Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
cnst
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
45 ms
·
511.
▲
by
cnst
7y ago
A non-paywall source: http://archive.is/uRXE6 . This doesn't seem to have any effects for anyone other than investors; so, this is probably not really relevant for HN as there's hardly anything in the story for us
512.
▲
DOJ drops charges against ‘Russian trolls’ after they dared demand evidence
(rt.com)
3 points
by
cnst
7y ago
|
0 comments
513.
▲
Google Employee Reportedly Tests Positive for Coronavirus in India
(sputniknews.com)
1 points
by
cnst
7y ago
|
0 comments
514.
▲
by
cnst
7y ago
Well, it's my phone and service, I paid for it, and I want to give the police the address of the perpetrators for them to check out. But, no, I'm not allowed to do that, because privacy; and, no, the police in California won'
515.
▲
by
cnst
7y ago
I think it's interesting that these articles are always from the PoV of living in a surveillance state. What about legitimate uses of geofence warrants? Does that not exist? What if your mobile device gets stolen? Why should you not
516.
▲
by
cnst
7y ago
They don't post anything about the costs, but that would likely be the defining vector in this whole situation. I mean, let's face it — noone's going to go get tested if it means you'll have to pay 5k+ out of pocket for
517.
▲
by
cnst
7y ago
/sarcasm?
518.
▲
by
cnst
7y ago
I was trying to figure this out for a re-print as well; I guess they intentionally not mention whether the person is assigned to Zurich or was just visiting from elsewhere. Neither CNBC nor BI has any explicit information about these rather
519.
▲
by
cnst
7y ago
Do Google employees not have friends, relatives, parents and grandparents?
520.
▲
by
cnst
7y ago
Is it two different arguments you're posting? How's $0 on zero requests is a better solution when the range would be 0 to $2000 for what's a fixed $4 without Lambda? The $0 argument is also flowed because $4 is a fixed cost
521.
▲
by
cnst
7y ago
> As far as your parenthetical example: it's not at all common or reasonable for a user to not configure their local-only mail server and then use it to send remote mail. They'd use a properly configured remote server for that
522.
▲
Exploits now avail: LPE and RCE in OpenSMTPD's default install (CVE-2020-8794)
(openwall.com)
1 points
by
cnst
7y ago
|
0 comments
523.
▲
by
cnst
7y ago
> What’s in it for the Cloudflare & NextDNS? I'm amazed noone else is asking this. CF's whole business model centres around the concept of denying website access to minorities they classify as "bots". Some big a
524.
▲
by
cnst
7y ago
It's a bug in the client part of OpenSMTPD, so, it is still remotely exploitable in the default install, it's just that the user has to attempt sending some mail out towards the infrastructure controlled by the attacker (could be
525.
▲
by
cnst
7y ago
> I really have come to the conclusion that privacy is just a marketing feature for Mozilla. They e.gg. also do nothing against data exfiltration by popular extensions although they have known that issue for years. I thought about this r
526.
▲
by
cnst
7y ago
> But there is no guarantee that these mitigations will continue to work. This is the biggest problem. It used to be that Firefox was on your side, but now it's turning into the we-know-better-than-our-users Chrome, where they don&
527.
▲
by
cnst
7y ago
Well, maybe because DJB takes it for granted that you don't actually need two servers in the first place, so, there's not much to debunk? % dig ns yp.to +short uz5jmyqz3gz2bhnuzg0rr0cml9u8pntyhn2jhtqn04yt3sm5h235c1.yp.to
528.
▲
Costs and benefits of third-party DNS service (2003)
(cr.yp.to)
1 points
by
cnst
7y ago
|
0 comments
529.
▲
by
cnst
7y ago
You don't even need multiple servers (especially if both your website and mail run on the same server), it's a misconception debunked by the author of djbdns: http://cr.yp.to/djbdns/third-party.html
530.
▲
by
cnst
7y ago
> Well, it's also a problem of device manufacturers dropping support for devices too quickly. There are still android 4.1 devices sold on amazon, and you really can't expect web developers to support that. Are you kidding me?
531.
▲
by
cnst
7y ago
Exploitable remotely in the default OpenBSD install.
532.
▲
by
cnst
7y ago
I've been using it for years! Really nice text-mode interface.
533.
▲
Russia-China Pipeline Connecting Siberia to Shanghai Bypasses US Strategic Clout
(sputniknews.com)
1 points
by
cnst
7y ago
|
0 comments
534.
▲
by
cnst
7y ago
The prior discussion for the original bug report from about a week ago: * https://news.ycombinator.com/item?id=22336962#22339434 Apparently, the prior fix didn't completely address the issue.
535.
▲
by
cnst
7y ago
Looks like it hasn't actually been fixed, after all: * https://news.ycombinator.com/item?id=22391920
536.
▲
OpenBSD's VMM vuln: “the guest still can write to host memory”
(marc.info)
2 points
by
cnst
7y ago
|
1 comments
537.
▲
by
cnst
7y ago
That's funny, because it's an AMD64-specific hypervisor that's first been released with OpenBSD 5.9 (released March 2016 — 4 years ago).
538.
▲
by
cnst
7y ago
Don't see anyone mention these rather notable features of NetBSD 9.0: * NVMM — hypervisor compatible with QEMU. https://news.ycombinator.com/item?id=19622590 . http://blog.netbsd.org/tnf/entry
539.
▲
by
cnst
7y ago
The major issue has just been fixed: * https://marc.info/?l=openbsd-cvs&m=158180761313544&w=2 Taking the opportunity, I'd like to point out that Max wrote NVMM and KASLR, both first appearing with NetBSD 9.0 re
540.
▲
by
cnst
7y ago
Edit: I tried finding original emails, and it was actually a different food-robot startup, not Zume. It's funny how they all look alike. Original comment cannot be edited anymore, looks like, only 2 hours later.
More ›