geraldcombs

10 ms·

31.
by geraldcombs 2y ago
Well, crap. The domain and site are still fairly new, so maybe that's the issue? Is there anyone here from Palo Alto that can take a look?
32.
by geraldcombs 2y ago
Thanks for the feedback! I'll see if we can make the top of the site more descriptive. Update: Changed the first sentence to "Stratoshark lets you explore and analyze applications at the system call level using a mature, proven in
33.
by geraldcombs 2y ago
It's currently only passive, but that'd be an interesting feature. In order for that to happen we'd have to add that functionality to https://github.com/falcosecurity/libs/ along with the necessary
34.
by geraldcombs 2y ago
Thanks! It's part of the same code base (and therefore open source), and Linux is definitely supported. It adds libscap and libsinsp as dependencies, and you can find basic build instructions at https://gitlab.com/wires
35.
Show HN: Stratoshark, a sibling application to Wireshark(stratoshark.org)
321 points by geraldcombs 2y ago|50 comments
36.
by geraldcombs 2y ago
We return 402 (payment required) for one of our affected sites. Seems more appropriate.
37.
by geraldcombs 2y ago
The explanation someone gave me years ago was that midwesterners can speak to northerners and southerners without needing a translator, and the cost of labor in rural Nebraska and Kansas (which also had a ton of call centers at the time) is
38.
by geraldcombs 2y ago
Why not both? Git itself checks and sanitizes branch names, and GitHub should arguably match that behavior. I don't think anyone would object to safer workflows and related tooling instead of being told "here, have some bash insid
39.
by geraldcombs 2y ago
Yeah, I think the story that's being missed here is that GitHub allows branches named "$(curl...|bash)".
40.
by geraldcombs 2y ago
Maybe it's the hacking equivalent of Schrödinger's douchebag? If the hacking attempt succeeds, then you've achieved your goal. If it fails then you obviously joking or doing "research."
41.
by geraldcombs 2y ago
And canals: https://www.tid.org/current-projects/project-nexus/
42.
by geraldcombs 2y ago
Apparently ME was so bad it's been memory-holed.
43.
by geraldcombs 3y ago
Ours contains a Banana Splits reference: https://www.wireshark.org/404.html
44.
by geraldcombs 3y ago
I was trying to make the point that string validation isn't limited to protobuf. You need to do it for any network protocol that uses strings, which is most of them.
45.
by geraldcombs 3y ago
This could be generalized to any `string` field in any network packet.
46.
by geraldcombs 3y ago
So does DigitalOcean. It'd be nice if the page specified which vendors do and don't.
47.
by geraldcombs 3y ago
Windows 10 and 11 support Arm64, but their Server counterparts don't. Microsoft has also been reaching out to application developers, asking them to add Arm64 support. I think we're going to see a major shift to Arm64 in the Windo
48.
by geraldcombs 3y ago
TShark (the CLI companion to Wireshark) does with the `-T json` flag.
49.
by geraldcombs 3y ago
The traceroute that ships with macOS supports ICMP, UDP, TCP, and GRE. As I recall, the one(s) available on most Linux distributions do as well.
50.
by geraldcombs 3y ago
How are Electron apps typically shipped? If the answer is "inside an installer" then the installer needs to be signed.
51.
by geraldcombs 3y ago
Apples and Acorns
52.
by geraldcombs 3y ago
You're leaving out the "...and then they reported it to the project" part, which meant that the project maintainers had to put in time and effort responding to a reported vulnerability.
53.
by geraldcombs 3y ago
The traceroute command on modern Linux and macOS supports TCP, which I've found to be quite useful since you can see where in the path a connection is failing.
54.
by geraldcombs 3y ago
This shifted from "can" to "absolutely have to" a long time ago for my use cases.
55.
by geraldcombs 3y ago
For those wondering where the property in question is, there's an SF Chronicle article with a map: https://www.sfchronicle.com/bayarea/article/flannery-associa... There's a sizeable overlap with the Mont
56.
by geraldcombs 3y ago
Oh wow, thanks!
57.
by geraldcombs 3y ago
In the early aughts it was fashionable for web sites to have elaborate "intro" pages, usually animated using flash. They were so ubiquitous and annoying that someone created a parody at skipintro.com. Does anyone know if the skipi
58.
by geraldcombs 3y ago
Wireshark's creator here. Waking up to everyone's kind words and reminiscing made my morning. Thanks!
59.
by geraldcombs 3y ago
I wonder which version of Wireshark he was using; we've supported the evil bit since 2009.
60.
by geraldcombs 3y ago
kydns looks really cool! (and if you're tired of Wireshark's hex dumps you can switch to the packet diagram view: https://www.wireshark.org/docs/wsug_html_chunked/ChUsePacket... )

More ›