kpcyrd

30 ms·

301.
by kpcyrd 11y ago
This only happens if you're using windows as administrator and your VPN runs directly on your box. If you're running OpenVPN on your router your real external IP won't leak.
302.
by kpcyrd 11y ago
Iceweasel actually has a file somewhere in /etc that overrides the config to disable some of those features.
303.
by kpcyrd 11y ago
Like this? https://github.com/Katee/quietnet
304.
by kpcyrd 11y ago
(There's a minor typo in your website: SMPT should be SMTP)
305.
by kpcyrd 11y ago
I'm not sure why this is getting downvoted, the point is very valid. In most cases it's trivial to get root if you can tamper with the environment of a user that gets root at some point. https://xkcd.com/1200/
306.
by kpcyrd 11y ago
cjdns dev here, the network has been opened a while ago. There are some public peers floating around. There's nightfall[0] to find/announce public peers, but I consider it very beta (quickly hacked together on a bus trip). [0]: h
307.
by kpcyrd 11y ago
4: Namecoin supports this, if I recall correctly, but I recommend to pull this value out of your local blockchain instead of dns.
308.
by kpcyrd 11y ago
> The Own-Mailbox sends a HTTPS link to your correspondent, so that he can access the message in encrypted form. He can answer you using HTTPS protection. So anybody who can read the unencrypted mail containing the link can access and re
309.
by kpcyrd 11y ago
Here's the full list[0] of websites that qualified. I doubt it's that hard. It takes a while to get included, though. [0]: https://code.google.com/p/chromium/codesearch#chromium/src/n...
310.
by kpcyrd 11y ago
> Can you trust a 3rd party to handle your insecure connections? It's totally possible to setup websites where you, as the user, don't have to worry about this at all. Even sslstriping can be mitigated if the operators of the w
311.
by kpcyrd 11y ago
git clone git@github.com:original/repo.git # make some commits git remote rename origin upstream # fork the repo on github git remote add origin git@github.com:your/repo.git git fetch origin git push
312.
by kpcyrd 11y ago
"Don't worry, it's running as restricted windows user, there is no way it could possibly ever... oh"
313.
by kpcyrd 11y ago
> Use emoji to clarify tone. Maybe it's just me, but I prefer my github issues not to look like a whatsapp conversation.
314.
by kpcyrd 11y ago
apt-get install nmap ncat --chat -lp 1234
315.
Saltstack/libnacl: crypto_onetimeauth_verify never fails(github.com)
2 points by kpcyrd 11y ago|0 comments
316.
by kpcyrd 11y ago
http://ftp.debian.org/debian/pool/main/f/filezilla/filezilla... I know, this isn't very helpful, but if you don't like how software is distributed for your system there's still the op
317.
by kpcyrd 11y ago
Same thing applies to cloudflare. Even HN is proxied through them and connections are decrypted at their servers. Looks like nobody cares.
318.
by kpcyrd 11y ago
aptitude has a safe-upgrade, which doesn't remove packages unless they're unused.
319.
by kpcyrd 11y ago
You aren't protecting anything, you're playing hide and seek. This isn't how security works.
320.
by kpcyrd 11y ago
> After the first shock of seeing iCloud passwords stored in clear text(how hard would it be to encrypt them?) Not going to defend shady businesses, but I dislike this knee jerk reaction without understanding the actual issue. I've
321.
by kpcyrd 11y ago
This could be an attempt to correlate gpg keys to facebook accounts. Also, make sure you're verifying the key out of band after you've pulled it from facebook. /paranoia
322.
by kpcyrd 11y ago
s/kernel exploit/kernel panic/ exploits actually exploit things
323.
by kpcyrd 11y ago
yes it is. It triggered Windows 95/98 checks in some software.
324.
by kpcyrd 11y ago
If everybody, regardless of their skill level, is writing a blog, we'll end up with a lot of new tutorials how to build yet another insecure fileupload or bypassable .htaccess files.
325.
by kpcyrd 11y ago
git daemon isn't encrypted, you might consider using regular git over ssh instead.
326.
by kpcyrd 11y ago
> But they don't have my password to access my email? > I have nothing to hide > Why do you run a tor relay? Somebody who needs that much privacy obviously has something bad going on. Of course there are exceptions who actuall
327.
by kpcyrd 11y ago
Depends on your threat model. If you're afraid of somebody snooping on your wifi, TLS alone is sufficient. If you're afraid of government surveillance, DANE is useless because it's relying on DNSSEC, which has a government ba
328.
by kpcyrd 11y ago
Their chain of trust contains a certificate that's using sha1, which is deprecated[0] [0]: http://shaaaaaaaaaaaaa.com/
329.
by kpcyrd 11y ago
I think "use our free TLS" is directed towards the people who host scripts that get embedded by people, like baidu. Embedding scripts that are hosted behind cloudflare is a terrible idea though.
330.
by kpcyrd 11y ago
http://ascii.textfiles.com/archives/1011

More ›