kpcyrd

24 ms·

211.
by kpcyrd 10y ago
if you substitute torrents with ipfs this is trivial: # create empty folder FOLDER=`ipfs object new unixfs-dir` # add folders to object FOLDER=`ipfs object patch "$FOLDER" add-link 2017-01 "$HASH_2017_01&quo
212.
by kpcyrd 10y ago
Not sure about the first one, but the later two are illegal in a lot of countries.
213.
by kpcyrd 10y ago
No, the commit hash is a hash of the commit object, which holds a hash of the tree object, which holds hashes of the file objects.
214.
by kpcyrd 10y ago
> SHA1 is not used for security in Git -S[<keyid>], --gpg-sign[=<keyid>] GPG-sign commits. The keyid argument is optional and defaults to the committer identity; if specified, it must be stuck to the optio
215.
by kpcyrd 10y ago
Cool usecase for the css history feature :) @author: Some sites are listed multiple times, like getbootstrap.com
216.
by kpcyrd 10y ago
> How could any of us have trusted any source code before 2005?! Somehow we did, though... They used pgp to sign the tar ball, which was a way better idea since you could just use a different hash function for your signature after sha1 h
217.
by kpcyrd 10y ago
Correction: it seems to be #cheetoflee on efnet.org
218.
by kpcyrd 10y ago
Do you know of 0-RTT implementation efforts on reverse proxies, say, nginx? Let's say I run a static website and I'm 100% sure unauthenticated GET won't break anything, is there anything special I need to do or is it going to
219.
by kpcyrd 10y ago
Well, one of those tabs is graylog and one is gmail. Do you have e10s enabled? (open about:support, check for "Multiprocess Windows")
220.
You Need to Rethink That “Jump Server.”(donjones.com)
3 points by kpcyrd 10y ago|1 comments
221.
by kpcyrd 10y ago
antirez in commit 9d52411: Update linenoise to fix insecure redis-cli history file creation. 1 file changed, 6 insertions(+), 1 deletion(-) yey! This is the patch for CVE-2013-7458 fixed by debian in august. Details here: htt
222.
by kpcyrd 10y ago
But they are. You're using $randomStartup until you reach your data cap of (let's say) 2GB/month, after that your bandwidth gets (actively) throttled to 64kb/s and becomes virtually unusable. Usually this is normal becau
223.
by kpcyrd 10y ago
It's not that hard to work around this: I've deployed a global unit into our coreos cluster that regularly executes: #!/bin/sh while :; do # remove stopped containers w/ volumes docker ps -
224.
by kpcyrd 10y ago
> Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://code.jquery.com/jquery-3.1.1.js . (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). > None of the “sha25
225.
by kpcyrd 10y ago
This bug was rediscovered 1 year later after a distro shipped a package with /usr/lib/node_modules/ being set to 777 in a deterministic build environment. This seems to be a race condition since it may or may not happen
226.
Umask setting is ignored by npm for some directories(github.com)
56 points by kpcyrd 10y ago|27 comments
227.
by kpcyrd 10y ago
In this case the IPs probably aren't spoofed, but there's always the chance that you're blaming IPs that didn't engage in the attack but somebody just put it randomly as source address in their packets.
228.
by kpcyrd 10y ago
You can watch their bgp history from that day https://stat.ripe.net/widget/bgplay#w.resource=208.78.70.16
229.
by kpcyrd 10y ago
this is spot on nginx is able to forward tcp streams without negotiating https or expecting http, from the docs it looks like this is for tcp streams only.
230.
by kpcyrd 10y ago
some browsers add .com automatically, try again with example/1234
231.
by kpcyrd 10y ago
Mostly on https://www.hackint.org/ , it hosts a lot of ccc and freifunk related channels.
232.
by kpcyrd 10y ago
> It is not always trivial to move large legacy projects to secure connections Actually, it is: https://www.w3.org/TR/upgrade-insecure-requests/
233.
by kpcyrd 10y ago
I doubt this is actually overwriting anything, it just adds more data to facebook's database.
234.
by kpcyrd 10y ago
I have the same issue, even though the link actually is http, my browser tries to open the https version, no matter what. It looks like https://netflix.com had hsts with includeSubdomains at one point in time which my browser ha
235.
by kpcyrd 10y ago
Meta: why does https://outage.report redirect to http://outage.report ?
236.
by kpcyrd 10y ago
newsbeuter is nice and I use it myself http://newsbeuter.org/screenshots.html
237.
Redis history file world readable(github.com)
3 points by kpcyrd 10y ago|0 comments
238.
by kpcyrd 10y ago
The reason why they aren't affected is that you need to set HTTPS_PROXY for https://
239.
by kpcyrd 10y ago
It's possible to +1 comments now without adding a new comment (and notifying maintainers)
240.
by kpcyrd 10y ago
You have to implement Vorratsdatenspeicherung which is basically an API to query who had this IP at a given point in time in case of an investigation.

More ›