moviuro

16 ms·

121.
by moviuro 7y ago
> the EFRX is the faster CMR drive, and the EFAX is the much slower SMR drive. From https://arstechnica.com/gadgets/2020/04/caveat-emptor-smr-di...
122.
by moviuro 7y ago
Some badly written software will ignore nsswitch.conf(5) [0] and query the DNS instead of looking up in the hosts(5) file for some hosts that are designed there (redis). sort(1)'s `-un` will truncate and delete input if it's not p
123.
by moviuro 7y ago
https://try.popho.be - tech stuff, and reminders for myself. Just in case my machines spontaneously combust. r/homelab and r/selfhosted did appreciate some articles: WireGuard, email self-hosting and usual VPN pitfalls
124.
by moviuro 7y ago
Rule of thumb: your preferred FS will be OK. Limiting write is not a goal in and of itself. See https://wiki.archlinux.org/index.php/Improving_performance#R...
125.
by moviuro 7y ago
The data is here: https://news.ycombinator.com/item?id=22766840
126.
by moviuro 7y ago
There is a canary domain in Firefox to prevent it from switching to DoH: https://support.mozilla.org/en-US/kb/canary-domain-use-appli...
127.
by moviuro 7y ago
Welcome to 2014! /s [0] [0] https://www.openbsd.org/55.html
128.
by moviuro 7y ago
- We have way more pixels than what we could have ever guessed in the 1990s (800x600 -> 4k 4096x2160) [0] - Bandwidth got from 56kbps to ~10s of Gbps (Ethernet, USB, Display and the like) - Even current systems can't handle the nu
129.
CVE-2020-0796 – Windows SMBv3 LPE exploit SMBGhost(github.com)
2 points by moviuro 7y ago|0 comments
130.
by moviuro 7y ago
Right now, it's your word against Reuter's. Do you have a source?
131.
by moviuro 7y ago
> It would be nicer if certs could be issued with long lives but required a stapled revalidation with a short time span (daily? weekly?), which would be automatically issued at any time requested unless the certificate was revoked. That&
132.
GPG4WIN approved for National, European and NATO-restricted documents (German)(gnupg.com)
2 points by moviuro 7y ago|0 comments
133.
by moviuro 7y ago
Have you seen how French banks authenticate users? With a six-digit PIN. See - https://www.labanquepostale.fr/ > "Me Connecter" - https://lcl.fr/ > "Mon Espace" - https:/&#x2
134.
by moviuro 7y ago
> developed a ten year plan to fix their legacy problem then They did. And Pi factor came in. And budget was cut because those pesky fintech are a threat, and clearly money was better spent on a more modern offer than on those "secu
135.
by moviuro 7y ago
https://outline.com/yhGKb2 -- GDPR, and otherwise reader respect.
136.
by moviuro 7y ago
> some sites would otherwise break as a result Wow, that's weird. I don't remember ever seeing one site like that. Can you point one out? I mean, GA has been blocked at my places since 2015, and I don't remember anything e
137.
by moviuro 7y ago
Even just HSTS is not widely deployed. Here in France for instance: * top 1 banking, top 18 FR https://www.ssllabs.com/ssltest/analyze.html?d=labanqueposta... no HSTS * top 2 banking, top 20 FR https://www.s
138.
by moviuro 7y ago
If you wish to avoid being redirected to guce.advertising.com when reaching the article: https://outline.com/YEmwdW You know, GDPR, and otherwise respect of readers. See also https://news.ycombinator.com/ite
139.
by moviuro 7y ago
> HTTPS _absolutely_ guarantees non-repudiation and authenticity No it doesn't. Correct HTTPS (i.e. connecting to a site with no errors) guarantees: * the entity that requested the certificate at the date it did had control over eit
140.
by moviuro 7y ago
> How can I know if the site I see is REALLY your site without https? HTTPS has never been about non-repudiation or authenticity; it's always been about confidentiality. You get some half-assed "authenticity" if you didn&#
141.
by moviuro 7y ago
I'm interested to see where you get your lists!... mine[0] is about 51k domains, and I don't see ads. [0] https://git.sr.ht/~moviuro/moviuro.bin/tree/master/lie-to-me
142.
by moviuro 7y ago
Number 2: already dealt with: * .test * .example * .invalid * .localhost http://www.rfc-editor.org/rfc/rfc2606.txt
143.
Mail is not hard, but it’s horrible (or “securitywashing”)(try.popho.be)
1 points by moviuro 7y ago|0 comments
144.
by moviuro 7y ago
In the EU, we're getting DSP2 [0] which requires banks to publish usable APIs to: get account information, and initiate money transfers. That's huge, though only at a baby stage for the moment. [0] https://ec.europa.eu&
145.
by moviuro 7y ago
When I tried to open the page on my machine (with chrome) it failed on a host I don't know (advertising.com). So I tried to see what happened: `curl -L` allows me to do that. And yes, this kind of half-assed redirect is breaking, and a
146.
by moviuro 7y ago
Here is the entire curl trace: http://ix.io/277P
147.
by moviuro 7y ago
No, they redirect you to an advertizing domain.
148.
by moviuro 7y ago
% curl -L 'https://techcrunch.com/2020/01/10/medical-images-exposed-pacs/' curl: (7) Failed to connect to guce.advertising.com port 443: Connection refused WTF? I have a lying DNS serve
149.
by moviuro 7y ago
> ZFS required a lot of regular maintenance, care and feeding. According to FreeBSD's handbook[0], you only need to scrub the drives once a month, and check `zpool status` regularly. [0] https://www.freebsd.org/doc&#
150.
by moviuro 7y ago
https://outline.com/SysByE

More ›