Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
feld
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
54 ms
·
541.
▲
by
feld
11y ago
Saves time from having to download the software and look for LICENSE, COPYING, or even peeking at the source code for the license header. This protects the user's employer from being accused of using the software and violating the GPL
542.
▲
by
feld
11y ago
It's free since Facebook bought them. I've had Android friends mention payment screens are still on their WhatsApp though.
543.
▲
by
feld
11y ago
It is an expensive container, that is all. Attackers can escape or even steal data from another running VM.
544.
▲
by
feld
11y ago
I understand and agree with that.
545.
▲
by
feld
11y ago
Why do you feel this way? Security? If I can get a shell on your server I will just download my own compiler.
546.
▲
by
feld
11y ago
There is a stable/quarterly ports tree now and it's the default package set. It's not so caustic anymore.
547.
▲
by
feld
11y ago
Explain yourself. A hypervisor is not a security layer, so what is your reasoning?
548.
▲
by
feld
11y ago
You missed my edit. The RFC clearly states you are not to enforce encrypted SMTP with STARTTLS to the public internet.
549.
▲
by
feld
11y ago
STARTTLS exists as an opportunistic encryption upgrade , not enforcement. If a MITM strips the advertisement of STARTTLS (very, very simple to do) the client and server will both happily continue plaintext communications. This is the defau
550.
▲
by
feld
11y ago
> Photos of the arrests show a policeman in a ski mask holding a Kalashnikov while Chetrus knelt on a sidewalk in front of the bank. He would eventually be sentenced to five years in prison. This guy is involved in the sale of enriched u
551.
▲
by
feld
11y ago
Yes, it would take a long time to spread considering there's a whopping 388 domains out there using DNSSSEC for SMTP, the majority of them run by neckbeards and not commerical email services. 388 Zones have deployed TLSA for SMT
552.
▲
by
feld
11y ago
That's fine. They can deny it. At least you won't be MITM. I'd rather have no service than compromised service. Look at Fastmail. They don't even offer STARTTLS. Why? Because of downgrade attacks! SSL/TLS Encr
553.
▲
by
feld
11y ago
But STARTTLS is a step backwards because a MITM can disable crypto by not advertising STARTTLS
554.
▲
by
feld
11y ago
It will be cheaper to hire s Postgres developer than pay Oracle licensing
555.
▲
by
feld
11y ago
Never use hints in production!
556.
▲
by
feld
11y ago
Psssst WhatsApp still doesn't have the new fancy encryption on iPhones, and you don't have to turn off SMS completely for iMessage; you just disable SMS fallback for users who are registered for iMessage
557.
▲
by
feld
11y ago
Don't Apple Pay and Android Pay operate almost identically now? The original Google Wallet/Pay implementation which I used years ago via NFC was different. I don't believe the Android Pay name change is just branding.
558.
▲
by
feld
11y ago
> huge incumbency I've never heard of Venmo, nor have any of my tech friends.
559.
▲
by
feld
11y ago
Who said it would be iPhone-only?
560.
▲
by
feld
11y ago
Technical capability exists. Everyone running BGP should be implementing BCP38. http://www.bcp38.info
561.
▲
by
feld
11y ago
This doesn't stop traffic from getting to you. If the attacker has more bandwidth than you, you lose. Complete outage. All your customers think you're down because they can't get packets through. You need the DDoS traffic fil
562.
▲
by
feld
11y ago
Yeah, it's a real shame that Fastmail isn't doing any open source or trying to improve email standards for the entire internet https://github.com/fastmail https://github.com/brong/cyrus-imapd&
563.
▲
by
feld
11y ago
4K is not ready for consumers yet. Here's my friend's 4K Samsung TV that can't do 4K over any HDMI port without buying a $400 upgrade http://i.imgur.com/nOSULENh.jpg
564.
▲
by
feld
11y ago
Thanks for this, I just integrated it with my CSR script and now I have a SAN cert Just need to figure out renewal now
565.
▲
by
feld
11y ago
NFC they just need my stolen card Apple Pay they need to steal my phone, hope I haven't remotely wiped Apple Pay, and know my long passcode or have my fingerprint
566.
▲
by
feld
11y ago
Hmm? I'm relatively certain Signal removed all support for SMS/MMS and requires all parties to use the Signal app https://whispersystems.org/blog/goodbye-encrypted-sms/
567.
▲
by
feld
11y ago
> Do one thing and do it well. People really like to parrot this statement. Nobody is going to make it do "more" than a scheduling tool. It's not going to become a volume manager or start steering your clock... Why aren&#x
568.
▲
by
feld
11y ago
SickBeard development has been dead for like a year. Have you noticed how awful it has been at finding episodes? SickRage is the fork that has lived on
569.
▲
by
feld
11y ago
Yes, I should clarify Cron doesn't understand system load Cron doesn't understand suspend/resume Cron doesn't understand *anything* Disk intensive daily jobs shouldn't run if the system is being crushed.
570.
▲
by
feld
11y ago
It's a hard requirement of the next FreeNAS/TrueNAS release. So it's going to exist in production on many machines. We need competition and I urge him to continue but this dismissive attitude is not healthy.
More ›