lol768

81 ms·

901.
by lol768 9y ago
> Google Search actually works really well for me, and I think it's been getting better over years. Just this week, a colleague asked me why the following code does not work: I feel like you've posted this comment mid-thoughts
902.
by lol768 9y ago
This always seemed backwards to me. If the worry is that certs are being misissued, why on earth are we assuming that such CAs are following the rulebook? No, the browser should check the CAA record and refuse to trust certs issued by the
903.
by lol768 9y ago
I'm curious, which email does it use to register with? I didn't see one in the config file.
904.
by lol768 9y ago
So were these vulnerabilities present, and missed by Cure53's audit ( https://wiki.mozilla.org/images/f/f7/Dnsmasq-report.pdf )?
905.
by lol768 9y ago
The issue doesn't appear to mention the modules that the user has elected to install. Can this be reproduced out of the box?
906.
by lol768 9y ago
I think https://github.com/mozilla-mobile/focus-android/issues/13 is the relevant tracking issue.
907.
by lol768 9y ago
It's only inconvenient if you didn't write your code properly in the first place - and even then you can still use nonces for <script> and <style> elements which is better than nothing.
908.
by lol768 9y ago
I use Monzo, and would highly recommend them. Great customer support, very transparent (you can see their trello roadmap, they interact with the community via forums and Slack) and I love their product too (have switched over to their curre
909.
by lol768 9y ago
Yeah, it completely abuses history.pushState...
910.
Revert “Implement Caddy-Sponsors HTTP Response Header”(github.com)
3 points by lol768 9y ago|0 comments
911.
by lol768 9y ago
> This is just like Red Hat. He's put a lot of work into his product, whether free or not, so don't use trademarked name. Unfortunately when you fork a repository, it does copy the entire source tree. I can't type that fas
912.
by lol768 9y ago
> Yeah, they could have got away with waiting, maybe even a few days for everything to settle before making contact. What frustrated me was that I'd already turned on the issue tracker and created an issue to monitor progress on rem
913.
by lol768 9y ago
Yeah, I'm in the same position now. As you mention, NGINX is reasonably straightforward to set up if you're remotely technical or hell, if you can follow a tutorial. It's a huge shame, because I used to recommend Caddy for ho
914.
by lol768 9y ago
> Why's that? (And even among your technical visitors, how many of them actually inspect the response headers?) I dislike this for a few reasons. Firstly, it honestly comes across as petty. I'm using the server for personal rea
915.
by lol768 9y ago
> As of version 0.10.9, Caddy emits an HTTP response header, Caddy-Sponsors, which is similar to the Server header that Caddy already has, except that this one credits our sponsors who make it possible to keep Caddy free for personal use
916.
by lol768 9y ago
>if i receive a (usually HMRC related) phishing email from a .gov domain https://www.ncsc.gov.uk/blog-post/active-cyber-defence-tackl... >We've already started some experiments in this area with pioneering U
917.
by lol768 9y ago
Why is CSRF relevant here? It was an XSS, which has been considered high priority by most people for a while: https://bugcrowd.com/vulnerability-rating-taxonomy As he mentioned in the write-up I linked, you could use this f
918.
by lol768 9y ago
Here's the direct link to the report: https://medium.com/@Zemnmez/how-to-hack-the-uk-tax-system-i-... It's a neat write-up - the security folks at Twitch do some great work and this is no exception. Seems lik
919.
by lol768 9y ago
They are expensive (though I find it's usually the refreshments that're marked up the most vs the ticket in the UK), but I'm not so sure on your price comparisons... can you really get a 3 course lunch or 4 pints for ~£8 in S
920.
Three UK Mobile Internet Outage(three.co.uk)
1 points by lol768 9y ago|0 comments
921.
by lol768 9y ago
Agree with the other commenters here that requiring consent and asking for new hardware to be audited isn't really anywhere near enough of a punishment. I've read through the full settlement here: https://www.ftc.gov&#x
922.
by lol768 9y ago
Thanks for the recommendation, a few friends have spoken pretty highly of them too. Do you know if they have an API (for DNS records)?
923.
by lol768 9y ago
This was really poorly handled on eNom's part. No bug bounty programme, inability to comprehend the problem, ticket closed without resolution and then they only fixed the issue after their hand was forced. I, for one, will be transferr
924.
by lol768 9y ago
> In fact, the only way workaround for this for a lan-only device that is not internet accessible but still wants security on the intranet is to obtain a certificate for some website https://example.com/ and, after obtai
925.
by lol768 9y ago
> I was lucky enough to go to college in Europe, where it's basically free This is not at all the case in England unfortunately - I guess I really should've considered studying elsewhere in the EU where fees are better. With th
926.
by lol768 9y ago
Oh, it uses Webkit? Huh
927.
by lol768 9y ago
What's special about Germany, Austria and Switzerland that they don't get the user activity tracking?
928.
by lol768 9y ago
This is odd because https://f-droid.org/wiki/page/org.mozilla.klar is already part of F-Droid and appears exactly the same .. but with a different name.
929.
by lol768 9y ago
Have been using this a while, it's really nice as the default browser to open links in. Having the floating button to clear everything is neat and I like the UI desing. It's also really fast. I'd like to see better support fo
930.
by lol768 9y ago
> so I have some way to pop up the login page from captive wifi portals, I'm fine with everyone else going SSL Isn't this the fault of those deploying the captive portal for not implementing RFC7710 and advertising a secure log

More ›