gnyman

12 ms·

61.
by gnyman 3y ago
This was a great episode, another great one I remember is https://securitycryptographywhatever.com/2021/08/12/what-do-... I'd recommend listening (or reading the transcripts) to anyone who's needs o
62.
by gnyman 3y ago
Also disabling JS works. And if that is a hassle my little hack to selectively view pages with js disabled works great here https://noscript.it/?p=0#https://www.economist.com/business/...
63.
by gnyman 3y ago
Yeah, this is one of the problems with for-profit. Even if the company could make the bottom line with only a subscription fee. Someone is willing to pay a lot for visibility, and they pay more the less other ads there is. So the paper&#x2F
64.
by gnyman 3y ago
I'll admit I did something similar for a game called Dark Age of Camelot as a teenager. Very educative, learned about both network sniffing, hubs vs switches and Linux. Was it worth it to give me an advantage in the game? No, I never
65.
by gnyman 3y ago
The k-anonymity is such a clever trick, I remember being impressed by the simplicity and efficacy of it back when I read about it also. I'd also like to call out the one who Troy says suggested him [1], Junade Ali who goes into more de
66.
by gnyman 3y ago
This is just my two cents but I pay for both GPT and Claude as I find they complement each other. I found Claude with the bigger context window quite good for doing "reviews" of multiple scientific papers, and answering questions
67.
by gnyman 3y ago
The amount of background crap has been steadily increasing on Apple devices, you're probably right in your observation that it's related to wireless/Bluetooth. I have a iPad 2 (yes, the one from 2011) which I keep around wit
68.
by gnyman 3y ago
Not specifically openBSD but the concept yes, I've played with it also https://nyman.re/super-simple-ssh-tarpit/
69.
by gnyman 3y ago
Yeah, so much noise. I enjoy screwing around with them on my free time, "imposing cost" by giving back unexpected things. I don't know if it actually does something, but I bet returning either a gzip-bomb or a 5 MiB really o
70.
by gnyman 3y ago
PSA if you use Alfred (w. Powerpack) you can get a always working version of this, but not bound to Cmd+V. It's a bit annoying to set up though > If you go to the Workflows tab, click the [+] in the bottom left, under Templates >
71.
by gnyman 3y ago
While intelligence plays a part, even smart people will ignore obvious red flags if they think they are winning.
72.
by gnyman 3y ago
Have you looked at Q4OS with the windows theme pack? https://q4os.org/ and https://xpq4.sourceforge.io/ It's does not seem well known but it looks and works very closely to old Windows. I have a side p
73.
by gnyman 3y ago
I thought so at first but then I remembered server side request forgery, SSRF That's a bug class that is quite common but rarely leads to code exec or other issues (except in some cloud environments). If this is something that gives co
74.
by gnyman 3y ago
Fiver on 2) Matches the "few years back" Luckily HTTP/3 is so complex I doubt anyone could find the issue even if they looked :-)
75.
by gnyman 3y ago
IPv6 won't get found by brute-force but there are a few projects which tries to gather IPv6 addresses using various means and scans them as they are found. Shodan did (maybe still does) provided NTP servers to some ntp-pools and scanne
76.
by gnyman 3y ago
Yes, you can hide with a little bit of effort. Port knocking or Tor will stop almost any thing (but don't rely on it as the sole protection, just as another layer). I like to prefix anything "I don't want scraped" with a
77.
by gnyman 3y ago
You cannot hide anything on the internet anymore, the full IPv4 range is scanned regularly by multiple entities. If you open a port on a public IP it will get found. If it's a obscure non-standard port it might take longer, but if it&#
78.
by gnyman 3y ago
Yes, and not only design, it's metrics-driven everything. And often the metrics can be counter productive in the long term, but by then people have collected their bonuses, promotions or left the company. Here is a example I encountere
79.
by gnyman 3y ago
And this has been the case since Windows NT in 1993 according to a presentation I saw from Sami Laiho where he strongly argues that you don't need and should be a admin account as default. From microsoft's documentation [1] > A
80.
by gnyman 3y ago
Haha I sense a trend for these home grown static site generators :-) Yours are much more advanced, but a few years back I made a minimal PHP static page generator and named it... PHP keep It Stupid Simple, or in short P.I.S.S. https:/
81.
by gnyman 3y ago
Yeah, I look forward to getting sideloading and at the end of last year it seemed like apple was preparing to play nice, and there was rumours they would announce info at WWDC2023 and that it would be included in iOS17 (which would mean ahe
82.
by gnyman 3y ago
Second this, produced by BBC https://www.bbc.co.uk/programmes/w13xtvg9 Gave a lot of insight and background into North Korean hackers, how they operate, how they live and so on. I was familiar with their operations fro
83.
by gnyman 3y ago
...because I wasn't sure if this was just nostalgia or fake memories so I went down the rabbit hole of trying to refresh my memories about why I switched from AltaVista to Google I had some memory of AltaVista being full of SEO (as I r
84.
by gnyman 3y ago
Yes, second that. Happy paying user for bit over a year now (and was in the beta before that). It feels a bit like how it felt discovering Google back when AltaVista was still a thing.
85.
by gnyman 3y ago
Thanks for the links, interesting story about switcher. And yes, hearty recommendation on the craptop. I was discussing with a colleague a while back when he said he had to get one as he was unable to reproduce a problem on his M2 even with
86.
by gnyman 3y ago
On a side note inspired by this blog post. I'm wondering if humans are mostly incapable of producing great things without (artifical) restrictions. In this case, marginalia is (ridiculously) efficient because Victor (the creator) is in
87.
by gnyman 3y ago
That's not a "dark pattern", it's just the result of of making the browser a OS and giving websites free rein of anything inside. There is an aptly named browser extension to help combat this called StopTheMadness [1] ,
88.
by gnyman 3y ago
This post made me think about a talk I just watched by Tristan Harris at the Nobel Prize Summit, so I'm sharing it with you here in the hopes that you'll find it as relevant and insightful. https://www.youtube.com/
89.
by gnyman 3y ago
Yeah and then add to that the websites which are not apps but still break :-( As for noscript.it, I'm not aware of any existing lists, I have a short hard coded list so far. If you start a list I'd happily use and contribute to it
90.
by gnyman 3y ago
Congrats on shipping. It's great to see more alternatives in this space, I built https://noscript.it a few years ago to allow me to selectively disable javascript in Safari. But I rarely use it, or any of the other alternat

More ›