oasisbob

65 ms·

781.
by oasisbob 10y ago
Representatives of Google, Apple, and Mozilla have all dismissed the suitability of a fast reactionary nuclear approach. There are plenty of innocent sites who use WoSign/Startcom certificates. It's easy to be flippant when you&#x
782.
by oasisbob 10y ago
My read on the announcement is that they won't be taking action against the StartCom CA & intermediates at this time. The WoSign existing-certs exemption probably involves a whitelist they're shipping along with the OS. A lot
783.
by oasisbob 10y ago
One of the easiest ways would be to use a randomized pulse repetition frequency? The other Tesla would be recognized as a discrete interference source. Seems this is a well-known problem in airborne radar: http://www.dtic.mil&#x2
784.
by oasisbob 10y ago
I'm away from my well annotated copy* of _The Proud Gentleman_ but this letter has almost certainly come from that collection. It makes more sense in context of his other writings from the time. Another quote, from the same, which I re
785.
by oasisbob 10y ago
> If you're hit by a car, and you're not in a protective cage of steel, it's not going to matter if the other person was in the right or the wrong. You're still dead. I get the point you're trying to make, but yo
786.
by oasisbob 10y ago
It seems like a massive oversight to implement segmentation like that and yet still allow the fax printer SNMP and telnet/SSH access to the firewall. In environments I've seen, the network management network is the thing most like
787.
by oasisbob 10y ago
Because land in the US wasn't surveyed with hexagons. In the PLSS system (used in a majority of US states), land was initially surveyed using one-mile sections as the base unit. The next division is into section quarters, a half-mile o
788.
by oasisbob 10y ago
> You can look at almost any land assignment, building or commercial sale ever in the history of the United States and be able to compare / modify / extend it without any conversions. What state? Are those 160 international acr
789.
by oasisbob 10y ago
The authors refer to the CG8713 gene product as Sandman, which is a single molecule. Flybase associates this gene with a single polypeptide, predicted to be 395 amino acids long [1]. My research skills are rusty, but I found a paper which m
790.
by oasisbob 10y ago
True, that was really ugly. However, I think some nuance is important here. Comodo has some really good people (like Rob Stradling) that are doing a lot of good work for PKI. eg, the https://crt.sh tool is fantastic.
791.
by oasisbob 10y ago
I'd be VERY careful about including external dependancies in an HTTP health check which results in a web server being removed from service - it's usually an invitation for cascading failures. 1) If you do have a back-end failure,
792.
by oasisbob 10y ago
One thing to keep in mind is that Stingray use isn't limited to collecting evidence to use at trial. It's sometimes used just to make warrant service & arrests easier. I wonder how often it's used as a law enforcement too
793.
by oasisbob 10y ago
In that breach, the DNC wasn't the custodian of the data. A shared private vendor used by democratic candidates was. The causes of the two issues are quite different - in one, an application doesn't have sufficient internal contro
794.
by oasisbob 10y ago
> I've had bad luck getting those controls working with TRRS extension cables. Ugh. That. A tip: always ensure that the extension cable is attached to the auxiliary device (eg headset) first. One of those flaky impedance tricks is t
795.
by oasisbob 10y ago
It's not like fragmentation would be a new thing - TRRS jacks are already fragmented between CTIA and OMTP pinouts. (Is the outer-most ring a ground, or the mic signal?) The former is terrible because the mic signal is on the outermost
796.
by oasisbob 10y ago
Some banks intentionally break screen scraping. Having your customer's data is a competitive advantage when it comes to cross-selling other services.
797.
by oasisbob 10y ago
It could have been a lot more impactful by doing a trial with Intuit Given Intuit's checkered past with QFX, If I were writing a nascent API for FX, I wouldn't want them anywhere near it.
798.
by oasisbob 10y ago
> It should be obvious that there would be plenty of room in that scenario, both on the streets and in the parking garages. No! It's absolutely not obvious. My biggest problem with your argument is that you're taking it for gra
799.
by oasisbob 10y ago
> Of course autonomous vehicles are going to render fixed-rail systems irrelevant... I'm not sure everyone is willing to take that as a statement of fact. I'm sure not. Can you point to a single transportation expert who believ
800.
by oasisbob 10y ago
Don't forget ternary content addressable memory (TCAM), which is common in contemporary network routers because it turns out having a third state to mean "don't care" is incredibly useful: https://en.wikipedia
801.
by oasisbob 10y ago
Not the same thing at all. Broadcastify requires self-censorship, their ToS prohibits broadcasting tactical, command, vice, narcotics, and other interesting channels. Also, metadata and retroactive analysis is much different than listening
802.
by oasisbob 11y ago
Reading how CA defines a shuriken, it doesn't sound like the toy qualifies (not intended to be thrown, assuming the edges aren't sharp): > As used in this part, a "shuriken" means any instrument, without handles, cons
803.
by oasisbob 11y ago
It's not really an argument that can be countered - in-the-clear operation is a regulation and fact of life that every amateur operator knows and must abide by.
804.
by oasisbob 11y ago
That's a great solution if you want to benchmark your proxy.
805.
by oasisbob 11y ago
With OS X dd, you can also send it Ctrl-t and get a progress report to stdout.
806.
by oasisbob 11y ago
You're not going to get 23 miles or anything close to it with the FRS 500mW.
807.
by oasisbob 11y ago
Don't forget about the $65 licensing fee to operate the GMRS radios legally, which can only be used by the applicant and their immediate family: https://www.fcc.gov/general/general-mobile-radio-service-gmr...
808.
by oasisbob 11y ago
I think cm2187 was referring to the CA death penalty with the "lose their cert" reference. ie, Browsers decide to reject Comodo CAs from their trust store. One would hope that losing control of HSM-stored crypto material is improb
809.
by oasisbob 11y ago
I think that's a stretch. Being priced out of a market is not the same thing as genocide. Population transfer is a different thing from gentrification is a different thing from eminent domain is a different thing from genocide.
810.
by oasisbob 11y ago
My primary disagreement with that thesis would be the utility of logging things that clearly represent transactions, especially to the outside world. eg, HTTP access logging is good and useful (vs non-structured debug timings on every fragm

More ›