heipei

32 ms·

391.
by heipei 8y ago
Anecdotal, but I'm in the same position when it comes to my laptop update. I'm eligible to update my corporate MacBook every two years, but so far I'm still sticking with my 5-year-old MacBook Pro Retina (13") because no
392.
by heipei 8y ago
I originally built a service to detect exactly this kind of large-scale injection of content and similar occurrences (e.g. library prevalence etc). This is a perfect example of how to find the GoDaddy injected content: https://ur
393.
by heipei 8y ago
As much as I love certain aspects of the US, companies like Blue Apron just serve as a reminder of the absolutely twisted and unhealthy relationship that Americans seems to have regarding their daily meals. I know people who eat out multipl
394.
by heipei 8y ago
Similarly interesting and close to the path/border in the article is the history of the neutral territory called "Neutral-Moresnet" which was incorporated into Belgium in 1944: https://en.wikipedia.org/wiki&#x
395.
by heipei 8y ago
At this point in my life I've started to believe that whenever you talk to someone who is "passionate about technology X and clean architectures" or "wants to work on challenging technical problems" is ultimately do
396.
by heipei 8y ago
This. Kubernetes (or whatever other container scheduler) might feel like overkill, but if all they do is force you to adopt a container-centric / 12-factor way of building your applications it was worth trying them. And once you'v
397.
by heipei 8y ago
Just came here to second this. We evaluated both Kubernetes as well as Nomad for a relatively small cluster of some worker nodes and web services. In the end, the ease of standing up a Nomad cluster and the whole feel of the thing won us ov
398.
by heipei 8y ago
OK, I get that lawsuits would be a good example of "liability", but my question is this: Are you really not liable for the things you mentioned (GDPR, customer data) if you're the CEO of a UG/GmbH and it falls back on yo
399.
by heipei 8y ago
One thing I still haven't completely figured out yet is the difference in liability between a UG (Haftungsbeschränkt) and Einzelunternehmen in Germany. As an Einzelunternehmen, you (as the sole proprietor) are liable with your private
400.
by heipei 8y ago
I'm surprised in all of these posts about k8s on HN the Nomad project (by Hashicorp) rarely comes up. I've found it an absolute joy (yeah, I said it) to use and a breeze to setup. Unless you're setting up a container orchestr
401.
by heipei 8y ago
Thanks for the good writeup. This technique however is not new, as others have mentioned. If you look at this phishing site on the "Similar Pages" feature on https://urlscan.io you can see a bunch of other phishing pag
402.
by heipei 8y ago
borglet status page in full resolution: https://opnsec.com/wp-content/uploads/2018/07/borg2.png
403.
by heipei 8y ago
The fact that Google chose to build QUIC on top of UDP rather than on top of IP directly shows that not even Google think it's possible to introduce any new Layer 4 protocol.
404.
by heipei 8y ago
I can't say this trend surprises me. Years back I was an IETF meeting when people were already mentioning that the old saying "IP over everything, everything over IP" was slowly being phase out for "HTTP over everything,
405.
by heipei 8y ago
Damn it, for a second there I read "Apple is rebuilding Macs from the ground up" :(
406.
by heipei 8y ago
I'm using Chrome Headless to analyze user-submitted pages on https://urlscan.io I will save a screenshot, network request info, request content (for JS/CSS/HTML), cookies, log messages, JavaScript global variables
407.
by heipei 9y ago
Can also recommend Hetzner. You've got different options. Go for a regular (or even Cloud) server and get a Storage Box on top. 5TB Storage Box would be €26/mo. You can also get a server with 2x3TB or 2x4TB for around €40-€50, eit
408.
by heipei 9y ago
Speed and latency for me as well.
409.
by heipei 9y ago
I use the following since it keeps the abbreviated hash and date of the commit in their own "columns", making it easy to skim: git log --date=short --pretty=format:"%C(124)%ad %C(24)%h %C(34)%an %C(252)%s%C(178)%d"
410.
by heipei 9y ago
A little OT, but I wonder what recruiters / interviewers think of people who took time off to bootstrap their own business but ultimately went back to applying for a regular job. Having the option to go back to working for a big corpor
411.
by heipei 9y ago
Apart from HN "Who's Hiring" post I can also recommend the quarterly hiring threads on r/netsec: https://www.reddit.com/r/netsec/
412.
by heipei 9y ago
Interesting follow-up (again). It will be very interesting to see where attempts to detect headless browser will first appear in the wild. Once we know that and the prevalence, we can make a judgement call on how much effort to put into ant
413.
by heipei 9y ago
If there's malicious code on the page you could use this to block headless browsers (which might be security scanners) from trying to load / run the malicious code, such as CoinHive.
414.
by heipei 9y ago
That's one use-case for Headless browsers. Most people actually use Headless browsers to test their website, i.e. for functionality / performance / rendering.
415.
by heipei 9y ago
Author himself points to Wappalyzer himself which does the same thing, either as a service or a Chrome extension: https://chrome.google.com/webstore/detail/wappalyzer/gppongm... / https://www.
416.
by heipei 9y ago
Does anyone have an example query that would be blocked? Trying to see what the reply looks like.
417.
by heipei 9y ago
Recently read this quote: There’s a well-known adage that “Having no competition may mean you have no market.” The corollary I’d add is that “Having competition doesn’t mean the market is full.” Seen here: https://www.backblaze
418.
by heipei 9y ago
caddyserver.com emits those headers if you want to see them in action: https://urlscan.io/result/8093833b-8ac7-4d18-8f20-a02373f577... Go to the first transaction, click the show button and click "Show headers&quo
419.
by heipei 9y ago
Almost anything is better than CNN: https://urlscan.io/result/6834c63f-b092-4e4e-b72b-91bd1c1b82... This is on par with other shitty news-websites. This website contacted 65 IPs in 7 countries across 35 domains to per
420.
by heipei 9y ago
I've built my service https://urlscan.io to some extent to be able to track the impact of certain scripts / hosts on the overall size of the website. You can find the breakdown by hostname under "Request Stats&quo

More ›