jakejarvis

9 ms·

31.
by jakejarvis 7y ago
Great overview. If anyone's interested, I wrote a guide a while ago on adding these headers via Cloudflare Workers, which can be helpful if you're hosting a static site on S3, GitHub Pages, etc. where you can't add these head
32.
by jakejarvis 7y ago
1Password uses the HIBP API too [0] which has actually saved me a few times. The mechanics behind the v2 API (using k-anonymity with hashes [1]) are pretty interesting too. Troy has clearly put a lot of thought and time into what started as
33.
by jakejarvis 7y ago
Thanks for posting my weird collection! A personal spy cam in a rental home is bad enough, but the fact that there are so many open to the world (and therefore indexed on Shodan) makes it infinitely worse.
34.
by jakejarvis 7y ago
Absolutely agree about an external monitoring service being a necessity. I was more referring to cloudflare.com (and specifically dash.cloudflare.com) being entirely served through Cloudflare itself, or the AWS console being hosted on AWS
35.
by jakejarvis 7y ago
Always appreciate the transparency from you and Cloudflare. :) My main fright during this outage wasn't really the outage itself, but the fact that I couldn't log into the dashboard and simply click the orange cloud to bypass Clou
36.
by jakejarvis 7y ago
I understand why this feels creepy in our tech bubble, but I think it's worth noting how popular apps like FaceTune have become the past few years [0] [1]. I'm certainly not defending this trend and I think it's incredibly un
37.
by jakejarvis 7y ago
That was probably the easiest part of their escapade, sadly — spoofing a WiFi access point with a fake portal comes to mind. Or posing as IT and mass-emailing the university directory (which are rather easy to scrape at most universities),
38.
by jakejarvis 7y ago
Agreed about VMs in everyday use, and I'm wondering if the new Windows 10 Pro/Enterprise sandboxes would be a sufficiently safe alternative in these scenarios. After skimming this white paper it seems like they would, but I'm
39.
by jakejarvis 7y ago
Not quite sure what you mean by imagination... Of course Toyotas aren't limited to terrorist groups, but it's definitely been a long-standing trend – so much so that the US Treasury Department asked Toyota to open an inquiry inter
40.
by jakejarvis 7y ago
The entire decades-long overseas diversion saga surrounding American Toyota pickups has always fascinated me. Top Gear did an episode [0] trying to destroy a Toyota Hilux (similar to the Land Cruiser) and literally couldn't, which expl
41.
by jakejarvis 7y ago
I just put in my own Cloudflare-enabled website and it came back negative as well.
42.
by jakejarvis 7y ago
Ditto! For some reason I used to think the more tray icons the better. But not as bad as when I tried to delete C:\Windows before it would try to stop you. (For science, of course.)
43.
by jakejarvis 7y ago
Not at all! I'm really glad you mentioned it, since I wrote this in the mindset of small to medium VPSes used for personal projects and I'll make that more clear in the intro. Backups (like everything else, unfortunately) definite
44.
by jakejarvis 7y ago
Absolutely. Maybe I should have noted that this is more of a guide to make your existing backup procedures more redundant, which implies that you already have local "backups" being made of whatever you want to redundantly store in
45.
by jakejarvis 7y ago
Good question. I have the same setup on one server hosting GitLab, Pi-Hole, Plex, etc., and I have Restic (and its cronjob) installed on the host and only backup the files that I mount to each Docker container, which are all stored in &#x2F
46.
How to Automatically Backup a Linux VPS to a Separate Cloud Storage Service(jarv.is)
164 points by jakejarvis 7y ago|86 comments
47.
Google employees are afraid to speak out about YouTube's LGBTQ policy disasters(theverge.com)
12 points by jakejarvis 7y ago|0 comments
48.
by jakejarvis 7y ago
Similar story here, but instead of a phishing email it was a legit Find My iPhone email six months later saying her phone pinged from Morocco. So yup, sounds like they’ve either resorted to stripping them for parts or selling them whole (an
49.
by jakejarvis 7y ago
Honestly, Cloudflare choosing not to hastily slap a band-aid on a problem like this just makes me feel more compelled to continue using 1.1.1.1. I hesitate to compare this to Apple calling themselves “courageous” when removing the headpho
50.
My Samsung Galaxy Fold screen broke after just a day(theverge.com)
24 points by jakejarvis 7y ago|10 comments
51.
There’s more than meets the eye to web accessibility(medium.com)
3 points by jakejarvis 8y ago|0 comments
52.
by jakejarvis 8y ago
Same for the back of my iPad Pro at times, too. I appreciate this post – thought I was crazy!
53.
by jakejarvis 8y ago
TIL that this quick trick [1] also would have prevented this: ${STEAMROOT:?} ...where :? throws an error if the variable is unset or empty. (Still far too scary for my taste, though!) [1] https://github.com/koalaman&#
54.
Simple Bash syntax error in Steam for Linux executed “rm -rf /*” (2015)(github.com)
31 points by jakejarvis 8y ago|12 comments
55.
Windows 3.1 Flash Edition(sakamoto.pl)
2 points by jakejarvis 8y ago|0 comments
56.
by jakejarvis 8y ago
Yikes. Like I said, domains are still far from fail-safe. The Madonna theft was almost 20 years ago, when trademarks seem to have reigned supreme in court, so hopefully more judges are better informed today and know this is unacceptable a
57.
by jakejarvis 8y ago
I have to agree that it's the better option. Certainly not a 100% fail-safe solution – I see people already listing domains that were seized for various inexcusable reasons – but the Nissan.com case [0] (Nissan the car company vs. Mr.
58.
Health Care's Huge Cybersecurity Problem(theverge.com)
1 points by jakejarvis 8y ago|0 comments
59.
by jakejarvis 8y ago
Seconded. Argo is also great and makes this even easier (for $5/month). https://www.cloudflare.com/products/argo-tunnel/
60.
by jakejarvis 8y ago
Sounds a bit like what Google / Alphabet / Jigsaw are already doing with Outline, but I still think there’s major opportunity there for a transparent and decentralized one-click service. Especially when you add in #4. For some rea

More ›