moviuro

51 ms·

481.
by moviuro 9y ago
I will probably do that, yes.
482.
by moviuro 9y ago
See [0] [0] https://twitter.com/troyhunt/status/897571703202603008
483.
by moviuro 9y ago
> hosting your own DNS meh. There are some things that I'd gladly host, but DNS clerly isn't among them. Too many ways to screw up, probable breakage ahead (only 1 dedicated @ OVH), so many rate-limits to implement; DNS servers
484.
by moviuro 9y ago
BTW, I wrote a pass(1) extension to check your passwords at the HIBP endpoint: https://gitlab.com/moviuro/pass-hibp/blob/master/hibp.bash
485.
by moviuro 9y ago
Don't forget `| head -n1`, as pass(1) files can contain whatever (TOTP secrets, usernames, URLs, etc.) and only the first line contains the password
486.
by moviuro 9y ago
If you're up for the task, I've wanted to write a script (POSIX /bin/sh certainly) for interaction with DNS providers. Basically lower the entry barrier, and avoid the web interface: $ foo mydomain.org --init ovh
487.
by moviuro 9y ago
Here, sandbox your binaries in yet another untrusted binary :( What's to prove that sandboxie is not worse?.. [/tinfoil] Seriously though, has it been audited?
488.
by moviuro 9y ago
> apps There should be some very good definition for "App". I expect xz(1) to to be able to read any file I give to it (% xz myfile). I would however expect chromium to only modify stuff in ~/.config/chromium ~/
489.
by moviuro 9y ago
Okay, so I might actually try that flatpak thingy. ATM, I was focusing on e.g. fez from HumbleBundle through the AUR [0] and factorio [1] [0] https://aur.archlinux.org/packages/fez/ [1] https://aur.arch
490.
by moviuro 9y ago
So... stop trusting the game industry, I guess? We probably should run our games in containers. Anyone got an idea about how to do this? Isolate Steam/Origin/Games into their own little sandbox
491.
by moviuro 9y ago
> We installed spyware on your PC, but trust us, we didn't use it, we only used it on the people we didn't like... And, yes, your AV is showing a false positive ;) [0] Also, piracy doesn't seem to have a huge impact (if
492.
by moviuro 9y ago
> in my router That's probably the issue. A general purpose machine (with AES-NI), slap OpenBSD on it, disable DHCP server on your ISP router, let OpenBSD handle that... and done! (not for the faint of heart though) You might even a
493.
by moviuro 9y ago
You're just paying some extra third-party that handles all your traffic now. What's to prevent them from doing the same? You're moving trust to another actor.
494.
by moviuro 9y ago
backups and archive are a different matter. Archives are meant to not be altered; ever (WORM disks[0]). Backups are made to be rewritten, ~~lost~~, or used for restoration. [0] https://en.wikipedia.org/wiki/Write_once_r
495.
by moviuro 9y ago
Client: may I get /index.html please? Server: sure, here's index.html, theme.css, and jquery.js. Client: hey wait! I didn't ask for... oh, nvm, good call. Now I can display all this without asking you for anything else. EDIT:
496.
by moviuro 9y ago
I didn't even try to use their provided IP(s). I immediately turned to https://tunnelbroker.net (only tunnel broker left?)
497.
by moviuro 9y ago
+ the address is not corrupted and belongs to the user
498.
by moviuro 9y ago
> ISP that hands out /128 rather than /64 Seriously? Who even hands out one single /64 or smaller? it's not like handing out /48s instead is going to deplete the IPv6 pool space [0]. [0] https://www.wo
499.
by moviuro 9y ago
* Recurring SEPA transfer? (Europe-only AFAICT) * Use their Paypal link, see if you can enable recurring payment there? (I'm not familiar with this though)
500.
by moviuro 9y ago
There are lots of excellent projects that have income issues: GnuPG, OpenBSD to cite the most prominent ones. https://www.gnupg.org/donate/index.html (though they are at ~€5k/month now?) http://www.open
501.
by moviuro 9y ago
> HTTP/2 was designed to address this problem using multiple "streams" built into a single connection. Multiple objects can be sent over a stream in parallel by multiplexing them into the connection. That helps, but it cre
502.
by moviuro 9y ago
Because now 5PM is in the morning. And you can't even make sense of opening hours if you go to Shanghai or Melbourne. (Why are they open from 1AM to 1PM?)
503.
by moviuro 9y ago
9am - 9pm Mon-Fri of local time get translated to UTC: Eastern Time: open 2PM to 2AM UTC (Mon evening -> Sat morning) PST: open 5PM to 5AM UTC (Mon -> Sat) This makes exactly 0 sense.
504.
by moviuro 9y ago
Bad permission management, untrustworthy third-party, USB drives, APT(?), human error, etc.
505.
by moviuro 9y ago
In France, I kind of missed the bandwagon. Maybe I just meet with my friends too often for it to be useful? Mail, phone and text (SMS/MMS) are more than enough. And grandma still doesn't own a smartphone anyway.
506.
by moviuro 9y ago
> You can't write É, È or À on a standard AZERTY keyboard for instance That's a limitation on Windows (and macOS?). On Linux, CAPS LOCK + é = É ; etc.
507.
by moviuro 9y ago
FWIW, my engineering school's IT team still has Minitels in use in their various server rooms, because it can be used as serial console for a variety of devices (you know, just in case everything is broken and physical presence is requ
508.
by moviuro 9y ago
Very valid point, thus: > The primary problem with PGP is that there is no Forward Secrecy. Losing a key means that all content encrypted with thatkey is compromised. There are two ways of dealing with this: > create a single master h
509.
by moviuro 9y ago
Any mail client + any mail provider + GnuPG [0] * Totally multi platform, even for platforms not yet invented * Totally robust, though you might want to follow an operational guide for this [1] [0] https://www.gnupg.org/ [1
510.
by moviuro 9y ago
I have a similar problem, but there's just no way I'm running a DNS server in the open (amplification attacks, etc.). I was thinking of using https://icanhazip.com + OVH's API to regularly update my A records. How

More ›