jbinto

8 ms·

31.
by jbinto 12y ago
I have been running OpenVPN on UDP/53 for a few years now. I figure that any network operator sophisticated enough to do deep packet inspection to detect real DNS traffic is also sophisticated enough to block outbound UDP/53 traff
32.
by jbinto 13y ago
This means "your passwords are safe, because they're encrypted with a key that only you have". It still means people could have hijacked your session, which is what GP was referring to. I don't use LastPass, but I specul
33.
by jbinto 13y ago
It seems some servers had some combination of nginx+openssl that caused the memory location being dumped to always be a recent HTTP request/response. Keep hitting that enough times and you'll get all sorts of goodies (session cook
34.
by jbinto 13y ago
Interesting. I guess my usage of Amazon deviates from the norm then. I don't think I've ever struggled to put more than $25 in my cart, and I've never elected for a more expensive shipping option. Aside: On Amazon.ca, the che
35.
by jbinto 13y ago
Many years ago when I was doing .NET programming, a helpful resource was http://systemwebmail.com/ . Predictably, the firewall at $CORP blocked /webmail/. I had to print it at home and bring it into work.
36.
by jbinto 13y ago
As a Canadian Amazon customer, I'm used to this second class treatment. With a fraction of the inventory, no "addon items", no access to Prime Instant Video or Kindle Lending Library, there's absolutely no reason for Ama
37.
by jbinto 13y ago
The typical argument against stored procedures is they are opaque, distant from the rest of the code, and difficult to manage under source control. I'm sure there are good refutations to each, but these are commonly cited.
38.
by jbinto 13y ago
The problem with this line of thinking is that if you take it to it's logical conclusion, you need to stop listening on port 80 altogether, and train users (or search engines) to only key in https:// URLs. If you listen on
39.
by jbinto 13y ago
If it's "unlock extra maps for $5" I think that's fair. If it's "125 tokens for $10", that's not really telling you the price. Video arcades used this abstraction tactic successfully. Make people conv
40.
by jbinto 13y ago
Do the terms of the license allow for this kind of abuse? Just because something is CC doesn't mean you can do whatever you want with it.
41.
by jbinto 13y ago
It also helps having inside contacts at Google, Twitter or Facebook. "So I rang my friend at Twitter" tends to be a common theme in these blog posts. I believe this was the case here too.
42.
by jbinto 13y ago
An invite would be great. My email is in my profile.
43.
by jbinto 13y ago
> Infosec is hard. In computer security, you have to get it right every single time. The bad guys only need to get it right once.