dgl

12 ms·

121.
by dgl 4y ago
I’d really like to see something like https://engineering.fb.com/2022/03/10/security/code-verify/ become a more standard part of browsers. i.e. a standard way to go from sub-resource integrity to “f
122.
by dgl 4y ago
This is [was; the quote in the parent was edited] incorrect, the response includes `header.ad`, which on Linux is controlled by both what the resolver responds with and `option trust-ad` in /etc/resolv.conf, so the administrator c
123.
by dgl 4y ago
On Ubuntu the default is to use systemd-resolved, which is actually a validating stub resolver. You just need to set DNSSEC=true (see man resolved.conf) and it will work*. *: this is the definition of "work" that also means it won
124.
by dgl 4y ago
As mentioned elsewhere in this thread, actually using SSHFP in a secure way is difficult. Far better is to use SSH host certificates, then your known_hosts can simply have a @cert-authority * some-cert in it. (See https://www.lor
125.
by dgl 4y ago
It looks like the website has been carefully recreated (presumably just for SEO juice), the domain says it was registered in 2020. However according to https://en.wikipedia.org/wiki/LatencyTOP the project was abandoned
126.
by dgl 4y ago
GPG for sure, be very careful with "vim -x" as that's the only implementation of that encryption scheme, not supported in neovim anymore (and I've found security issues in it: https://dgl.cx/2014/10&
127.
by dgl 4y ago
I've also replaced a Ubiquiti EdgeRouter with a spare PC I had around. It was a small form factor thing, I don't need WiFi, so I replaced the WiFi card with a M.2 Ethernet card[1], which gives me two network interfaces. The point
128.
by dgl 4y ago
and also the GitHub repo with the presentation link is a 404.
129.
by dgl 4y ago
This exact variant with no interaction code execution doesn't, but it's possible to use the vi line editing keys via this bug and do something like hide a command before the current cursor position. (OpenBSD's ksh will show a
130.
by dgl 4y ago
Debian's patch is nicer, as the build process pulls the default from the man page, so: https://sources.debian.org/patches/xterm/375-1/904_fontops.d...
131.
by dgl 4y ago
[Original finder here; I wrote that, I checked.] See the docs: https://github.com/zsh-users/zsh/blob/f8d93888a8efd6c8142e74... Relevant code: https://github.com/zsh-users/zsh/blob&#x
132.
by dgl 4y ago
In the write-up search for the bit that says "and one time I forgot to reboot the phone". tl;dr: It's not an encryption bypass, it bypasses the lock screen once the phone has been unlocked once.
133.
by dgl 4y ago
Depends which terminal you use. Apple Terminal, xterm and rxvt at least do blink.
134.
by dgl 4y ago
[5mDo you?[0m
135.
by dgl 4y ago
Answer: Yes. https://imgur.com/a/DlrEbvI
136.
by dgl 4y ago
[32mDoes this mean HN can support color text now?
137.
by dgl 4y ago
It would be nice if this used OSC 8[1] (less supports it) so that there is an easy way to click a link if I want to go to my actual browser. [1]: https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3c...
138.
by dgl 4y ago
I mean Google did essentially do this: https://opensource.googleblog.com/2017/01/grumpy-go-running-... Except without actually solving the problem of making the translation nice and readable. But this kind of thin
139.
by dgl 4y ago
http://archive.today/k1EuT
140.
by dgl 4y ago
Unfortunately that's not what the license says. > Redistributions in binary form must reproduce the above copyright > notice, this list of conditions and the following disclaimer in the > documentation and/or other materi
141.
by dgl 4y ago
The use case is not wanting people to care, in theory if you license a small code sample under ISC / MIT / normal BSD, etc. licenses then someone has to include the copyright statement in "all copies" (ISC, or slightly d
142.
by dgl 4y ago
> This is different from a truly free license like BSD or MIT which grant unlimited redistribution and use. Not "unlimited"; they do require a copyright notice. An interesting license for small pieces of code like this is 0BSD[
143.
Nat-Again: IRC NAT helper flaws(dgl.cx)
3 points by dgl 4y ago|0 comments
144.
by dgl 4y ago
It's very hard to follow the way this builds up a script as it goes, it's unclear what benefit putting it all in one script has, it's really a bunch of scripts. Also the link at the end for more details, goes to https:/
145.
by dgl 4y ago
Interestingly the reason the NHS has for this is vaccination can result in giving adults shingles (I simplify: https://patient.info/news-and-features/should-your-child-hav... explains). As a result shingles seems rare
146.
by dgl 4y ago
Thanks, hidden.
147.
by dgl 4y ago
Amazon does provide a way to map to the real availability zone: https://docs.aws.amazon.com/ram/latest/userguide/working-wit... It's also not appropriate in all cases to spread out, for example the neare
148.
by dgl 4y ago
They do tell you the carbon impact right on the region selector: https://cloud.google.com/blog/topics/sustainability/pick-the... and also https://cloud.withgoogle.com/region-picker/ is q
149.
by dgl 4y ago
Strange, I'm not sure where I got that from, will fix.
150.
by dgl 4y ago
Oracle also had issues around the same time: https://ocistatus.oraclecloud.com/#/incidents/ocid1.oraclecl... Obviously the weather is easy to blame, but I wonder if the underlying cause is the same datacenter. It&

More ›