumer 4y ago
Hey there, OP here. Azure AD is a cloud service. The bug was in WinHttpAutoProxySvc, but at some point ASUS (et al) must have noticed it and chose to send the blank Option 252 to take advantage of the result, without realizing that the resu
253.
How Asus and a Microsoft Bug Almost Broke Remote Work(nuxx.net)
122 points by c0nsumer 4y ago|83 comments
254.
by c0nsumer 4y ago
What you're illustrating there is a self-perpetuating problem: the therapist I pick might not good, so I shouldn't talk to a therapist. Starting to talk to someone is key; that gets the process rolling. Asking for help is the sta
255.
by c0nsumer 4y ago
And A decent therapist is better than an ideal one. Just getting started talking to someone is key.
256.
by c0nsumer 4y ago
Thanks, this'll be interesting. One of my first go-tos in Wireshark is finding the interesting hosts I'm looking for, then using the built-in Follow TCP Stream to go deeper. I wonder if tcpflow would make this easier, or maybe jus
257.
by c0nsumer 4y ago
Yeah, I guess I should move back to php-fpm... I did years ago, but then consolidated to a very simple server where I just wanted Apache with mod_php doing its thing. Guess I should take some time this winter to restructure things...
258.
by c0nsumer 4y ago
This'd be great. I'm curious about performance, of course, but for personal blogs without comments, coupled with a caching module... This could be great. One thing I'm still trying to suss out is how to have Apache host Wordp
259.
by c0nsumer 4y ago
Huh, thanks! That sounds really fun.
260.
by c0nsumer 4y ago
Of course, I wanted to know what "FSTP Snow School" was, but garbage blogspam gives first-search-results like this: https://mapcarta.com/N8759058406 <sigh>
261.
by c0nsumer 4y ago
I suspect that they are asking about finding settings which get used, but aren't documented. Like, how to find hidden settings that programs will use.
262.
by c0nsumer 4y ago
Yes, this. Although it's not so much a trick and more managing your home network so it's like any other. Computers connected to the network should automatically detect everything they need to work normally, so no manual settings a
263.
by c0nsumer 4y ago
I've still got a Formac Studio DV which is the perfect device for doing this as well. It's got S-Video and Composite inputs, a Firewire connection for video, and doesn't require any drivers for normal use. I think it's e
264.
by c0nsumer 4y ago
Ha! I came here to mention "How To Win Friends and Influence People" as well. I read it more when I was around 38 or so, but it really helped me change how I interacted with people. While it's ostensibly a book about sales, I
265.
by c0nsumer 4y ago
You've got it exactly. This is also part of Windows captive portal detection, which makes what you say even more important. HTTPS would actually be a step backwards here.
266.
by c0nsumer 4y ago
Windows Updates are downloaded via HTTP but signed in the package themselves. This is why Delivery Optimization (peer to peer distribution) can be used. HTTP downloads for WU are also good because it allows upstream proxies to cache the con
267.
by c0nsumer 4y ago
DHCP option 43 is often used to indicate if a mobile network is metered. (May be other ways, this is the one I'm most familiar with.) I'm guessing your "spare mobile phone" is Android? Apple caches a lot of info about ne
268.
by c0nsumer 4y ago
Yep, exactly. Because another part of this is NCSI is used for captive portal detection, so Windows can/will notify the user that they need to do something more to keep using the network. Android and Chrome do the same sort of thing to
269.
by c0nsumer 4y ago
Your company isn't managing the OS properly/normally then. They can stop all of this from being installed, but aren't. (Source: Windows OS admin/engineer for large company where we /do/ manage all of this.)
270.
by c0nsumer 4y ago
PIN is only used for local logins because it's part of Windows Hello, meaning it literally is the PIN to unlock the password credentials where they are stored in the TPM.

More ›