Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
nickburns
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
8 ms
·
121.
▲
by
nickburns
7mo ago
Excuse my ignorance if otherwise obvious—but how does legalized but untaxed gambling raise any public revenue? Bookie licensing?
122.
▲
by
nickburns
8mo ago
Who *in the derp.
123.
▲
by
nickburns
8mo ago
Who in the derp are you?
124.
▲
by
nickburns
8mo ago
https://www.thelancet.com/journals/lancet/article/PIIS0140-6...
125.
▲
by
nickburns
8mo ago
The CuRe Trial is exploring whether stem cells can add regenerative power to surgery, potentially improving mobility and quality of life. “This is a major step toward a new kind of fetal therapy, one that doesn’t just repair but p
126.
▲
by
nickburns
8mo ago
*deadmau5
127.
▲
by
nickburns
8mo ago
No, by all means. Add a couple more paragraphs. Your rant seethes with credibility.
128.
▲
by
nickburns
8mo ago
Access points by their very definition are not capable of inter-VLAN routing.
129.
▲
by
nickburns
8mo ago
Disagree with your final statement. There's good security (and performance) reason to use any/all viable network isolation/segmentation/separation, etc., whenever/wherever possible. So-called Wi-Fi 'client isol
130.
▲
by
nickburns
8mo ago
Much of (if not the vast majority of the 'worthwhile') traffic you're intercepting is still encrypted packets though. Not to minimize the recon value of the plaintext stuff. But not really fair to say you're 'bypass
131.
▲
by
nickburns
8mo ago
Thank you for the explanation. I was definitely unclear on the service that Tailscale apparently actually provides.
132.
▲
by
nickburns
8mo ago
¡Mucho gusto!, desde los EE.UU.
133.
▲
by
nickburns
8mo ago
Sería 'sponsored posts.' Como angloparlante nativo, tenía que comprobar que fuese una palabra de verdad 'patrocinate' (como 'patrocinado').
134.
▲
by
nickburns
8mo ago
Alright, I'll be the dude to call a spade a spade: it was all done for "clicks." The sheer banality of that tends to eventually wear on a dude.
135.
▲
by
nickburns
8mo ago
This is pure misinformation. 'Most connections are direct, P2P' makes no sense to anyone versed in basic networking.
136.
▲
by
nickburns
8mo ago
So how does the proxy know where to proxy packets to?
137.
▲
by
nickburns
8mo ago
'Zero trust' has a technical definition that's not really relevant here. See: https://en.wikipedia.org/wiki/Zero_trust . The concept is separate from 'zero config' ( https://en.wikiped
138.
▲
by
nickburns
8mo ago
Zerconf ≠ zero trust. The difference could not be more material in this context.
139.
▲
by
nickburns
8mo ago
They need to know how/where to route your outbound traffic. That inherently includes plaintext DNS, TLS handshakes, and otherwise plaintext traffic (like HTTP for example). Anybody wanting to see what Tailscale is able to see can simpl
140.
▲
by
nickburns
8mo ago
The client may be open source. But the service is obviously not. Don't let that deter you from trusting whomever you choose, though.
141.
▲
by
nickburns
8mo ago
Neat use case. But in fairness, you've simply 'offloaded' NAT traversal/port forwarding to automagic helper protocols over which you have no control even if you wanted it.
142.
▲
by
nickburns
8mo ago
Things are much more unscrupulous than potentially ceasing to be free tomorrow. Nobody who values their privacy would ever route their network traffic through a 'free' service.
143.
▲
by
nickburns
8mo ago
Pretty much this. DNS, SNI, and otherwise plaintext traffic sniffing. That together with user/device 'fingerprinting' (a much more amorphous concept), and that's why such-and-such thing you were just talking about with s
144.
▲
by
nickburns
8mo ago
For the router itself? No. For the 'prosumer' admin? Sure. How many prosumers or otherwise network admins filter outbound traffic though? And of the select few that do—how many are actually 'inspecting' say, outbound TCP
145.
▲
by
nickburns
8mo ago
'Apple-documented' being operative here.
146.
▲
by
nickburns
8mo ago
I don't doubt it in the slightest. Every corporate surveillance firm—I mean, third-party CDN in existence ostensibly operates in the name of 'velocity'.
147.
▲
by
nickburns
8mo ago
Developer link: https://www.patreon.com/pfBlockerNG
148.
▲
by
nickburns
8mo ago
pfBlockerNG (on pfSense) does. But you need to specify the feed in both places—i.e., as an IP feed and a DNSBL feed—though. So technically 'parsers', plural.
149.
▲
by
nickburns
8mo ago
I'm much more convinced that you're competent in the field of forensics. But I still don't think suspicious network traffic can be categorically defined as a 'device breach.' For all you know, the traffic you'v
150.
▲
by
nickburns
8mo ago
Whether or not it does so effectively, you should go for it anyway.
More ›