grapehut

13 ms·

91.
by grapehut 10y ago
sounds about right
92.
by grapehut 11y ago
My biggest issue with npm is the lack of verifiable build. Even if I read it on github, I have absolutely no idea if that's exactly what the person uploaded to npm. I very well could have malicious code and not know it.
93.
by grapehut 11y ago
One of the biggest problems I've had with RDS (postgres specifically) is not being able to do incremental offsite backups. I wonder if the database migration service can help with that, as they say the process is "reliable" a
94.
by grapehut 11y ago
For what it's worth, this was one of the companies I tested for a recent project of ours, as we were in the market for European hosting. While we ultimately didn't use exoscale, I can only say good things about them. They were ver
95.
by grapehut 11y ago
Google doesn't want to lower the PageRank of http sites, it just wants to use http vs https as a feature in ranking. That isn't particularly surprising, I would be willing to bet google already uses hundreds of such features (one
96.
by grapehut 11y ago
You can't seriously be suggesting that Cryptsy is one of the big bitcoin exchanges? Never mind the fact it's an altcoin exchange, it been been suspected insolvent/scam since late 2014. It's like calling
97.
by grapehut 11y ago
It makes me wonder, if the person is unsuccessful at authenticating, does the real owner get a follow up email? For instance, maybe he had to try 5 times to contact support before he found an agent who authenticated me using a fake address.
98.
by grapehut 11y ago
Worth checking out: someone reproduces using a fake address to get a real address. https://medium.com/@amaz/thank-you-for-sharing-this-but-i-co... (contains pretty great screencaptures)
99.
by grapehut 11y ago
I would recommend strongly against that. You'd be far better off picking something plausible, so if someone does impersonate you it's obvious. Remember it's a human verifying this. The attacker just needs to answer: "oh,
100.
by grapehut 11y ago
Actually, I do have 2FA enabled on my account. But I don't think I had it enabled at the time for the very first attack. Interestingly, last night I did get an SMS: "Message from Amazon Customer Service: xxxxx is your Amazon secur
101.
by grapehut 11y ago
I honestly have no idea. I think the only protection at the moment seems to be obscurity, use an email address that is not linked to you.
102.
by grapehut 11y ago
2FA is useful if someone knows your password (e.g. you re-use it, and it gets leaked) but it's not useful in this case. I have 2FA setup on my accounts, and when ever contacting customer support I've never had to prove I own the d
103.
Amazon's customer service backdoor(medium.com)
1447 points by grapehut 11y ago|356 comments
104.
by grapehut 11y ago
> Caching is based on file hashing. Not filenames. I'm not really sure what this means, and I've used all the major CDNs/reverse proxies =) Cloudflare for instance is generally controlled by the filetypes, while cloudfront
105.
by grapehut 11y ago
Hey, wow. The site looks really good, so I connected a domain to try it. Initial feedback: * I spent about 2-3 minutes to trying to find how to get to the main website settings. Only just before giving up I found the "..." which c
106.
by grapehut 11y ago
That's not true, when you setup crypto in cloudflare you need pick between "Full SSL (Strict)" which requires a valid certificate, and "Full SSL (non-strict)" which allows you to use a self-signed certificate or wh
107.
by grapehut 11y ago
I agree with your post, but Byzantine Paxos require at least 2/3rd to be honest not 1/3rd