Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
g45y45
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
12 ms
·
61.
▲
by
g45y45
8y ago
privacy
62.
▲
by
g45y45
8y ago
Buddy, client isolation mode or lack there of is sometimes called allowing 'peer to peer' traffic. I understand the ambiguity over TCP P2P networks, but given the context most network engineers know what you are talking about. Reg
63.
▲
by
g45y45
8y ago
I have no idea of the peer discovery mechanism in this product -- I was just stating that multicast is not the only peer discovery mechanism, ala printers and other consumer kit that scans the subnet.
64.
▲
by
g45y45
8y ago
Client Isolation mode is layer 2 -- its done at the Wireless AP. It should prevent enumeration of the private network space (if the other peers are on the Wireless AP). Neither Multicast nor unicast will work for traffic between clients.
65.
▲
by
g45y45
8y ago
Yes, but this is MUCH easier today. Next Gen firewalls support Deep Packet Inspection for MSRPC traffic, you can even whitelist specific RPC calls, auto/temp allow the ephemeral ports, etc
66.
▲
by
g45y45
8y ago
Very likely! But it could scan the subnet, like say a printer driver does. Multicast is the easiest, but not the only way. The issue mentioned in the article is likely related to both mDNS blocking and client isolation (peer to peer).
67.
▲
by
g45y45
8y ago
There is enable p2p, its called disabling client isolation mode. This isn't even specifically about multicast. Its just the peers (clients) cannot make unicast connections to each other.
68.
▲
by
g45y45
8y ago
because peer to peer -- ie client to client comms is blocked by the AP for security. Smarter wireless controllers allow selective protocol to pass, so you might be able to allow just mDNS (bonjour). Now this is just for wireless peers, it w
69.
▲
by
g45y45
8y ago
Yeah, this was a lame rant. Just create a single purpose SSID on your enterprise wireless controller that supports peer-to-peer (client to client connectivity). Bind the educational hardware to that, everything is fine. Really I dont see Go
70.
▲
by
g45y45
8y ago
I dont know why people bring up telegram. A vast majority of chat messages is sent directly in the clear to Telegram servers. Telegram can spy on your conversations. If they can, anyone can. It is NOT an encrypted messenger. It is a crappy
71.
▲
by
g45y45
8y ago
Which means that authorities can force the providers to inject public keys into the directory services, thus allowing the authorities access to the cleartext. End-to-end is a buzz word. What is important is key distribution, which is set to
72.
▲
by
g45y45
8y ago
yeah, but it was postponed because the speakers were all men. Some reddit commentary: https://www.reddit.com/r/javascript/comments/6f8u2s/githubs_... the official site just has a logo: http://
73.
▲
by
g45y45
8y ago
TIL Jinja is a place, its off the coast of Africa.
74.
▲
by
g45y45
8y ago
This is meaningless drivel. 1MB of data a second by 2020, that utter bollocks. 1MB doesn't seem like a lot, but its a million characters. Unlikely to be generating that a second. 1K/sec is more realistic. Generating random keys us
75.
▲
by
g45y45
8y ago
Juul uses nicotine salts, where as standard vape juice is just freebase nicotine. The salts are said to be 'milder' or easier to consume. In the US, vape juice comes in 0, 3 and 6mg/mL doses. Juul does not publish nic levels,
76.
▲
by
g45y45
8y ago
Also, if you are on android and do a Gdrive backup, all the WA logs are in the clear on googles server. They will gladly pass these logs to authorities on with the appropriate paperwork.
77.
▲
by
g45y45
8y ago
I say this on every VPN threat and its still the best advice: Just use algo (IPSEC VPN): https://github.com/trailofbits/algo Wireguard is great, but is not supported on many devices, and does not auto provision configu
78.
▲
by
g45y45
8y ago
Germany. Thats my plan if I need to leave the US. I will never work in Australia again after this or under this regime. I encourage Australian technologists to escape while they can.
79.
▲
by
g45y45
8y ago
Eventually every scooter will be stolen, GPS disabled and board replaced. They are commodity Xiaomi scooters, retailing for hundreds of dollars. They can be stolen and rebirthed for <$50. Scooter rental was a terrible idea, and the asset
80.
▲
by
g45y45
8y ago
You are not bound to the laws of Australia in the UK. Foreign nationals in Australia are. That being said, this is coming to the UK too.
81.
▲
by
g45y45
8y ago
There are none. https://ccadb-public.secure.force.com/mozilla/IncludedCACert...
82.
▲
by
g45y45
8y ago
I would argue its about integrity from subversion, rather than correctness. You can use electronic records and cryptography to be more correct than paper, in general. Electronic voting is easier to subvert than paper ballots. Thats why voti
83.
▲
by
g45y45
8y ago
Yeah, I wouldn't touch the S&P500 right now either. Such a brutal October/November.