jlgaddis

30 ms·

211.
by jlgaddis 6y ago
> The idea of implement something like reverse-path forwarding on SS7 switches would for example greatly cut down on robo-calling. SHAKEN & STIR [0] should (hopefully!) eliminate most of the issues which result from "spoofing&
212.
by jlgaddis 6y ago
There was a time when we all passed the hosts file around. That became unworkable about three and a half decades or so ago, however, and the DNS was created to solve that problem.
213.
by jlgaddis 6y ago
As of Molecule 3.0, at least -- they didn't in the past. A while ago, I, unfortunately, decided to add "proper tests" to all of my Ansible roles and decided to use Molecule (2.22, at the time, IIRC). As I don't use Docke
214.
by jlgaddis 6y ago
... at which point you lose the support you're paying for from Red Hat, thus defeating the purpose of using RHEL in the first place. So if you want to use Btrfs, you might as well use it on something besides RHEL.
215.
by jlgaddis 6y ago
> I am very curious what a modern kernel contain that an old linux kernel did not ... Um, perhaps support for all of the hardware, filesystems, network protocols, etc., that did not exist ?
216.
by jlgaddis 6y ago
> A router that needs a certificate contacts the OpenWrt CA over an encrypted channel and sends its SSH host key; the CA hashes the key and reserves the "SSH-hash.luci.openwrt.org" host name for the device. The OpenWrt CA send
217.
by jlgaddis 6y ago
Maybe report it to the TinyCore Linux team then? There's absolutely nothing HN can do about it.
218.
by jlgaddis 6y ago
> 1. I had to install "gnome-tweaks" in order to remap my CapsLock key to Control. $ cat ~/.config/autostart/map-caps-lock-to-ctrl.desktop [Desktop Entry] Encoding=UTF-8 Version=0.9.4 Type=Applicati
219.
by jlgaddis 6y ago
> someone should define a local cache protocol Someone did, almost two and a half decades ago. It's called the Internet Cache Protocol. - Internet Cache Protocol (ICP), version 2 [0] - Application of Internet Cache Protocol (IC
220.
by jlgaddis 6y ago
> HTST I'm not familiar with HTST so I went looking but didn't find anything related to the web and HTTP, so I'm guessing you meant HSTS?
221.
by jlgaddis 6y ago
With Canada being a part of FVEY, I'm curious if any Canadians are surprised or shocked at this? I would assume that their surveillance goes much. much further than this, considering they're basically watching and learning from th
222.
by jlgaddis 6y ago
My managed hosts get a special "for Ansible use only" user account (which has "sudo" privileges) created at installation time. That user is only allowed to log in to those hosts a) with a couple of private keys (i.e., no
223.
by jlgaddis 6y ago
> ... but the shell I've writen is way to hacky to use as a replacement for ansible. You obviously haven't looked at the code for some of the Ansible modules!
224.
by jlgaddis 6y ago
A pet peeve of mine is incorrect usage of e.g. (and i.e. ). https://www.aje.com/arc/editing-tip-using-eg-and-ie/
225.
by jlgaddis 6y ago
> Isn’t security the biggest reason for most? I don't think that's the biggest reason to upgrade to a new major (or even minor) version, especially when the previous release(s) are still supported for quite some time. Catalin
226.
by jlgaddis 6y ago
One of the talks at FOSDEM 2020 covered "GNUnet basics, the GNU Name System and other applications" [0]: > GNUnet: A network protocol stack for building secure, distributed, and privacy-preserving applications > In this tal
227.
by jlgaddis 6y ago
Nowadays, the CAP_NET_RAW "capability" allows opening raw sockets by unprivileged users and without making binaries setuid.
228.
by jlgaddis 6y ago
Anyone wanting to do the above should first check what ocsp.apple.com resolves to for them -- looks like the responses vary by geographical location.
229.
by jlgaddis 6y ago
Geez, man! At least format it correctly so folks can copy and paste! :-) -----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC10dxEGINZbF0nIoMtM870 5Nqm6ZWdb72DqTdFJ+UzQIRIUS59lQkYLvdQp71767vz0dVlPTikHmiv
230.
AACS Encryption Key Controversy(en.wikipedia.org)
2 points by jlgaddis 6y ago|0 comments
231.
by jlgaddis 6y ago
Some HN'ers might be too young to remember the DeCSS [0] saga and, in particular, the t-shirts. The EFF, who successfully represented two defendants accused of publishing the DeCSS source code in the two main cases, has the details [1]
232.
by jlgaddis 6y ago
Sorry, what, exactly, should be fixed? If you're referring to OCSP requests / responses being unencrypted, I would be interested in hearing what your solution to this problem is. Also, I would recommend that you do not perform a
233.
by jlgaddis 6y ago
I always read "we got pwn3d" disclosures this way. For example, it's common to read something like "we have found no evidence that the hacked data has been (ab)used ...". Cynical me just assumes they decided to leav
234.
by jlgaddis 6y ago
I can't speak to this particular situation but it's worth noting that last-minute-just-before-polling-begins updates are the norm and happen pretty much every election. In/around my hometown, for example, the voting machines
235.
by jlgaddis 6y ago
I forget who said it and I won't even get the quote exactly right, but I'm reminded of something I once heard: > The greatest thing about a democracy is that every idiot is allowed to vote. > The worst thing about a democ
236.
by jlgaddis 6y ago
Yes, OCSP is unencrypted (and uses HTTP). OCSP requests only include the certificate's serial number, however, and (AFAIK) Apple does not publish a directory of all issued certificates. WRT the web PKI, though, yes, the serial number c
237.
by jlgaddis 6y ago
You are always free to simply not read the articles ! In fact, you'll not only save yourself time, you'll also save us time too (as then we won't have to read your useless comments).
238.
by jlgaddis 6y ago
The way to a more decentralized future is through yet another third-party service?
239.
by jlgaddis 6y ago
Also, the first letters of "unfixed security" are "U.S." which could be another hint. Plus, "Using TrueCrypt" -- "UTC". According to Wikipedia, UTC is "a successor to Greenwich Mean Time" --
240.
by jlgaddis 6y ago
Of course. None of us, individually, have the time to do that. Collectively, however, we at least have the ability to do so and that, in and of itself, is a big reason for TLAs and such to not try to hide backdoors in products. Being op

More ›