lima

34 ms·

421.
by lima 5y ago
> It’s crazy how Rust just gets rid of this whole class of bugs with option and result types (and sum types in general). As a Rust security consultant, many bugs we find in Rust applications are crashes due to .unwrap()... it's ea
422.
by lima 5y ago
No, the fastest path is putting the signature back. But I guess Route53 won't let them do that.
423.
by lima 5y ago
Unlikely to help in this particular case (which is a root-level DS record).
424.
by lima 5y ago
No need to flush the full caches. Clearing caches for individual zones is not uncommon.
425.
by lima 5y ago
Many providers sell netflow data.
426.
by lima 5y ago
The big difference is that with the robot, the hit team has already left the country.
427.
by lima 5y ago
> I remember reading in the ClickHouse docs some time ago that it does not have DELETE functionality. Does this pose any problems with GDPR and data deletion requests? Clickhouse has ALTER ... DELETE and ALTER ... UPDATE functionality no
428.
by lima 5y ago
Does it use a central control plane?
429.
by lima 5y ago
Car2Go is still around in some European cities!
430.
by lima 5y ago
> I just don't understand why smart contracts need certik to be verified. How would CertiK sell their token otherwise? :p
431.
by lima 5y ago
> Illegal, okay, but is it a crime? According to Swiss law, yes.
432.
by lima 5y ago
> The real scandal here is why the French authority is making such request on an activist, why Interpol processed it (as far as I understand there are no crimes in play here?), and why the Swiss authority recognizes the request? This s
433.
by lima 5y ago
https://protonmail.com/blog/protonmail-threat-model/ > The Internet is generally not anonymous, and if you are breaking Swiss law, a law-abiding company such as ProtonMail can be legally compelled to log your I
434.
by lima 5y ago
That's how it works in most of Europe (for the most part) - there's limits on duty cycle, bandwidth and power.
435.
by lima 5y ago
Unfortunately, Zoom deliberately cripples their web app to the point of being unusable. If your employer uses Zoom, there's no way to avoid the native app.
436.
by lima 5y ago
To be fair, deprecating that is a good idea. They botched the execution.
437.
by lima 5y ago
Don't underestimate the amount of backend plumbing necessary to enable this kind of thing at scale, even if it's "just" a CDN feature flag (analytics pipeline, authorization, rate limiting, and so much more...)
438.
by lima 5y ago
> It is an interesting attack but is the above goal ever achievable? To protect against adversaries from the inside. Achievable in any circumstances? No. Within a well-defined threat model, definitely.
439.
by lima 5y ago
> Most security errors are the kind that that the tools catches There's plenty of common logic errors that static analysis can't catch. They may not be readily exploitable by automated scanners, but it doesn't take a natio
440.
by lima 5y ago
Many people are indeed willing to work below market wages in exchange for working on something meaningful to them.
441.
by lima 5y ago
Neat - real external IPs, no NAT.
442.
by lima 5y ago
"containers" are just a combination of multiple kernel features, one of which does precisely that (user namespaces).
443.
by lima 5y ago
Cloudflare, in some ways, still has a startup mindset when it comes to security and operations (both in good and bad ways).
444.
by lima 5y ago
The complaint is about saying "we care" when they clearly don't. It's perfectly reasonable for US media to block European users rather than deal with GDPR compliance, but why not be honest about it?
445.
by lima 5y ago
Some of this monoculture and attack surface is necessary (line-of-business software, standard productivity tooling, the OS itself...) for the company to function. At least with remote management, you can respond at scale if one of those ge
446.
by lima 5y ago
It's open source and written in Java.
447.
by lima 5y ago
> Is injecting malware into PDFs still a thing? Nope. Most people read PDFs inside the browser, with the same sandbox protections as other web content.
448.
by lima 5y ago
> This is a failed cert, which is a failure that can be reasonably easily handled by manual intervention. This isn't a misissued cert that can be revoked, it permanently breaks the CT log in question since the error propagates down
449.
by lima 5y ago
Distributed, byzantine fault tolerant state machines solve that. At worst, a single node will go out of sync.
450.
by lima 5y ago
An independent firewall accomplishes the same even if every server has a public IP.

More ›