mike_d

49 ms·

691.
by mike_d 3y ago
Haynes or Chilton manuals (they are the same company now). You can pick them up at auto parts stores, Amazon, or buy PDFs online. They are based on the official tech manuals and only cover the stuff that is within reason of a home or small
692.
by mike_d 3y ago
Why do you think iOS and Android now prompt for microphone usage?
693.
by mike_d 3y ago
> If an attacker is capable of installing apps on your server... you've already lost. That is a deep misunderstanding of how security works. The defender’s dilemma states that breaches are inevitable because defenders have to be rig
694.
by mike_d 3y ago
(Context: part of my job is breaking into stuff all day) This is a technique commonly referred to as "living off the land" where an attacker makes use of a tool like cloudflared to conduct an action that would otherwise be blocked
695.
by mike_d 3y ago
I'm actually glad HN is putting some effort into combating the Cloudflare employee vote brigading.
696.
by mike_d 3y ago
> Why would they even do so ? Large ISPs are public Ehh, not really. China Telecom for example is 70% owned by the State. You aren't going to be able to buy shares in Parsnet.
697.
by mike_d 3y ago
The Crimean issued passports are accepted only by Russia and other occupied areas such as South Ossetia and Abkhazia. Practically they are required for many domestic tasks, and Russia won't let you leave the region with a real passport
698.
by mike_d 3y ago
Because the latter is not a thing. The United States does not implement any border firewalls on traffic entering the country. No law compels blocking Cuban citizens from accessing US hosted content, just preventing them from entering into f
699.
Web Environment Integrity Blocker(nowei.org)
4 points by mike_d 3y ago|0 comments
700.
by mike_d 3y ago
> pretend remote attestation doesn't exist This. Nothing in my skim of the spec prevents me from using your hacked machine as an attestation oracle. This does nothing but add additional value to compromising end user devices.
701.
by mike_d 3y ago
The concept at least is well known by younger generations. There is an entire movie based on the Backrooms YouTube series coming out that is centered around the idea of "noclip."
702.
by mike_d 3y ago
> I want people to see something consistent with that on the web. Don't get too hung up on picking a file format then. All sorts of middleboxes, CDNs, and edge network acceleration systems can potentially "right-size" your
703.
by mike_d 3y ago
Laws exist to create a civil society. You shouldn't get an exemption because you have an imaginary friend.
704.
by mike_d 3y ago
"We have tried nothing and we are all out of ideas" seems to be the response to any sort of problem in San Francisco. There are plenty of federal and state resources that can come in and handle the problem, they just have to make
705.
by mike_d 3y ago
So you have pre-announcement access and have reviewed it already? Any insights you'd like to share? All I have gotten is a few cool stickers.
706.
by mike_d 3y ago
It almost makes you wonder why Cloudflare refuses to take down sites advertising DDoS-for-hire.
707.
by mike_d 3y ago
Cloudflare's business has always been that your ISP is just a dumb pipe not to connect you to the internet but the Cloudflarenet. All routing, security, etc decisions should happen inside Cloudflare and you should be helpless to do any
708.
by mike_d 3y ago
> Do cDc members even comprehend the current internet landscape? You know they all have professional careers where they have invented foundational technologies and ran large tech companies right? Hands down some of the smartest people I
709.
by mike_d 3y ago
"We" are not doing anything of the sort. 11 years into IPv6 and you still can't single home a network behind v6. Much like DNSSEC the purists refuse to admit that it has basically been a failure outside of very specific use c
710.
by mike_d 3y ago
They seem very insistent on keeping things DRY but not explaining why. Does Terraform tend to cause water leaks?
711.
by mike_d 3y ago
Had AWS not gone around offering to beat any offered price for IPs things might be a lot more reasonable right now. You can't complain that you had to pay a ton for a scare resource when you were the ones throwing gasoline on the scarc
712.
by mike_d 3y ago
> makes more economic sense to have fewer, central owners that can maximize usage What you have described is effectively a China-style ICP license[1]. Unless you are willing to give a big name cloud provider $x per month, you shouldn&#x2
713.
by mike_d 3y ago
Setting aside the pros or cons of fluoride from a dental perspective, it sure is incredibly convenient that a highly toxic industrial byproduct that was expensive to dispose of can now just be diluted down and dumped into municipal water sy
714.
by mike_d 3y ago
OpenDNS when I left was running I think 12 locations with ~4 machines each for approximately a million queries a second. But we did a lot more work than Cloudflare (loading each users preferences into memory, making a decision of how to ans
715.
by mike_d 3y ago
> but doesn't have the scale/reach of Cloudflare? Akamai is IBM in this example. They are "enterprise" and have been long before Cloudflare existed and have 4,200 POPs compared to Cloudflare's 250.
716.
by mike_d 3y ago
Have you ever built a CDN or anycast network? I have, many times. Anycast isn't magic, and it can't be used in all situations. For example Akamai has 16 times as many POPs as Cloudflare does, and many of them reside within smaller
717.
by mike_d 3y ago
> The test apparatus they used can't actually measure 0 resistance. Can you explain how you would make that measurement? It seems like your testing equipment would need to be made of superconductors as well, right?
718.
by mike_d 3y ago
https://attack.mitre.org/techniques/T1090/004/
719.
by mike_d 3y ago
ECH is a good idea on paper but will never work in the real world. Oppressive regimes just drop any connection lacking a plain text SNI. The browser will either retry without ECH, or the user will retry with a browser that does not support
720.
by mike_d 3y ago
Generally when you just stop paying your bills the datacenter holds your hardware and eventually auctions it off to cover some of your debt. I seriously doubt Twitter has any access to the two of three datacenters Elon decided to not pay fo

More ›