m3047

38 ms·

481.
by m3047 3y ago
Apache used to not reject SNI hostname headers ending in a dot, in contravention of RFC 6066. Firefox notoriously didn't strip the trailing dot before sending the header. Some versions of curl (or the underlying libraries?) did, some d
482.
by m3047 3y ago
I feel you. There is nothing today quite like _Inside Macintosh Volume I_ laying out out in drawings and prose (!) what the elements of a UI are, what they do, and how they work... almost like people had never seen a UI before. People must
483.
by m3047 3y ago
That article promulgates a misunderstanding about immutability. For my way of thinking, python is already an interpreted language and I can enforce tropes in code more cleanly and effectively than people taking something five levels up at f
484.
by m3047 3y ago
They came and visited our company when I was working on threat indicators.
485.
by m3047 3y ago
The perception thing is tricky. How do you even know another human perceives things as you do? AI teaches us some truths through its failures and successes. It's a fallacy to think that we only think with our "mind". We think
486.
by m3047 3y ago
In other news, web servers barely care whether that alleged HTTP/1.1 request contains a Host: header...
487.
by m3047 3y ago
If you want romance of flying, and depending on your style of "romance", you might try _Glacier Pilot_ a biography of Bob Reeve who came back from flying in South America as a bush pilot with undiagnosed polio, made it to Alaska,
488.
by m3047 3y ago
Looking at the list of characters and character ranges the omission of 7F is curious.
489.
by m3047 3y ago
> leaking the existence of something terrible inside If you should get the opportunity to look at a raw (DNS) NXDOMAIN passive DNS (PDNS) feed there's a lot of plain brokenness, but the nuggets can be truly alarming. This is what ha
490.
by m3047 3y ago
"pekkid" meant "off your feed"
491.
by m3047 3y ago
Seems defeatist to me. 1) There has to be a notion that some things are worth acknowledging as "events"; this leads to the idea that what logs contain is indicators of events. It's a fundamentally philosophical notion. It mea
492.
by m3047 3y ago
My father's family has been in the Pacific Northwest since the 1800s, particularly Seattle and Corvallis. There is one word in particular, "peaked" which was pronounced "pekkid" (not to be confused with "peckis
493.
by m3047 3y ago
Our feral cat only rolled in high quality horse shit. He was very particular, as well as proud of his smelliness.
494.
by m3047 3y ago
I have thought about it, and some "modern" encryption but maybe not what you're thinking of.
495.
by m3047 3y ago
A lot of our current tech stacks are topheavy. I'm all for re-examining foundational internet technologies and objectively examining how stuff can be pushed down the stack as it were; I'm arguably one of the people destroying DNS
496.
by m3047 3y ago
In general this evolves to a SIEM-like solution in IT or gets added to the tag menagerie in OT. If you're focused on "notifications are bad" note that notifications are push, and pull solutions are possible. Tail logs (or jou
497.
by m3047 3y ago
"It's a catastrophe, but of little importance" -- Zizek "RFC" is Request For Comments. Some RFCs become standards. But there are no internet police, notwithstanding that the internet is a fascist state (run by corpo
498.
by m3047 3y ago
I use DNS to define topology and services (what you'd expect) and of late I'm using it for federating telemetry (the actual data; think of "tags" in the industrial control sense). I've used it as an observable for a
499.
by m3047 3y ago
In a kind of corrollary of Dunning-Kruger, there is often a chasm between what people think DNS is and all of the things it can be. The article points some of that out (stub resolvers, even different implementations of libc); recursive vers
500.
by m3047 3y ago
Thank you! I have a weird story about Gauss. I was working on my motorcycle late at night with too little sleep and Gauss appeared in my head and was asking questions. Also gave me an answer to solve a "field repair" fab problem (
501.
by m3047 3y ago
Yes: "the Nines". ;-) You didn't choose something which is prime. Primes end up being the number over the requisite number of Nines (and can't be simplified). The point of my game was to find simplifications. That's
502.
by m3047 3y ago
Haven't automated this yet but I've noticed, playing around with primes, that e.g. 1/17 is a repeating decimal (that means base 10) of length n-1 or 16. Others such as 7, 11, 13, 31 are shorter and I have a working theory (no
503.
by m3047 3y ago
If threat intelligence intrigues you, you're welcome to stalk me and send me a connection request on LinkedIn. And as a footnote to the "how the fuck..." comment, maybe it should be FCANN rather than ICANN for truth in advert
504.
by m3047 3y ago
99% correct in my estimation. Sloppy... that's where I'm not sure; heavy-handed? Certainly. I said I wasn't covered by noncompetes any longer, I didn't say I felt comfortable spilling all on HN. I'm also not current
505.
by m3047 3y ago
This and the "how the fuck does this happen?" comment... There are two technical components which are salient to the Avalanche story here which are DNS related. First is <<fast flux>>. A rough sketch of this looks like
506.
by m3047 3y ago
The "magic quadrant" chart is what I was alluding to in my top post, although none of those references is the paper which first brought it to my attention.
507.
by m3047 3y ago
Having spent enough time around politics and politicians to realize you need as many different words for misrepresenting the truth as the eskimos need for snow there's a lot to unpack in that statement and the article kind of feels aro
508.
by m3047 3y ago
Kyle is good people, I've worked with him before and I'd be pleased to work with him again some time. Unfortunately although I use Docker I'm a cloud skeptic. ;-)
509.
by m3047 3y ago
Yes, I suppose it is an exposure mitigation as well. Although if someone is having users change passwords every 30 days (or 30 seconds? whatever) due to exposure I have a lot of WTF questions. If passwords suffer from that much unavoidable
510.
by m3047 3y ago
> jobs programs I believe that is the point, notiwthstanding that all jobs programs are not the same. Time for some baseball (my favorite analogy). If you want to preserve your ability to "play ball" "against the day"

More ›