cnst

64 ms·

691.
by cnst 7y ago
When you talk about ECS being optional, you also have to keep the context in mind. * Yes, if you're running a local resolver for your LAN, or have a website on a single server, of course ECS should be optional. * If you're running
692.
by cnst 7y ago
Per https://serverfault.com/a/560059/110020 , Google's 8.8.8.8 has had support for `edns0-client-subnet` since at least 2013, so, even if it's only been standardised in 2016, it's been a de-factor st
693.
by cnst 7y ago
What exactly do you use DNS for? Most folks use it to resolve a domain name so that they can make an HTTP and/or HTTPS requests from the very same IP address over the very same internet connection. Surprise: these subsequent HTTP&#x2
694.
by cnst 7y ago
What's the actual meaningful difference, though? ECS is limited to a /24 anyways, so, it doesn't even reveal the exact IP address in any case.
695.
by cnst 7y ago
Reuters.com isn't usually that bad. At least they don't have screen-wide popups.
696.
Cloudflare's DoH Disabled by Default in Firefox on OpenBSD(undeadly.org)
3 points by cnst 7y ago|1 comments
697.
Humungus – an hg (Mercurial SCM) server written in Golang, supports `go get`(humungus.tedunangst.com)
2 points by cnst 7y ago|0 comments
698.
by cnst 7y ago
sleep $((5 * 24 * 60 * 60)) && chromium-review > /dev/null
699.
by cnst 7y ago
What a mess, seriously! What is the retention policy? How far into the past are the binaries stored?
700.
by cnst 7y ago
> We ought to expect more from Mozilla on this. What you're advocating is for Mozilla to become a walled-garden, just like Brave and Chrome are. Since when is a walled-garden a good thing? If you trust Mozilla more than you trust Go
701.
by cnst 7y ago
Those are Git tags; they have nothing to do with reproducible builds, because you're not providing the executable binaries that are the ones being distributed. It's a huge downgrade in terms of reproducibility of builds compared
702.
by cnst 7y ago
What you say makes no sense — why would they advocate for you to use a VPN such that a third-party could eavesdrop on your communication, when they already provide a business-quality connection through a business carrier? I am not aware of
703.
by cnst 7y ago
I'm a WeWork member, I do security, and I'm 100% OK with the existing WiFi setup. What exact alternative do you suggest? Having user-assigned password authentication through 802.1x, so that the company can track exactly how much
704.
by cnst 7y ago
I don't see any mentions of reproducible builds over there. If you're not familiar what reproducible builds are, I suggest you examine the following article: * https://brendaneich.com/2014/01/trust-but-ve
705.
by cnst 7y ago
He already does it on his other account — @BraveSampson. Here's a screenshot of both accounts side-by-side, compare and contrast: * https://twitter.com/Mcnst/status/1166520716826763264 Obviously, if this orig
706.
by cnst 7y ago
He's not going to do that because https://news.ycombinator.com/item?id=20806265 , and it wouldn't fit his agenda. tl;dr: he works for Brave, has two personal Twitter accounts, both browser-related, yet posts these
707.
by cnst 7y ago
Re: The Cyber-Insecurity of WeWork – Shared Offices and Cracking WiFi with Weak WPA2 Passwords Sorry, but the password complaint is just ridiculous. What's exactly the point of a strong password if it's still shared with a millio
708.
by cnst 7y ago
Not only that, but he has another account, @BraveSampson, which links to this one, @jonathansampson, but not the other way around. They used to have a nearly-identical pictures, and, IIRC, linked to each other, but not anymore. Would I be
709.
by cnst 7y ago
> https://joojoobs.com/leather-grades/ Thanks for this; I had no idea that Genuine Leather wasn't a good thing, but I did have my suspicions as so many products seem to use the designation where the quality doe
710.
by cnst 7y ago
The brand names are the worst in this regard. I think pretty much any Kenneth Kole leather item I have ever seen in the last 10 years has been fake leather; definitely do stay away from those.
711.
by cnst 7y ago
Yeah, DARPA funded OpenBSD development in Canada in the past, so, not much surprise that they also fund research at the University of Cambridge, I guess. https://www.cl.cam.ac.uk/research/security/ctsrd/cheri&
712.
by cnst 7y ago
A FreeBSD.org confirmation below; note the sponsored-by part: * https://www.freebsd.org/news/status/report-2019-01-2019-03.h...
713.
Soon all the voting machines in U.S. will be powered by FreeBSD/RISC-V(twitter.com)
67 points by cnst 7y ago|36 comments
714.
Netflix: Patch for Review: Kernel Portion of In-Kernel TLS (KTLS)(lists.freebsd.org)
2 points by cnst 7y ago|1 comments
715.
by cnst 7y ago
> It's hard to say how the future will develop. There are only three open-source operating systems in the entire world that really pull it together on having a complete, modern, SMP kernel: Linux, DragonFlyBSD, and FreeBSD. And that
716.
by cnst 7y ago
http://We.Are.Sanctioned.RU/ ?
717.
DragonFlyBSD Project Update – colo upgrade, future trends(lists.dragonflybsd.org)
5 points by cnst 7y ago|2 comments
718.
by cnst 7y ago
Is it perhaps a good time to remind folks that the same thing could happen to all your "secure" HTTPS websites that are completely unavailable via HTTP, where the only thing served over HTTP are the 301 Moved redirects, even for s
719.
Web Documentation(mail-index.netbsd.org)
2 points by cnst 8y ago|0 comments
720.
Removing PF(mail-index.netbsd.org)
3 points by cnst 8y ago|0 comments

More ›