gnfargbl

54 ms·

691.
by gnfargbl 5y ago
Yep, exactly. I used to put client devices on a segregated network and tunnel their traffic out to pfSense running on a cheap cloud box somewhere. Worked well. (I should say that intentional monitoring of my private comms was never a concer
692.
by gnfargbl 5y ago
If you are a freelancer then your contract should allow you to do work for others. In which case, your response to this client has to be "Sorry, but my business laptop potentially has data from other clients on it. I can't let you
693.
by gnfargbl 5y ago
Stating without context that "vaccines cause myocarditis" is indeed disinformation, because it encourages people to irrationally focus on a particular (edge-case) negative outcome, whilst disregarding the (common) positive outco
694.
Google Public DNS: Flush Cache(developers.google.com)
2 points by gnfargbl 5y ago|0 comments
695.
by gnfargbl 5y ago
Yes, but possibly with more ambition to be a budget alternative to Cisco and Juniper. Looking at the presentations under https://mum.mikrotik.com/ , it seems there are quite a few ISPs running on MikroTik kit, especially in
696.
by gnfargbl 5y ago
I can't see these devices specifically mentioned in https://www.ofcom.org.uk/__data/assets/pdf_file/0028/84970/i... , though the frequency range they operate in (20-140kHz) is allowed to be used
697.
by gnfargbl 5y ago
The author likes AWS Global Accelerator. The author likes GA mainly because it uses BGP anycast, which means that the packets drop into AWS' network at the closest AWS point-of-presence, instead of traversing the internet. The author&#
698.
by gnfargbl 5y ago
I'm not sure it's _so_ bad, in practice? If you dig +trace url.rw, you can see that the NS record for url.rw is held on ns-rw.afrinic.net, pch.ricta.org.rw, ns1.ricta.org.rw, ns3.ricta.org.rw and fork.sth.dnsnode.net. It's tr
699.
by gnfargbl 5y ago
The irony in your post is that you might also be failing to evaluate risk correctly, because you aren't looking at all of the numbers. To continue your analogy: even as a young and healthy man, the additional risk of you being choked b
700.
by gnfargbl 5y ago
I don't think using a worker pool is so bad, and I usually use one in preference to spawning lots of goroutines. I tend to follow this pattern https://play.golang.org/p/KtCPYaDiVFl , in which synchronization betwee
701.
by gnfargbl 5y ago
One way I often debug this kind of problem is to use go's built-in pprof tooling. You can insert a profiling server into your program in four lines: https://pkg.go.dev/net/http/pprof . Then, do something like
702.
by gnfargbl 5y ago
Unfortunately, that is WASM on postgres, not postgres on WASM: https://medium.com/wasmer/announcing-the-first-postgres-exte...
703.
by gnfargbl 5y ago
What an incredibly helpful reply. Thank you! It sounds like either plain ripgrep, or ripgrep+hyperscan, is pretty much exactly what I'm looking for. Next time I have this problem, I'll certainly be reaching for it.
704.
by gnfargbl 5y ago
I occasionally find myself wanting to search a data stream using a large-ish set (a few tens or hundreds of thousands) of regexes. This is very slow with a backtracking engine like PCRE, but ought to be pretty fast with a DFA-based engine l
705.
by gnfargbl 5y ago
To answer the point that I think you were actually making, reverse engineering in the EU is covered by EU Directive 2009/24. This allows reverse-engineering for interoperability purposes, and (possibly in a more limited way?) also for
706.
by gnfargbl 5y ago
I actually think this is one of the reasons I like go so much, and now write code in it almost exclusively -- it isn't really a community project, but rather a labour of love from a small number of genuine experts. If it actually wer
707.
by gnfargbl 5y ago
Spotify has an incognito mode. https://support.spotify.com/us/article/private-listening/
708.
by gnfargbl 5y ago
Szilard proposed the possibility of a self-sustaining fission reaction in 1933. In a hypothetical universe where WWII never occurred and the Manhattan Project never existed, it seems likely that we would still have had nuclear power plants
709.
by gnfargbl 5y ago
I recently started keeping about 30TB of ElasticSearch and Postgres backups in Backblaze B2. The price is great, but getting data in is not particularly easy as the Backblaze S3 API seems to fail a high proportion of requests when under loa
710.
by gnfargbl 5y ago
It would be a contempt of Parliament to either request or agree to such an arrangement [1]. If you have definitive evidence of this having happened in the recent past, you really should pass it on to the Parliamentary Commissioner for Stand
711.
by gnfargbl 5y ago
...so the probability of a fire in an ICE car is about 0.04% per year? Assuming fires are randomly distributed (which is a bad assumption, granted) then over a lifetime of car ownership, the average individual has about a one in fifty chanc
712.
by gnfargbl 5y ago
@albinowax_, can you say anything more about how widely you have investigated the prevalence of the "H2.X via Request Splitting" vulnerability? Although all of your attack vectors are fascinating, this seems to be the one which is
713.
by gnfargbl 5y ago
> managing the internal certificates I haven't yet set it up, but https://github.com/kontena/kubelet-rubber-stamp is on my list to look at. > debugging networking issues In this regard, I have had much more
714.
by gnfargbl 5y ago
This concerns me too. What should I be worrying about? The main maintenance problem that I have experienced so far is that automatic major version updates can break the cluster (which is why I now keep back those packages). Are there other
715.
by gnfargbl 5y ago
Plain k8s has a fearsome reputation as being complex to deploy, which I don't think is quite deserved. It isn't totally straightforward, but the documentation does tend to make it sound a bit worse than it actually is. I run a c
716.
by gnfargbl 5y ago
Yes, they certainly will. I'm not naive, or colonial, about that. But what more can we do than live out the standards that we want to see upheld in the world?
717.
by gnfargbl 5y ago
You're extremely correct, of course, but what I'm really proposing here is something much more boring than actually solving the technical problem(s). How about a dose of good old-fashioned bureaucracy? If you want to sell exploits
718.
by gnfargbl 5y ago
"What can we do to make NSO’s life harder?" That seems pretty simple to me: We ask Western democratic governments (which include Israel) to properly regulate the cybersecurity industry. This is the purpose of governments; it is w
719.
by gnfargbl 5y ago
From a quick look, yes they would and the NetGuard FAQ on GitHub explicitly acknowledges that: https://github.com/M66B/NetGuard/blob/master/FAQ.md#user-con... That doesn't mean this is a worthless t
720.
by gnfargbl 5y ago
> 2. Do colos commonly accept self-built kit like this? My (UK) colo agreement says: In exercising the rights granted in this Agreement, the Customer agrees to maintain the Apparatus to a standard which ensures that at all times it

More ›