dsl

64 ms·

661.
by dsl 10y ago
From my experince as an attacker -- - Is it better to use a different passphrase on each key, or does using the same one not matter much? - How much less secure is it to not use a passphrase on a key? - Should you use a different
662.
by dsl 10y ago
If you are going to set this up, sit down and spend an hour thinking about your backup and recovery strategy first. I'm familiar with an organization that did a POC for 2FA using them and had a surprisingly high failure rate.
663.
by dsl 10y ago
Assuming or magically guessing file extensions leads to all sorts of confusion attacks that could result in arbitrary code execution. I would go so far as to say an absolute path should be required.
664.
by dsl 10y ago
Of the last 10 or so security engagements I have done, I can only recall one where I wasn't able to compromise _all_ servers. Once you get the first few, the incremental work to get everything is relatively small. When breaking in, you
665.
by dsl 10y ago
Apple has approached McLaren Technology Group, the British supercar engineer and Formula One team owner, about a potential acquisition, in the clearest sign yet that the iPhone maker is seeking to transform the automotive industry. The Cali
666.
by dsl 10y ago
tlsdate is a much cleaner implementation of this idea, taking the time from the handshake. TLS 1.3 as it stands makes sending the server time optional. The 'Date' header is tricky because it is a timestamp of when the document was
667.
by dsl 10y ago
As an example, I track requests per second per datacenter in a time series database. This allows me to make pretty graphs and do traffic engineering between sites.
668.
by dsl 10y ago
I have always described self driving cars as the ultimate test of the the Trolley problem [1]. Does a self driving car have an obligation to protect the occupant at the risk of pedestrians? vice versa? What if the pedestrian or occupant is
669.
by dsl 10y ago
But at least you can cease further communications. Feel free to suggest a better idea.
670.
by dsl 10y ago
Can you please also include an HTTP response header that tells us the level of verification of the connection to the origin? If CloudFlare wants to live dangerously with origin connections, fine... but give end users a way to drop the conne
671.
by dsl 10y ago
You should really reach out to Andy Ellis. Akamai forces cert pinning when HTTPSing back to customer origins for some very good reasons that he can explain to you.
672.
by dsl 10y ago
The Blizzard updater is actually a very cool download utility, worth hacking/poking at. AFAIK it pioneered the concept of "web seeds", using HTTP GETs with a Range: header to download specific chunks from a CDN that were not
673.
by dsl 10y ago
Every semantic API ends up with an overriding parameter like _action=PUT because well intentioned API developers don't know that broken middleboxes exist on the internet until their beautiful creation collides with reality.
674.
by dsl 10y ago
This. Every time I use the Soundcloud app I think to myself "I wonder if I could crowdsource the development of a third-party iOS app..."
675.
by dsl 10y ago
I'd love to see an "every second" of revenue for the Fortune top 50
676.
by dsl 10y ago
The internet will do it for you. http://www.the-email-archive.com/email-data-jgc-optimal-com-...
677.
by dsl 10y ago
You can use use OpenDNS and turn on filtering of the "Advertising" category. https://community.opendns.com/domaintagging/?category_id=53 Protip: Doing this at the DNS and not the browser level leads to lots o
678.
by dsl 10y ago
You should hook him up with his old work address! I actually went on an adventure of re-registering old company addresses a few years ago.
679.
Misery Map: Nationwide airport delays(flightaware.com)
2 points by dsl 10y ago|0 comments
680.
by dsl 10y ago
Because all of the teams are building very contrived contraptions to work around them.
681.
by dsl 10y ago
Something that seems really odd is they are working off the false assumption that current picking bins are suitable for the job. It seems every team was effectively competing against the bins, not devising an efficient way to put a subset o
682.
by dsl 10y ago
Yeah, everyone treats non-routable space as a security control. So expect to only see DMZs and edges of networks in the routable IPv6 space.
683.
by dsl 10y ago
Your submission falsely implies that unit tests create reliable software. But that aside... Avionics software is subjected to multiple rounds of peer review (often by different companies), integration testing, and in some cases multiple dif
684.
by dsl 10y ago
> portmanteau a large trunk or suitcase, typically made of stiff leather and opening into two equal parts.
685.
by dsl 10y ago
The folks who make HyperTerm might have something to say about your product naming... http://www.hilgraeve.com/hyperterminal/ Edit: I'm surprised more people in the HN crowd aren't familiar with HyperTerm (Ye
686.
by dsl 10y ago
Can you pass down a header to the client describing the security of the origin connection? Or let me pass CloudFlare a header that I explicitly would rather you drop the connection than plain text it back to origin?
687.
by dsl 10y ago
Can you give more details on how the Fuel Vault works? I use GasNinja currently, but would consider switching just so I could tear one apart.
688.
by dsl 10y ago
You are correct, I oversimplified my example.
689.
by dsl 10y ago
Front running is seeing your friend looking at a car on craigslist, buying it, and then selling it to him. Renaissance is using satellites to monitor retail store foot traffic to predict quarterly earnings. (both as hypothetical examples)
690.
by dsl 10y ago
One of the things HFT firms take advantage of is increasing a nanosecond lead into a microsecond (or more) lead by route optimization. If they can get information from one exchange to another faster than the original order, they can effecti

More ›