mercora

23 ms·

211.
by mercora 7y ago
i use kexec for reboots and store the keys for disks inside an initramfs which itself is stored on an encrypted boot partition. When i do a cold boot these systems boot into a recovery like OS so i can fix stuff when needed but mainly to do
212.
by mercora 7y ago
being able to purge old disks confidently in a secure manner is a upside huge enough to make this statement true in my opinion. There have been numerous incidents even involving companies specializing in securely purging disks. If your data
213.
by mercora 7y ago
i remember somewhat recently efforts to parallelize the work of dm-crypt where applicable had been merged. However, i guess having multiple separate encryption parameters and states (read: disks) leaves more opportunity for parallelization
214.
by mercora 7y ago
you could achieve the same without in-app purchases or this API if you are in control of both apps. You could for example sign the app with the same key and gain privileges by that over your other apps if i recall correctly and if its still
215.
by mercora 7y ago
thanks a lot for dissecting this i was hoping for this ;) If i recall correctly the recording device could read those files without a hitch too. that's probably because it ignored the malformed name too or is it? i am a bit confused on
216.
by mercora 7y ago
its a really nice read but i am somewhat sad they neither know what actually happened nor why it happened at all. I hope this gets some attention from someone here that is skilled enough with this kind of things and willing to figure this o
217.
by mercora 7y ago
I would probably enjoy your republished site :)
218.
by mercora 7y ago
i honestly don't get what people you are talking about... who did not pay into what system and why does that drive prices for insulin up? I mean i get that 7$ production cost does not translate into a 7$ price tag even without a profit
219.
by mercora 7y ago
i think using an emulated serial connection or similar driver interface could be part of a solution to this.
220.
by mercora 7y ago
huh! i just noticed few hours ago a pi i use has had the wrong date which was set to a day earlier. I quickly determined a faulty ntp server i had hard configured was giving the bogus time. In case it is of interest its address was "14
221.
by mercora 7y ago
ACK. i am still curious if this got implemented because of the consent dialog and legal requirements to deliver a service in case consent is declined... maybe it is the first time i see it properly implemented somehow?
222.
by mercora 7y ago
whats up with the "text only" version? is it somehow required to deliver any service at all if i decline the consent dialog and this is what they came up with?
223.
by mercora 7y ago
yes that is most likely what happened. A change of the nameservers with authority for your zone for example or updates of DNSEC keys would trigger that too, i think. But most commonly it probably happens when the domain gets a renewed regis
224.
by mercora 7y ago
i think that it would be rather unusual to update timestamps in whois (which i guessed the parent poster was referring to) based on updates to in-zone data. A transfer would be an example of something that would change information in whois
225.
by mercora 7y ago
i think the parent poster meant changes done by or for a registrar like shown in whois. Zone changes wont show up there.
226.
by mercora 7y ago
in Germany Vodafone deployed DOCSIS 3.1 partially and while still not symmetric i get 100Mbit/s down and 50Mbit/s up more or less consistently with DOCSIS 3.0 where i live unless something goes wrong (it does sometimes interfere w
227.
by mercora 7y ago
i do not favor this example either. to quit smoking is long term commitment to not do something anymore. When i am thinking about procrastination i think about tasks you can be done with. Even if you meant procrastinating before starting to
228.
by mercora 7y ago
it has written "23rd January 2020" on it when i fetch it and the URL suggests this article has been created (not necessarily written) 21st January 2020 on their CMS.
229.
by mercora 7y ago
if it happens to all or just almost all or even just some of the patients it would still be sharing a somewhat private story from all of them, no? Being accused of sharing this (not so) unique story tells me it was even told to somebody tha
230.
by mercora 7y ago
"inmates" is also likely chosen while sloppily translating from German were "inmate" or "Insasse" can be used for occupant interchangeably in this context.
231.
by mercora 7y ago
if you use a cheap router instead of a switch the far end will only see one MAC address which is the one of the router. doing NAT then is as easy as it could be. You could literally use just about any router out of the box without even conf
232.
by mercora 7y ago
i am a bit disappointed that what has been done is basically installing linux and setting up a bridge using usb ethernet dongles. not what i was expecting. its still somewhat amusing though.
233.
by mercora 7y ago
I use "widget.content.gtk-theme-override;Adwaita:light" to fix commonly invalid assumptions about default colors and appearances. It overrides the GTK theme used to render page content and still allows to use a dark theme (or what
234.
by mercora 7y ago
that would be quite uncommon. what happens often though is the reverse. maybe you misread my point?
235.
by mercora 7y ago
I don't think that the use of NAT at that level is really feasible to bridge IPv4 networks to IPv6 ones. While you can easily map the entire IPv4 address space into an IPv6 subnet of your choosing this is obviously not possible the oth
236.
by mercora 7y ago
additionally you would need to be able to execute code as the targeted user account. I think its acceptable to call this kind of use an attack or backdoor but not the feature itself. I use this feature daily while considering the risks.
237.
by mercora 7y ago
dont people authenticate indiviually using their own credentials on a common bastion host? that seems quite odd to me and like the actual issue here. if you got root already on the bastion host there are quite a few ways to obtain credentia
238.
by mercora 7y ago
Maybe invest some more time and fix the already present TLS setup by bringing it up to the current state of the art. If you try to connect via HTTPS Firefox stops me from proceeding with a warning about not being able to negotiate a common
239.
by mercora 7y ago
Does that matter? i mean they are running their own CA for use with their offerings on AWS. I am not sure if it is the same CA though. EDIT: Just checked it and it is the same CA they use for AWS services.
240.
by mercora 7y ago
If you install an app that has permission to install other apps with arbitrary permission sets... Yes, you must trust them not to do anything stupid or malicious. However this is by choice you don't have to trust them although that mea

More ›