mercora

26 ms·

241.
by mercora 7y ago
their installer downloaded the game into shared storage. They should at least have known that access to shared storage is not sandboxed and should have been verifying what they are about to install instead of trusting no other app would mal
242.
by mercora 7y ago
this has nothing to do with androids permission system at all... epic made the decision to distribute Fortnite themselves while bypassing the Play Store in order to save on the 30% cut google would otherwise get from game sales. This worked
243.
by mercora 7y ago
In Germany i see most ISPs adopting IPv6 by using DS-Lite[0] which is basically handing out only IPv6 addresses and using CGNAT for IPv4 connectivity by mapping IPv4 addresses into IPv6 address space on the CPE. I don't like that at al
244.
by mercora 7y ago
Why should it be a problem just saying you are running a datacenter at that place? If you are thinking about tax evasion or similar they probably had to deal with that anyhow. Also i am pretty sure running a datacenter even if it is home to
245.
by mercora 7y ago
this is more or less what happens if you have an recursive resolver. in most cases your queries will be seen by the same network that will see your traffic afterwards anyways. only the TLD nameservers will somewhat occasionally depending on
246.
by mercora 7y ago
In my opinion it would be ideal if all namerservers (including the root servers) would respond to DNS over TLS (DoT?) traffic which seems like it could be easily adopted but would probably increase the load considerably in some cases (i gue
247.
by mercora 7y ago
I think if you go for privacy it is best to resolve queries recursively. You can do QNAME minimization with unbound for example and whatever network you are trying to reach will likely see your address anyways some way or another. I mean i
248.
by mercora 7y ago
i was only responding to your question whether there is any difference between the two beside the port number used which there is, in a significant way. You can not point a DoH client to a DNS over TLS server or vice versa. That said there
249.
by mercora 7y ago
i think DoH is DNS wireformat via http over TLS whereas DNS over TLS is the plain wireformat over TLS. EDIT: so for DoH you would need to speak HTTP but for DNS over TLS you only need to wrap TLS around for example by using stunnel or somet
250.
by mercora 7y ago
Thanks that was quite helpful.
251.
by mercora 7y ago
to be clear, neither will work on a reasonably modern system?
252.
by mercora 7y ago
i often wondered how exactly one can escape from a chroot but never really tried or read that man page until now. I tried the above and it did not work as described. I tried both changing to the parent directory directly after chroot and ch
253.
by mercora 7y ago
it should be noted that anything that relies on non unicast packets being routed is not possible.
254.
by mercora 7y ago
running arbitrary AT commands gives lots of potential... i wish they would provide (a lot) more details about their claims :(
255.
by mercora 7y ago
This is not about stealing someones subscriber identity but about having unrestricted access to some ancient looking software running on the sim card. TBH it looks like this is not really an exploit but working by design if access is actual
256.
by mercora 7y ago
Why not just use a 32bit EFI bootloader like grub? I did that with some Baytrail device some time ago and it worked without a hitch (there were other problems though). If i remember correctly you can also boot a 64bit kernel from there if t
257.
by mercora 7y ago
I live in Germany and got multiple spam calls in a relatively small time frame (days) from spoofed numbers. I am pretty sure this is not allowed and might be fined too if caught. But i also know for sure there is not much telcos do against
258.
by mercora 7y ago
After reading your comment i wanted to see for myself how its done on Debian or Ubuntu and realized there are no official packages of Webmin for these distros. So my assumption that most people got a package build from the unmodified source
259.
by mercora 7y ago
I would guess most people did not install Webmin via some binary distribution package but rather by using their distros package manger meaning they most likely got built from the unmodified source code using completely unrelated and probabl
260.
by mercora 7y ago
I think what you observed is just some smart caching behavior and application code expecting frequent network issues. I can read already synchronized messages and queue messages for being sent on reconnect. I dont see why this would change
261.
by mercora 7y ago
i think it could be done securely by transmitting the key material via a secure channel directly from the phone to the browser or transmit messages directly encrypted with the probably ephemeral key used for this secure channel. The secure
262.
by mercora 7y ago
i just read in the docs that it is possible to run your own discovery server and to configure the client to use it and also to remove the built-in discovery server list.
263.
by mercora 7y ago
in order to replicate or simulate a production environment i sometimes do something like this: ip route add local 192.0.2.123/32 table local dev lo which makes your system act like this is a local address without actually being one. ED
264.
by mercora 7y ago
I want to point out that they could similarly hire someone working at microsoft, or get someone up for a position there, to do this and it would be at least as hard to detect...
265.
by mercora 7y ago
better yet it makes it really easy to pinpoint traffic to a single person despite all other measurements to make this harder. I would guess being an IP transit provider would be a lot more beneficial for them otherwise with regards to the a
266.
by mercora 7y ago
Most TVs have quite advanced image and motion enhancement filters that have no use in a computer monitor but make a very visible difference in picture quality. I would guess scaling signals is also looked on more closely on a TV set. If you
267.
by mercora 7y ago
It is possible to disable this behavior unofficially via the service menu if you are brave enough (its kinda easy to break stuff). Not sure what happens to your warranty though. On mine it is also possible to disable OTA updates there.
268.
by mercora 7y ago
at least in germany ordering new sim cards to new addresses your provider never heard of before was a thing some years ago. I think porting a number is a lot easier if you know the detailed process though.
269.
by mercora 7y ago
I use wireguard daily in a somewhat complex setup and it works beautifully for me. I used ipsec before for everything and don't miss it much. It appears to be a lot simpler and setting it up is certainly a lot easier. It has been stabl
270.
by mercora 7y ago
it was at least my expectation that they are not able to read your mails after storing them. But apparently i didn't get that right.

More ›