jlgaddis

50 ms·

451.
by jlgaddis 6y ago
In the past, I've had some really low-end setups. The most low-end things I have nowadays are a pair of Neoware CA21 thin clients (VIA 800 MHz, 512 MB RAM, 512 MB flash storage) serving as DNS and NTP servers. Pretty much everything el
452.
by jlgaddis 6y ago
A ThinkPad W530 I bought in 2013 is still my primary laptop. It's maxed out as well, a 2.7 GHz quad-core, 32 GB of RAM, and a pair of Samsung SSDs in a RAID1. A couple of MBPs have came and went during this time, I've kept going b
453.
by jlgaddis 6y ago
That along with their CLI utility is what killed Bitwarden for me. It is absolutely horrendous, mostly due to being written in NodeJS, AFAICT ("when your only tool is a hammer..."?).
454.
by jlgaddis 6y ago
It's a good idea to explicitly set the "Ciphers", "HostKeyAlgorithms", "KexAlgorithms", and "MACs" options to your preferred values (in your ssh_config and sshd_config files) anyways... but, as a
455.
by jlgaddis 6y ago
What prevents a user from disabling or bypassing the command execution (if one desired to do so)?
456.
by jlgaddis 6y ago
> With public keys, there isn't anything to show. There's, at minimum, client IP address, username, and the key fingerprint -- which has always been good enough for me. There might be even more details available but I'm
457.
by jlgaddis 6y ago
Generating alerts from syslog messages is something that we've been doing for decades.
458.
by jlgaddis 6y ago
Valid: from 2020-06-24T16:53:03 to 2020-06-24T16:03:03 Um...
459.
by jlgaddis 6y ago
VirtualBox has improved tremendously in the last seven years. In that same time, progress on VMware Fusion and Workstation has slowed (they got rid of most of the dev teams, if I remember correctly). I'd recommend just sticking with Vi
460.
by jlgaddis 6y ago
Your question is answered in (the very beginning of) the HN guidelines [0]. --- [0]: https://news.ycombinator.com/newsguidelines.html
461.
by jlgaddis 6y ago
Yeah, an "offline tester" [0] was made available by the researchers who discovered ROCA [1] and a company with "close links" to the researchers created a "ROCA Vulnerability Test Suite" [2]. The Estonian govern
462.
by jlgaddis 6y ago
Anyone have recommendations for a nice and easy, "no BS" site for selling a domain? Or even some "we'll (try to) sell it for you and take a commission" type of place? I've got one domain that I think I could
463.
by jlgaddis 6y ago
> I expect this would be a bunch of work, and I don't expect Free Software people to help build something to do it any time soon. That's basically the conclusion I ended up at but I was hoping you were aware of some recent pr
464.
by jlgaddis 6y ago
> ... so a remote SSHD can (if it wanted) demand to see signed evidence of user presence or refuse login, ... I'd like to be able to, server-side, 1) require that the private key used for authentication be stored on a hardware dev
465.
by jlgaddis 6y ago
> Do their access points still phone home and if so, can it be turned off? Yes, they still phone home. I don't believe there's an option in the UI to turn it off -- I just blocked the AP's access to the Internet on my fi
466.
by jlgaddis 6y ago
> It would be awesome to have a simple table somewhere that described what to get based on WAN speed and OpenWRT support. FWIW, OpenWRT has a "recommended routers" page [0]. --- [0]: https://openwrt.org/toh&#x
467.
by jlgaddis 6y ago
Earlier this year, they were blaming several of the outages on "the database". Not sure if that's still their scapegoat or if they've come up with a new one.
468.
by jlgaddis 6y ago
I'm the exact opposite. I hate it when sites use their local time, instead of just using UTC everywhere. I got accustomed to using UTC ~25 years ago. At worst, it'll take you two seconds to open up a terminal and run $ date -u
469.
by jlgaddis 6y ago
EDIT: Sorry, replied to the wrong comment! --- cf. https://support.apple.com/en-us/HT211025 : > This change will affect only TLS server certificates issued from the Root CAs preinstalled with iOS, iPadOS, macOS, w
470.
by jlgaddis 6y ago
s/Responsible/Coordinated/g
471.
by jlgaddis 6y ago
> It wouldn't surprise me if public sentiment in the US in 1940 was that such terms were not constitutionally protected, ... Hell, the debate over George Carlin's "seven dirty words" [0] didn't happen until thr
472.
by jlgaddis 6y ago
> Malware does not need DoH to do this. Yes, you're right, of course. There are any number of things that malware can do. Most of it doesn't, however, and can either be stopped completely or, at the least, detected quite ea
473.
by jlgaddis 6y ago
Do we know what the actual penalties are? I have trouble believing that they are of any substance. Additionally, I think it's safe to say that Comcast has years and years of experience in finding "loopholes" and/or other
474.
by jlgaddis 6y ago
> Actually not only does Comcast say they don't do that... Just like they said they didn't forcibly reset BitTorrent connections (until they did). Just like they said they didn't silently institute bandwidth caps (until
475.
by jlgaddis 6y ago
Comcast's ASNs and networks are documented in ARIN's WHOIS database and various route registries. Hell, Comcast probably publishes a list on their own web site. So, yeah, Mozilla can easily determine if a user is on the Comcast ne
476.
by jlgaddis 6y ago
1. Internal names won't resolve if a client is using, for example, 1.1 as their DNS server (breaking, among other things, logging on to an Active Directory domain!) 2. Many companies have established DNS logging and monitoring in place
477.
by jlgaddis 6y ago
In a corporate network, it's pretty common to block all outgoing DNS traffic (53/TCP and 53/UDP), except from the company's DNS servers. In that case, DoH does let malware do something new -- block the company's e
478.
by jlgaddis 6y ago
Actually, in that case, adding the canary domain to your existing Microsoft DNS servers probably IS the most ideal way to disable Firefox's DoH support. Alternatively, you can roll out a Group Policy or use Mozilla's "Enter
479.
by jlgaddis 6y ago
Let me make sure I've got this right: * Comcast sniffs / records / tracks their user's DNS traffic * Mozilla announced they would enable DoH by default, to protect end user's DNS data from shady ISPs like Comcast *
480.
by jlgaddis 6y ago
... with zero discussion.

More ›