moviuro

12 ms·

61.
by moviuro 6y ago
> First, TLS outages pop a warning box up on your screen, and DNSSEC outages make your site entirely disappear from the Internet. So that's a difference. Meh. If you handle your site correctly, you have at least HSTS, in which case
62.
Statement on DNS Encryption [pdf](root-servers.org)
80 points by moviuro 6y ago|42 comments
63.
by moviuro 6y ago
Check out https://github.com/roddhjav/pass-tomb
64.
by moviuro 6y ago
Ask for a corporate device. Turn it off at 5pm, don't use it for your own personal use, put it in a Faraday cage and soundproof case if you're being paranoid. Maybe you own a Nokia 3310 for what your corporate overlord knows.
65.
Exfiltrate Files Using the DNS(go350.com)
58 points by moviuro 6y ago|21 comments
66.
by moviuro 6y ago
Regarding 1.: no. AllowedIPs in the WireGuard world have the double meaning: * I expect anything coming from that peer to have an IP address in AllowedIPs * I know that a peer's AllowedIPs can only be reached through that specific peer
67.
by moviuro 6y ago
7) Timezones FTFY
68.
by moviuro 6y ago
TLS can be used on other protocols than HTTP (think SMTPs, IMAPs, OpenVPN, etc.)
69.
by moviuro 6y ago
And for the client-side: 90.29% support according to [0] [0] https://caniuse.com/tls1-3
70.
by moviuro 6y ago
I'd be less inclined to give my phone number to a random shop on the Internet myself. Regarding access to the old invoices, maybe ask for the zipcode instead of a password? (my local post service does that to track a parcel for example
71.
by moviuro 6y ago
Sounds reasonable. However, the access to previous orders should be limited in time. email addresses, like snail mail addresses do expire: what happens if the email address owner changes after the fact? Should you serve the recap and other
72.
TikTok for Android 1-Click RCE(medium.com)
2 points by moviuro 6y ago|1 comments
73.
by moviuro 6y ago
We have the following data about you: [...] Does it look correct? [Y/n] That's how it's done in France for example.
74.
by moviuro 6y ago
https://incolumitas.com/2016/06/08/typosquatting-package-man... https://news.ycombinator.com/item?id=11862217
75.
Purchasing Power Parity: fair pricing for [a] SaaS product(scastiel.dev)
2 points by moviuro 6y ago|0 comments
76.
Microsoft Repo Installed on [Raspbian](cyberciti.biz)
25 points by moviuro 6y ago|7 comments
77.
by moviuro 6y ago
Meh, it's risky if you only have all your eggs in one basket. Just put multiple copies of your data everywhere, and don't think too much about it. Also, maybe Synology will manage its drives better than I did in my multiple-purpos
78.
by moviuro 6y ago
BTRFS blew up under my feet in July 2019 (Archlinux, up-to-date at the time). Sure, I powered down the machine with its reset switch, but it borked the FS; it refused to mount RW and some of my files were inaccessible. Even though it had be
79.
by moviuro 6y ago
It also has to do with licensing around the tool itself (git(1))[0]. FreeBSD is licensed under BSD-compatible licenses, and will avoid reliance on tools that are licensed in an incompatible way. The advent of git-compatible alternatives[1]
80.
by moviuro 6y ago
I've had some serious crashes with Feral games (see [0]), but other games have been working really well (Risk of Rain 1, Factorio, Stellaris). [0] https://github.com/flathub/com.valvesoftware.Steam/pull/6
81.
by moviuro 6y ago
> Sadly we never released the game on Linux to the public. Then sadly I won't purchase it at full price. I expect a full experience at full price.
82.
by moviuro 6y ago
> Because if you start to support Linux you actually have to support all the major distribution (Debian, Arch, Ubuntu, Fedora, etc.) with their different idiosyncrasies, package format, libc implementations and/or version, etc. Fera
83.
Vulnerabilities Discovered in Tcl Android TVs(sick.codes)
4 points by moviuro 6y ago|0 comments
84.
by moviuro 6y ago
> whenever the device gets a new IP (say new prefix) Prefixes shouldn't change, that's the whole point. And you can use fixed addresses for IPv6 just as you had for IPv4. > each device needs a DynDNS client configured, where
85.
by moviuro 6y ago
> I checked my Linux VMs and none of them have this security feature yet. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
86.
Attack of the clones: Git clients remote code execution(blog.blazeinfosec.com)
1 points by moviuro 6y ago|0 comments
87.
A Practical Introduction to Container Security(cloudberry.engineering)
2 points by moviuro 6y ago|0 comments
88.
by moviuro 6y ago
> The problem with long cache times is that then some readers might see an out-of-date version of your page. I would argue that that is a small inconvenience to avoid no readers being about to see your article at all. Aren't ETags e
89.
by moviuro 6y ago
That data is indeed missing. FWIW, though: the French Railway Corporation (SNCF) has had WiFi for some years in the high speed (TGV[0]) lanes (though they have a data cap). I've had no issues with it so far[1,2]. That's a working
90.
Using network namespaces to force VPN use on select applications(try.popho.be)
2 points by moviuro 6y ago|0 comments

More ›