cjcampbell

13 ms·

61.
by cjcampbell 5y ago
Same here, though it’s nuts how fast they clear the stock right now. Despite a 1 per customer limit, >1.5k units gone within a couple hours of notification.
62.
by cjcampbell 5y ago
Sign up for stock availability at the major resellers and act fast. If you miss a batch, you will likely need to set up the notification again (at least for Adafruit and Sparkfun). I’ve been buying for a class I’ll teach in the Spring since
63.
by cjcampbell 5y ago
When I click on the countdown, it links to https://lists.gnu.org/archive/html/libreplanet-discuss/2022-... . Edit: On second examination, doesn’t appear to be linked. Not sure what I hit with my fat thumbs. :)
64.
by cjcampbell 5y ago
I will acknowledge my language was not as precise as it could have been, but I did not say that Apple is actively trying to be difficult or does this in a way that is unclear to all audiences. They definitely do a heck of a lot better than
65.
by cjcampbell 5y ago
Apple doesn’t make it clear, but you can still get this without using the AppleID to log into your device. When setting up, create a local account first. You’ll have an opportunity to later log into your AppleID for use with messages, FaceT
66.
by cjcampbell 5y ago
No plug-in or extension. I dug in when I first learned about it because I wanted to make sure I understood how it would impact browser security when it was not in use. The strategy differs per browser, but essentially they launch the suppor
67.
by cjcampbell 5y ago
I don’t think this is the new normal, though I would caveat my answer based on the structure of the business relationship and ownership of the device. I would most likely not agree to this arrangement for myself or any of my employees excep
68.
by cjcampbell 5y ago
It is still possible to RCE, but you won’t be able to achieve it using the proof of concept code. See the article for resources that describe alternative methods to exploit.
69.
by cjcampbell 5y ago
8u121 seems to address the RMI vector but not LDAP (per https://www.veracode.com/blog/research/exploiting-jndi-injec... ).
70.
by cjcampbell 5y ago
It depends a bit on how they count contexts and injections. I did take it a little bit further after my post. I aimed to avoid double-dipping on contexts, but there's at least one element that could probably be counted for more than on
71.
by cjcampbell 5y ago
I've managed fourteen so far, though on a couple, their counter made it challenging to determine which event is firing. Much of the fun is creative use of comments, quotes, and new lines to ensure that you don't break other contex
72.
by cjcampbell 5y ago
Some resolvers will respond to the ANY type query, e.g., dig any …. This may not work with your default name server though, so look up some different servers to test. It’s common to disable this feature due to avoid it being abused as an am
73.
by cjcampbell 5y ago
At the time of this post, the arm64 download is incorrectly linked to the Intel-based dmg. The correct version can be downloaded by copying the link and swapping arm/intel, i.e., try this: https://2.na.dl.wireshark.org/
74.
by cjcampbell 5y ago
As an oversimplified example, in using an immutable screen buffer, a change between frames results in allocation of a full buffer rather than overwriting memory within the buffer (though one could probably think of ways to optimize this for
75.
by cjcampbell 5y ago
May be bigger than you want, but I picked up a Lilliput UMTC-1400 (14", USB powered with USB-C and HDMI input) portable monitor in part to use with my Pi's. It's well built, portable, and is usable with a Pi or my laptop.
76.
by cjcampbell 5y ago
Moduli would be relevant to DH kex, though you’re safe when limiting to ed25519.
77.
by cjcampbell 5y ago
Looks like there was an update in 2020 on the experience of running this server: https://solar.lowtechmagazine.com/2020/01/how-sustainable-is... .
78.
by cjcampbell 5y ago
I resonate with the article, though there are probably more precise ways to frame the phenomenon. It's not that students don't/can't understand the filesystem, but that it's not a central part of their mental model
79.
Partitioning Oracle Attacks [pdf](usenix.org)
3 points by cjcampbell 5y ago|0 comments
80.
by cjcampbell 5y ago
Oh, I’m absolutely buying it. Even more so after seeing Bob say that he’d be willing to send a digital copy with a physical purchase. I’ll just have to keep the physical copy at my office so that my partner doesn’t have to suffer more clutt
81.
by cjcampbell 5y ago
As others have said, congratulations. I've been following your progress for a good part of this journey, and I'm excited that you're finally able to hold a finished product in your hands! And now I'm stuck with a dilemma
82.
by cjcampbell 5y ago
I’ve picked this up for my team after stumbling on an excerpt earlier. While there is still work to be done, the ambitious outline and the current draft definitely have some value to offer for a patient and curious reader. I hope the author
83.
Deployment from Scratch (Pre-Release)(deploymentfromscratch.com)
1 points by cjcampbell 5y ago|1 comments
84.
by cjcampbell 5y ago
I’ve seen and experienced a variety of issues over the years, but my distrust of time machine is based on silent failures. I’ve been able to benefit from time machine backups when they were a convenient solution, but when they were really n
85.
by cjcampbell 6y ago
Mentioned some guidance in a separate thread, but encoding/sanitization of dynamic content is crucial. Also, dig into the options for the tool and disable features that aren’t needed. As an example, wkhtmltopdf enables you to disable l
86.
by cjcampbell 6y ago
Won’t debate the other critiques, but one thing I would say for any HTML to PDF solution, is that you need to properly encode or sanitize any dynamic content. As an additional layer of protection, dig into the options for the tool in order
87.
by cjcampbell 6y ago
Citations would be helpful for such a claim. I work with HIPAA daily, and while I agree that it has a lot of problems, the one you identify here would be an issue of misguided hospital policy. The hospitals would be absolutely within thei
88.
by cjcampbell 6y ago
Auditing privacy settings on social, minimizing ability for anyone but their immediate circle to see activity. I’d encourage them to be cautious about what they do post and make sure they are aware that location data may be attached to imag
89.
by cjcampbell 6y ago
I can second this recommendation. Not cheap, but this dock has been excellent.
90.
by cjcampbell 6y ago
While there are some positive nuggets in here, I would not recommend the sum product to any of my small business clients. I want to be clear that I don’t say this lightly. In terms of cyber-security guidance, small businesses are severely u

More ›