mike_d

11 ms·

151.
by mike_d 2y ago
On modern systems you have about 28k ephemeral ports available. 65,535 is the total number of ports (good luck trying to use them all). Either way, if you have more than 20k connections open to a single backend (remember linux does connecti
152.
by mike_d 2y ago
This has been solved for 10+ years. Properly configure your load balancer with HTTP keep alive and piplining.
153.
by mike_d 2y ago
I would second this. No security person says "I don't have enough problems to look into." Security spending is down, so navel gazing products are going to be a really hard sell. Figure out how to actually solve problems in an
154.
by mike_d 2y ago
The websites opening an audio context without using it to play anything are probably doing bot detection. Different browser engines and operating systems implement audio processing differently, so if you play a completely inaudible sound an
155.
by mike_d 2y ago
I forced a refresh of the VirusTotal results. It is only being flagged by a single engine: MaxSecure, an Indian anti-virus vendor that has gone out of business. https://www.virustotal.com/gui/file/950eea4e17fa3a7e8
156.
by mike_d 2y ago
> mitigate the risks associated with Bitcoin The IMF gave them 1.4 billion dollars to mitigate the risk of bitcoin to the IMF. A subtle but important difference.
157.
by mike_d 2y ago
> So then what’s protecting the protection? Look out your window at the power pole, you'll see a transformer. That has breakers, differential relays, and other protections. > And that protection? Substations have RTUs and SCADA s
158.
by mike_d 2y ago
You are talking about industrial applications. Devices running in residential or commercial environments should be better designed. Proper shielding and grounding is a much better solution than a Y capacitor.
159.
by mike_d 2y ago
The TLDR is EV chargers want an exemption from ground fault protection because they have ground fault protection built in. Lots of devices have built in protections for various electrical faults, but we still put them upstream because one o
160.
by mike_d 2y ago
> That's a nice thought but in practice it's infeasible to keep different branches for different UI/feature sets around in perpetuity. They have been doing exactly that since Windows 98. Windows Update used to only auto in
161.
by mike_d 2y ago
Since this is basically just a thin wrapper around node-thermal-printer, how much of your SaaS revenue is going back to the author of that project?
162.
by mike_d 2y ago
> security patches You have fallen victim to Microsoft intentionally blurring the line between security patching and software changes. A security fix should never be bundled with or uninstallable without a UI/feature change unless t
163.
by mike_d 2y ago
Finally! It was annoying have to Google the poorly documented --register-unsafely-without-email every single time you needed a one off cert for something.
164.
by mike_d 2y ago
> In contrast, Ashburn, Dallas, and LA seem to lack ASN diversity, primarily being dominated by singular big tech companies I don't think you understand the scale of the "Ashburn Metro Area." It is upwards of 250 buildings
165.
by mike_d 2y ago
The real answer: https://en.wikipedia.org/wiki/MAE-East
166.
by mike_d 2y ago
> But I gotten say required can't be the right word. I read it as their boss told them they had to do it.
167.
by mike_d 2y ago
They are required by law to provide the data, and freely give it to Ancestry.com and the like. You could argue they also shouldn't spend any money on computer security, investigating internal sexual harassment cases, or patching holes
168.
by mike_d 2y ago
Can we have a Meta where AI replaces Zuckerberg and makes better decisions?
169.
by mike_d 2y ago
> Only 1/8 of all available IPv6 addresses (the ones starting with the bits 001) is available for allocation under the current rules. Yes yes yes, all sorts of really super serious policies were put in place to prevent abuse of IPv4
170.
by mike_d 2y ago
You know what I mean.
171.
by mike_d 2y ago
That is when Amazon stopped pouring money into buying up as much IPv4 as possible and the market returned to demand based pricing.
172.
by mike_d 2y ago
People get caught up in how many IPv6 addresses exist, as if we will always have enough to go around. Recently Capital One was assigned a /16, enough for every ATM in the US to be its own ISP and make its own customer allocations. We c
173.
by mike_d 2y ago
There is one private company that either directly manufactures or leases the machines out to produce every polymer banknote in the world. In theory Romania already has 80% of what they need to produce Australian bank notes and vice versa. T
174.
by mike_d 2y ago
LOL. The lack of a consistent design is a core accessibility feature. Most "blind" people have some amount of vision. So starting in 1997 they began adding the very large numerals on the back and visual inconsistencies to the fron
175.
by mike_d 2y ago
The "residential VPN" providers setup fake ISPs or buy AT&T/Verizon business circuits with large blocks of IPs and sell them as residential. They are easily detected if you are buying IP intelligence from one of the highe
176.
by mike_d 2y ago
While you aren't wrong about needing end to end encryption, that would not have helped here. What China was after was meta data (who is communicating with who), which is a completely different problem to solve.
177.
by mike_d 2y ago
This is a total yawn, and the norm. It looks coordinated because the team who focuses specifically on telecoms had their tools burned. Pick pretty much any sector of interest and the intelligence services of the top 50 countries all have a
178.
by mike_d 2y ago
That isn't what is happening. The author of this blog post has absolutely no idea what he is talking about.
179.
by mike_d 2y ago
> When your phone sends out a ping to search for cellular towers, real estate brokers collect all that Care to provide a pointer to what device they are using? I would absolutely get my real estate license for this.
180.
by mike_d 2y ago
It might kick out 2 or 3 "good idea" trades a year that you could milk, but the real value in this data is getting it quickly into the hands of people who manage sector portfolios. Say for example a filing happens that a company w

More ›