karel-3d

15 ms·

331.
by karel-3d 1y ago
Finally, I can have JIRA in my face all the time while I browse
332.
by karel-3d 1y ago
The reasoning is here, from 2024 https://blog.cocoapods.org/CocoaPods-Support-Plans/ The timeline in the original article seems very reasonable to me. They go out of their way to avoid breakages.
333.
by karel-3d 1y ago
note that the author of the benchmark is also author of this library.
334.
by karel-3d 1y ago
I didn't know that! But apparently yes
335.
by karel-3d 1y ago
I absolutely don't understand what it does from the website. (And there is way too much focus on "agents" on the front page for my tastes, but I guess it's 2025) edit: all the docs are about "agents"; I don&#x2
336.
by karel-3d 1y ago
As I wrote elsewhere; they subcontract the bot protection to F5, an external company that I see for some reason a lot on old/horrible banking websites.
337.
by karel-3d 1y ago
TS seems to be short for TrafficShield (a product of some company F5 acquired in early 2000s) and PD seems to be Proactive Defense (?)
338.
by karel-3d 1y ago
It's coming from a F5 script, which is a company that sells anti-bot protection amid other things. (It's coming from obfuscated script at /TSPD, which is a F5 thing.) https://www.f5.com/
339.
by karel-3d 1y ago
SSO is actually really annoying to implement well. Better cash up
340.
by karel-3d 1y ago
I think someone misunderstood the mailing list post and made a PoC. Because google's 8.8.8.8 does NOT timeout...
341.
by karel-3d 1y ago
is this "avunit" someone from the reporting team? it seems created few hours ago, and it's using 8.8.8.8 which does not timeout as they claim; and the crux of the attack there is just that local UDP is faster than remote UDP
342.
by karel-3d 1y ago
so the special characters are a red herring? and all they are doing is sending UDP responses locally faster than the recursive resolver? I cannot believe this is true because that would be too dumb edit: I don't see how is the avunit g
343.
by karel-3d 1y ago
Better solution that doesn't rely on DNSSEC is use stub resolver that can forward requests on DoH; like unbound or dnsdist. dnsmasq cannot do this and just forwards UDP to UDP and TCP to TCP. (and doesn't know DoT or DoH) DoH (and
344.
by karel-3d 1y ago
google's dns resolver 8.8.8.8 correctly resolves the "special character" domains btw; so if you have 8.8.8.8 as your recursive resolver in dnsmasq, this doesn't seem to be an issue.
345.
by karel-3d 1y ago
dnsmasq has no security contact
346.
by karel-3d 1y ago
VPN is literally 2 clicks. At least the more scammy, commercial ones.
347.
by karel-3d 1y ago
How can this work? What is "DNS tricks"? DNS is just telling you where the site is? edit: ah it spoofs the EDNS subnet for the DNS request, so it gives you server "intended" for a different location. You will get slower
348.
by karel-3d 1y ago
I would guess a WordPress plugin or something. 20 million is a lot, but if you look at geoip, they are around the whole world; I took 3 random latest IPs and I saw Vietnam, Brazil and Angola. So it's not that much when it's worldw
349.
by karel-3d 1y ago
I don't know, that's a strange concept; what about cleaning your teeth? Should I stop using fluoride toothpaste to strengthen my teeth naturally? edit: on a second thought... it IS making the frogs gay... so.. maybe
350.
by karel-3d 1y ago
Note that actual hard work here seems is done by PDFium, which is what Google bought from Foxit and then relicenced (and keep developing themselves), and which is now in Chrome. (I don't take from your work btw, just that it's not
351.
by karel-3d 1y ago
It's not technically but abuse is a problem with any user-submitted data and always will be
352.
by karel-3d 1y ago
Ah. I didn't know there is UK GDPR and UK cookie law! (cookie law is not related to GDPR? or is? I donno) What was the point of brexit if you keep the annoying parts of EU? But, whatever.
353.
by karel-3d 1y ago
I remember that every action you could do there needed somehow be approved in Azure Active Directory
354.
by karel-3d 1y ago
The cookie law is not in UK but in EU, no?
355.
by karel-3d 1y ago
Yeah, this is sensible. I also want to add that there are large industries that LOVE Microsoft and LOVE the Azure/365 vendor lock-in. This corporate merger might be added value to those customers. (Azure has their own github called Azu
356.
by karel-3d 1y ago
The previous post in this entry is even more impressive! Very condensed tl;dr: winter games had a DRM that makes the game perform poorly if you enter wrong code; most of the cracks (including an "official" crack from 1996) skip it
357.
by karel-3d 1y ago
ljharb has commit rights (edit: maybe? maybe not. not sure) to nodejs itself https://github.com/nodejs/node/issues/55918 so.. I don't know. if he wanted to bad he would already
358.
by karel-3d 1y ago
Eh, as much as I think this guy has very weird opinions; if he wanted to cause harm, he would do it many years ago. When I started looking him up, he DOES do a lot of good work in the ecosystem. Which makes this more complex issue. But, als
359.
by karel-3d 1y ago
this specific saga starts 1 year before that, arguably more insane thread https://github.com/A11yance/aria-query/pull/497
360.
by karel-3d 1y ago
Because the original hacker is selling the firmware for 1000 USD on dark web marketplaces. It's literally being sold on dark web. People call everything "dark web" but this time it's correct.

More ›