finnn

47 ms·

421.
by finnn 11y ago
While I absolutely agree with the sentiment, I must point out that they accidently have SSL, even if they don't know it, because CloudFlare. It's just not forced, which is unfortunate. And yeah, the lack of privacy stuff is concer
422.
by finnn 11y ago
Can you post info about the cert you're getting? On Chrome, this is done by clicking the lock icon by the https, selecting the "Connection" tab, then clicking the "Certificate Information" link. As was pointed out e
423.
by finnn 12y ago
No
424.
by finnn 12y ago
Sure! Install OpenWRT or some other alternative firmware.
425.
by finnn 12y ago
It looks like it could be done with a DNS rebinding attack (as you need to set a special HTTP header, so normal CSRF stuff doesn't work). This would mean the victim would simply need to visit an attacker controlled webpage
426.
by finnn 12y ago
The web is full of articles like this. Vendors still come out with shitty, usually GPL-violating firmware. Links below from some quick googling and going through the archives of devttys0.com, but it doesnt even begin to describe the problem
427.
by finnn 12y ago
(can't edit, so posting correction) Looks like HTTPS Everywhere breaks FCC's website.
428.
by finnn 12y ago
Ah interesting, I didnt see that, I didn't consult that page much because it seemed to be solely focused on the Digital Ocean stuff
429.
by finnn 12y ago
There doesn't seem to be much in the way of install instructions for anything, except the digital ocean automated installer, which also sets up a prosody server.
430.
by finnn 12y ago
There are loads of them. https://xmpp.net/directory.php has a (not-so-up-to-date) list.
431.
by finnn 12y ago
What's with the use of public IP space? Why is the openwrt web UI even in the firmware if it's supposed to be firewalled off?
432.
by finnn 12y ago
That link 404s
433.
by finnn 12y ago
That's cool, I didn't know how traceroutes work. Is he planning on releasing the http traceroute tool?
434.
by finnn 12y ago
I'm not 100% sure, but fairly certain the way that x.509 works, there is a boolean field for whether or not the certificate is an authority, with no control over what they are an authority for. I believe this field is called basic cons
435.
by finnn 12y ago
looks really cool, but the fromhttpstream endpoint they reference seems to be down or broken
436.
by finnn 12y ago
https://com.google - Google showing off their new gTLD in a silly manner.
437.
Introducing the New Face of Search – Google Panda(googleasiapacific.blogspot.com)
2 points by finnn 12y ago|1 comments
438.
by finnn 12y ago
Yes! I discovered (completely by accident) that 00:11:22:33:44:55 is authenticated to someone's account, so I just set my mac to that when I need to use their shit
439.
by finnn 12y ago
Their blog is a tumblr, tumblr doesn't do https on their subdomains.
440.
by finnn 12y ago
I'm not saying it's easy, but if "safety is top priority", it shouldn't take this long.
441.
by finnn 12y ago
>Our UK experiment provided data that showed a small percentage of users had problems logging in after the migration. We pinpointed this to Safari users, which allowed us to start investigating the root cause. Sounds like they don't
442.
by finnn 12y ago
> safety is top priority yet they didn't go full https till early 2015 - when do we get to start pointing this shit out? Sidejacking attacks have been around for years (Hamster [1] is from 2007), and the millions of other reasons to
443.
by finnn 12y ago
http://sdr.osmocom.org/trac/wiki/rtl-sdr#KnownApps
444.
by finnn 12y ago
Did you even read the article? That's not what the author is saying at all.
445.
by finnn 12y ago
>CoinBase, an similar anti-privacy company Really? How is looking at public blockchain data at all similar to installing malware?
446.
by finnn 12y ago
And you're still running the OS that it came with? Even if you want to keep Windows, always reinstall fresh. It's far easier than trying to hunt down every piece of malware they put on it
447.
by finnn 12y ago
What is going on with the timezones in that email exchange? First one is in -0500, second one doesn't specify a timezone and third one is in +0000
448.
by finnn 12y ago
Link to what? https://www.cloudflare.com ?
449.
by finnn 12y ago
I could be wrong, but doesn't the raspberry pi require a humongous blob of unmodifiable binaries to run even linux? From what I understood, a number of hardware components are have closed source drivers and such, that made many dislike
450.
by finnn 12y ago
It uses CloudFlare, which is presumably added anything in the way of IPv6 and SSL

More ›