feld

78 ms·

871.
by feld 12y ago
[citation needed] The Apache license has a Trademarks clause. But if the software name isn't Trademarked... The GPLv2 doesn't cover forking, software name, or trademark. Go ahead and search it. Nagios is the only software I can th
872.
by feld 12y ago
The rule we developed at a previous job for doing upgrades on their products is to reboot twice to avoid bricking it. Yes, twice. Sometimes once isn't enough for an unknown reason. Also their web interface has terrible memory leaks whi
873.
by feld 12y ago
Never attribute to malice that which is adequately explained by stupidity. If you've ever used a Ubiquiti product you'd believe they're just stupid
874.
by feld 12y ago
I noticed in your comment here and once in the article you misspelled "also" as "aslo". :-)
875.
by feld 12y ago
So what is the definition of "hacker"?
876.
by feld 12y ago
What part of "tesla is going to build their own batteries" do you not understand?
877.
by feld 12y ago
it doesn't mean anything; just another parrot
878.
by feld 12y ago
According to a friend who had cancer as a child, chemotherapy causes you to lose sensitivity in your extremities over time (nerve issues?). I'm guessing the feel of the 'f' and 'j' keys don't help him much.
879.
by feld 12y ago
the amount of conspiracy theories about every post attributed to dillon is getting out of hand
880.
by feld 12y ago
So that explains where they were sourced from. Thanks!
881.
by feld 12y ago
You just increase the entropy by adding characters, numbers, etc and keeping it reasonably long (20+ chars). The entropy of my passwords is quite high according to Keepass.
882.
by feld 12y ago
FreeBSD has an odd dictionary file (/usr/share/dict/web2a) which has short phrases. I use a script to randomly pull some entries from it and then I piece memorable ones together to make my passphrase. Sprinkle in some pu
883.
by feld 12y ago
why does automating the use of a jump host increase your attack surface?
884.
by feld 12y ago
I don't understand what (or why) you're asking
885.
by feld 12y ago
StartSSL has been on the naughty list for a while They charge for revocation, so it negates the entire idea of a "free certificate" if you can't properly revoke them without forking over money. It literally breaks the entire
886.
by feld 12y ago
turns out this is because FreeBSD's vim port is really bleeding edge / development and not using stable releases. But really, it shouldn't go 500 patches and still have no new release cut...
887.
by feld 12y ago
maybe they can tag releases more frequently instead of having a ridiculous amount of patches for each release % grep SHA256 /usr/ports/editors/vim/distinfo | wc -l 559 That's a ridiculous amoun
888.
by feld 12y ago
Once they have a shell they're free to do what they want. Local root exploits, etc are all fair game -- and there are plenty of 0-days out there. In fact, removing the compiler doesn't help; a lot of attackers and bots run a scrip
889.
by feld 12y ago
Both of you are creating a tarbomb and should be ashamed http://en.wikipedia.org/wiki/Tar_%28computing%29#Tarbomb
890.
by feld 12y ago
That's BS obscurity. If they can get a shell they can download a compiler anyway.
891.
by feld 12y ago
requires someone to know there will be symlinks they don't want to follow, though :-)
892.
by feld 12y ago
What does this effort gain them over a sophisticated dummynet setup?
893.
by feld 12y ago
Apache: OpenBSD was stuck on Apache 1.3 for ages because the license changes for Apache 2.0+ was incompatible. They also ended up maintaining their own fork for quite a while because patches to improve security were not being accepted upstr
894.
by feld 12y ago
Are you implying that Perl is never the best tool?
895.
by feld 12y ago
I was thinking that server side it was a PAM module, but client side it was not... for some bizarre reason. So yeah, I suppose if your platform supports PAM this is feasible.
896.
by feld 12y ago
Chrome has access to USB and its own code to handle U2F devices. This would require your SSH client to have the same capabilities. This might work well on Linux/BSD machines, but likely not on OSX due to stagnant unix utility updates a
897.
by feld 12y ago
This was demoed to my employer when Microsoft came through a month ago. I was not impressed -- biometrics are a username, not a password. edit: the article does not cover using your voice. I'm 99% sure they demoed to us the ability to
898.
by feld 12y ago
Hope to see a lot of OSes properly contacted and ready to release fixes on 3/19
899.
Embargoed OpenSSL Vulnerabilities(mta.openssl.org)
20 points by feld 12y ago|4 comments
900.
by feld 12y ago
I didn't notice that CertSimple was EV-cert only. I can't imagine anyone requiring an EV cert for a wildcard... :-)

More ›