ivlad

6 ms·

31.
by ivlad 3mo ago
Native Apple Maps allow downloading map regions for offline use.
32.
by ivlad 4mo ago
Dostoyevsky was originally published in magazines chapter by chapter, so he would end the December’s on a cliffhanger so that the readers re-subscribed
33.
by ivlad 4mo ago
Really. Back in the days, the majority of “researchers” sent scan results. The term “beg bounty” didn’t come about for nothing.
34.
by ivlad 4mo ago
It turned out, they were talking about it since quite some time: https://conference.apnic.net/60/assets/presentation-files/39...
35.
Vietnam plans to discontinue IPv4 by 2030(vietnamnet.vn)
8 points by ivlad 4mo ago|3 comments
36.
by ivlad 4mo ago
Current customer penetration is at 63% with 86% of government agencies have migrated their online portals to IPv6.
37.
by ivlad 4mo ago
> Would you give your personal phone number to random strangers on the internet, or even publish it on a website? Probably not, due to the possibility of harassment, right? IP addresses aren't any different 1. The claim that IP addr
38.
by ivlad 4mo ago
> Realistically nobody outside some devoted HN readers are going to self host their own content. P2P is not “self hosting”. It’s video/audio conferencing working with less latency. It’s the ability to send a file directly and not vi
39.
by ivlad 4mo ago
NDP is not simpler than ARP. For one, NDP relies on link-local addresses to work which in turn relies on MAC multicast where ARP relies on MAC broadcast only.
40.
by ivlad 4mo ago
Because you need to pre-allocate space and indies for it in case things go wrong and the disk is almost full
41.
The year of IPv6-only desktop(ripe92.ripe.net)
4 points by ivlad 4mo ago|0 comments
42.
by ivlad 4mo ago
Not really. Nothing prevents host from configuring a static link-local address, like fe80::1234. Not only that, some networks choose to have some standard link local address as a default gateway. For example, a router or a L3 switch can hav
43.
by ivlad 2y ago
I am sorry, I should’ve read it twice before posting. I meant, QC to attack longer keys should be bigger proportionally. Number of operations is logarithmic. Silly me.
44.
by ivlad 2y ago
I am not NSA, but I think their idea is something along the “once Shor’s algorithm is practical for key sizes of hundreds of bits, it’s only a matter of a few years of engineering effort to make it feasible for thousands bits long keys”. In
45.
by ivlad 2y ago
… because? Edit: yes, I read it and it is.
46.
by ivlad 2y ago
He is not wrong on the main claim, which is “All ECC (X25519-P521) will be broken by private sector quantum chips before RSA-2048 due to the physical limitations of stabilizing qubits.” Shor’s algorithm is polynomial, however the number of
47.
by ivlad 2y ago
IPv6 + transport mode IPsec + opportunistic encryption with TOFU or other topologies of trust (including WoT, DNSSEC and PKI). All that is standard, most of it is available and only requires configuration (and, ideally, being turned on by d
48.
by ivlad 2y ago
I acquainted with a guy at a conference in US and he was genuinely surprised I had no idea, how long US mile is. I explained him, we use metric system and his response was “but don’t you learn *the standard* system in ache school?” I did no
49.
by ivlad 2y ago
> You will probably spent some time "teaching" them first SELinux works well out of the box in RHEL and its derivatives since many years. You comment shows, you did not actually try it. > fight with them every time you insta
50.
by ivlad 2y ago
> disallow users to choose a password they used previously (never understood that one) That’s because you never responded to an incident when user changed their compromised password because they were forced to only to change it back next
51.
by ivlad 2y ago
Dear user with password “password11111111111” logging in from a random computer with two password stealers active, from a foreign country, and not willing to use MFA, incident response team will thank you and prepare a warm welcome when you
52.
by ivlad 2y ago
This is a lie created by webmail providers. There is nothing difficult in self hosting email, abd ensuring email delivery.
53.
by ivlad 2y ago
You choose to have Google spying devices at home. You choose to have Gmail. You may have no choice for Internet search for quite some time, but you certainly choose your browser. Start there.
54.
by ivlad 2y ago
You can ask and they will ask for a Netflix size commitment in turn. Volume prices (they are essentially volume discounts) are often public.
55.
by ivlad 3y ago
Nope. Non-resident keys work differently. You register the public key with the service, then you encrypt the private key (via wrapping but that’s beyond the point here) with private key stored on your hardware token and send the encrypted b
56.
by ivlad 3y ago
For our corp environment we initially embraced software-backed FIDO authenticators (aka passkeys), but now I am almost ready to start enforcing only hardware authenticators via attestation. The worst offender is (of course!) Google. In Chro
57.
by ivlad 3y ago
I am trying to figure out if auditctl is expressive enough to catch unexpected execve() from sshd: basically anything other than /usr/bin/sshd (for privsep) executed with auid=-1 should be suspicious.
58.
by ivlad 3y ago
We witnessed Juniper generating their VPN keys with Dual EC DRGB, and then the generator constants subverted with Juniper claiming of now knowing how did it happen. I don’t think it affected Juniper firewall business in any significant way.
59.
by ivlad 3y ago
This is literally what the top post link is about. The backdoor functionality has been (roughly) figured out: after decryption and signature verification it passes the payload received in the signing key of the clients authentication certif
60.
by ivlad 3y ago
This would be execve() that did not go through PAM dance and end up being privileged process. I _think_ it’ll look very different in ps —-forest output.

More ›