Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
dsl
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
60 ms
·
631.
▲
by
dsl
10y ago
The forged cookie attack was used on a limited number of accounts, by a state sponsored actor. Going to this amount of effort and then sending spam would be on par with breaking into a bank just to steal the printer paper from the office. M
632.
▲
by
dsl
10y ago
I mostly agree with you. This has been an issue with multiple free DNS providers for many many years (and one I personally reported to DigialOcean years ago). Unfortunately we now live in a world where control of DNS is proof of ownership.
633.
▲
by
dsl
10y ago
Funny, Privacy Badger blocks enough of www.jsdelivr.com that the site content fails to load.
634.
▲
by
dsl
10y ago
This is basically peer-to-peer routing over VPN tunnels. The default mesh (Earth) is built using hijacked IP space, which isn't a great sign that they have networking expertise.
635.
▲
by
dsl
10y ago
The shellcode is Windows specific, but the bug is in Firefox. It is possible there is something server side sending the proper code depending on the user agent.
636.
▲
by
dsl
10y ago
If I were a scary government type and took control of riseup.net, that is exactly the thing I would post to twitter if I couldn't compel them to update the canary.
637.
▲
by
dsl
10y ago
Where is the opt-out?
638.
▲
by
dsl
10y ago
Operating a monetary transmittal service in the United States without implementing KYC-AML (which is what he is basing this on) is practically suicide. Even retailers will send you to customer service to complete a form for buying too many
639.
▲
by
dsl
10y ago
> Why the heck would you send traffic out transit links using GRE tunnels I was responding to your statement that you needed a backbone to be able to deal with DDoS attacks. That is simply untrue. Most hosting providers announce separate
640.
▲
by
dsl
10y ago
You don't need a private backbone to be able to mitigate attacks across multiple locations. I've done it fighting off multi-hundred Gbps attacks and it was never an issue. You can QoS your own intra-site GRE tunnels. Linode is mov
641.
▲
CloudFlare is requesting SSL certificates without user consent
(groups.google.com)
1 points
by
dsl
10y ago
|
0 comments
642.
▲
by
dsl
10y ago
See if you can sell it first. When piracy becomes a problem, then look into software protection. Niche software rarely gets pirated because the demand is low.
643.
▲
by
dsl
10y ago
It is hostnames and IP addresses, not DNS names and IP addresses. I've seen boxes inside organizations where the orgs own domain was typoed.
644.
▲
by
dsl
10y ago
> Someone took a Cyrillic adjective, treated as an English noun, and then applied an English pluralization to it. So a Russian with a deep background in linguistics intentionally bastardized something so it looks like an English speaker
645.
▲
by
dsl
10y ago
> since 95% of the time I'm using my laptop, I actually have it closed, hooked up to a screen and with external keyboard and mouse I can't believe they put a radio in my car since 95% of the time I just leave it in my driveway
646.
▲
by
dsl
10y ago
It sounds like the IPO is employee retention driven.
647.
▲
by
dsl
10y ago
You don't need to use CloudFlare DNS to route HTTP(S) to them. They would just strongly prefer that you did.
648.
▲
by
dsl
10y ago
How are you getting live access to 911 calls? Or are you just showing crimes reported by other users?
649.
▲
by
dsl
10y ago
In my experience Dyn pushes this functionality very hard during customer on boarding, effectively as a lock in for their platform.
650.
▲
by
dsl
10y ago
This is one of the most disturbing things I couldn't stop reading.
651.
▲
by
dsl
10y ago
The government has all sorts of pay guidelines on what people can make, which makes it near impossible for them to retain talent. Most of the NSA guys I know put in 18 or so months, then go to Booz Allen and get contracted right back to the
652.
▲
by
dsl
10y ago
Go intentionally introduces randomness when reading maps so developers don't write code dependent on order.
653.
▲
by
dsl
10y ago
New life goal: Join the "Chaos Team"
654.
▲
by
dsl
10y ago
You know who else is PCI-DSS v3.1 complaint? The merchants getting breached.
655.
▲
by
dsl
10y ago
For all the emphasis put on multi-datacenter replication, it would be awesome to see it documented! Really looking forward to playing with this. Cool stuff.
656.
▲
by
dsl
10y ago
One of the responses to your mailing list post hits the PHP nail on the head: "Don't piss off users for purety."
657.
▲
by
dsl
10y ago
The name of Keyhole, Inc was an homage. They employed some former NRO folks, and received NRO funding by way of In-Q-Tel.
658.
▲
by
dsl
10y ago
KEYHOLE the compartmentalization for all satellite sourced intelligence products, not a specific program (like CORONA, CRYSTAL, TOPAZ, etc)
659.
▲
by
dsl
10y ago
I searched and searched, but I couldn't find a download link on Firebase.com. Help?
660.
▲
Google buys another 74 acres in the Dalles as data centers expand
(oregonlive.com)
1 points
by
dsl
10y ago
|
0 comments
More ›