jlgaddis

73 ms·

691.
by jlgaddis 7y ago
RBS file parsers (Python) the authors wrote, along with the sample telemetry data files used in the study: https://github.com/JaehyeokHan/Windows-Telemetry
692.
by jlgaddis 7y ago
If you're already using Azure, then Azure AD might be an option to look into if you're not wanting to run your own Domain Controllers. Otherwise, you can continue running them just as you've been able to for the last 20 years
693.
by jlgaddis 7y ago
I know what you mean and I understand the general sentiment but you should expect an employee's level of "passion" to match the founder's only when their level of equity also matches yours. You might get lucky and find a
694.
by jlgaddis 7y ago
https://blog.filippo.io/ssh-whoami-filippo-io/
695.
by jlgaddis 7y ago
> More people will be aware of the technique now. Good. Perhaps more people will learn how to properly configure/ deploy their servers and apps.
696.
by jlgaddis 7y ago
That would certainly give a new meaning to "we take security seriously" -- one I would also love to see!
697.
by jlgaddis 7y ago
> ... HackerOne go out of their way to serve the interests of vendors ... I don't mean to sound so dismissive but... of course they do! Who's paying HackerOne? The vendors! Who is gonna be their first priority? The vendors
698.
by jlgaddis 7y ago
Wrong order? Since when do NS RRs have to be in any certain order?
699.
by jlgaddis 7y ago
Also, HE DNS will "secondary" from your own server. For example, you can run your own DNS server on a VPS or something, and HE will AXFR the zones from your VPS and serve them authoritatively. This allows you to run a hidden maste
700.
by jlgaddis 7y ago
Apparently Yubico knows the seeds written into their devices, else the OTP auth (against their servers) [0] woulndn't work OOTB, no? [0]: https://demo.yubico.com/otp/verify
701.
by jlgaddis 7y ago
I'm not familiar with pam_shield but I've used the pam_faillock module (which is similar to pam_tally2) for years and it just works(TM) [0]. In fact, here, it's automatically configured on each and every host at install-time
702.
by jlgaddis 7y ago
I only skimmed this article but I didn't see any step where the default credentials ("pi"/"raspberry", IIRC) are changed so if you follow this guide you should expect your "home server" to be hacked a
703.
by jlgaddis 7y ago
I wouldn't be surprised if that's one of those unpaid / volunteer things -- you know, where the company allows one to provide free support to other customers for, um, the "prestige" or "recognition" or s
704.
by jlgaddis 7y ago
Recently, the U.S. government accused four Chinese nationals in the Equifax hack. The U.S. says they made us of something like 34 servers in 20 countries to carry out the attack. Do you really think you're stopping anyone in .cn who wa
705.
by jlgaddis 7y ago
Any DNS service which allows you to create a CNAME RR supports it. You delegate the subdomain to any DNS server you wish. This isn't some special "Let's Encrypt DNS forwarding mode" that DNS providers have to explicitly
706.
by jlgaddis 7y ago
SELinux supports MLS as well.
707.
by jlgaddis 7y ago
Sure, just remove "ssh-rsa" from the "HostKeyAlgorithms" list in /etc/ssh/sshd_config. For example, you might instead use: HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.co
708.
by jlgaddis 7y ago
It will generate a 2048-bit RSA keypair by default. It will be "a secure key" as long as you protect it with an appropriate passphrase.
709.
by jlgaddis 7y ago
For reference, Netflix's traffic requirement for OCA is 5 Gbps, IIRC.
710.
by jlgaddis 7y ago
Another: > Handshake donates $300,000 USD to Debian [0] [0]: https://www.debian.org/News/2019/20190329
711.
by jlgaddis 7y ago
(2015)
712.
by jlgaddis 7y ago
You don't have to contact the authors to get their permission to fork the project. This is explicitly permitted by -- and, in fact, one of the primary features of -- the GPL. I would encourage you to contact them, though. Let them
713.
by jlgaddis 7y ago
Short answer: Thanks for the suggestion but, no, this won't work for me. --- Long answer: Unfortunately, no, that doesn't help me as I don't really even need an ISO image at all. What I really need is just the new version
714.
by jlgaddis 7y ago
I'm not really a "redneck" and even though I moved to "town" when I was still knee-high to a grasshopper (and later to "the city" to get myself some learnin's and an edu-ma-cation), I am absolutely a
715.
by jlgaddis 7y ago
HN pro-tip: When pasting code in comments, indent each line with two spaces for pre-formatted/fixed-width/monospaced (whatever you wanna call it) text (e.g., for code).
716.
by jlgaddis 7y ago
Yep, but the TFTP server doesn't run Debian so this is the easiest "solution" for me. When it does break, it literally takes less than five minutes to get it working again. Looks like I'd been using the previous kernel a
717.
by jlgaddis 7y ago
That would explain why my PXE installs broke yet again (with that oh so familiar error message about a mismatch between the kernel and modules versions)! Fortunately, it only takes a minute to grab the latest mini.iso , mount it, grab the
718.
by jlgaddis 7y ago
He said: > Debian releases Not Debian itself. From "A Brief History of Debian, Chapter 3 - Debian Releases" [0]: > This was the first Debian release with a code name. It was taken, like all others so far, from a characte
719.
by jlgaddis 7y ago
I think the easiest -- but not the best, of course -- ro separate these for the average home user/consumer would be to just "daisy chain" two standard consumer routers. The first plugs into your "Internet modem/rout
720.
by jlgaddis 7y ago
Last I knew, Windows uses SNTP, not NTP (unless you explicitly install an NTP server or modify the registry to tell it to use NTP). SNTP is notoriously less accurate but is usually "good enough".

More ›