patrakov

44 ms·

601.
by patrakov 5y ago
You should not trust even paper certs. At least in Russia, too many of them are bought by anti-vaxxers. I.e., some doctors responsible for vaccination, given some extra money, do everything they need to do, except the actual injection. P.S.
602.
by patrakov 5y ago
Nope, I was talking about the images. More precisely, about knowing when to update them.
603.
by patrakov 5y ago
Some VPNs offer public IPs, too (and from some, even static IPs can be bought). E.g. PureVPN.
604.
by patrakov 5y ago
It still does have a non-zero cost, especially in the long run, when security vulnerabilities pop up. With distribution package management, on Ubuntu, you can rely on your Nginx being updated and restarted automatically while you sleep. Wit
605.
by patrakov 5y ago
Reported this to Mozilla SSL configuration generator authors as a bug, so that they stop enabling DHE in their Intermediate and Old configurations: https://github.com/mozilla/ssl-config-generator/issues/162
606.
by patrakov 5y ago
I don't see how the ruling helps. 1. The copyright holder can include a dummy clause in the contract that prohibits decompilation, except if there is a written permission from the copyright holder, or in cases where existing local laws
607.
by patrakov 5y ago
Refresh a few times. The page does not serve the same ad scripts every time.
608.
by patrakov 5y ago
Of course it did happen already. Look at this site with card games and patiences, and try to block ads: https://razlozhi.ru/patience-spider2 And no, these are not their own ads, they proxy the requests from their own domain
609.
by patrakov 5y ago
I don't know about macOS, but they also did this on OpenBSD. The reason is a recent security addition in OpenBSD, where they made it illegal (as in: violate it, and the process will be killed) to issue syscalls to the kernel from anyth
610.
by patrakov 5y ago
This is a very US-centric point of view.
611.
by patrakov 5y ago
I am not really sure about this. A few days ago, a colleague asked me why a certain Google cloud instance does not exist. I did not know either, so I searched for this name in the Google audit log, and found when and by whom it was decommis
612.
by patrakov 5y ago
And their file is even detected by ClamAV as "Multios.Coinminer.Miner-6781728-2". Too bad that Docker Hub doesn't scan its files. Reported this non-scanning as an issue: https://github.com/docker/hub-feed
613.
by patrakov 5y ago
Domain Generating Algorithm. https://blog.malwarebytes.com/security-world/2016/12/explain... Although in this case, the generated domains are all under global.ssl.fastly.net and similar CDNs, not traditional
614.
by patrakov 5y ago
The app uses the same technology as some trojans: it connects to different pseudorandomly-generated domain names under Cloudflare protection, changing at least several times per day.
615.
by patrakov 5y ago
It bothers me that Cure53 is the only auditing agency for VPN providers that actually publishes their findings, finds more than nothing, and responds via email to queries regarding their past audits. Yes, there is another company, Altius IT
616.
by patrakov 5y ago
The summary says that the timbre plays an important role in recognizing the notes. I partially agree with this observation, but on the piano, there might be something else than the timbre. Some years ago, I played the "perfect pitch&qu
617.
by patrakov 5y ago
Direct link to the research paper, instead of the summary: https://dl.acm.org/doi/pdf/10.1145/3446871.3469759 (pdf)
618.
by patrakov 5y ago
Do I understand correctly that this event also means that ssl.com is the first CA to offer free ECC certificates to the general public?
619.
by patrakov 5y ago
In a school where I studied, something similar was used as a trick question during a history exam. "Which language Vladimir Lenin used to write correspondence addressed to Karl Marx?" or something like that. Nearly half of the cla
620.
by patrakov 5y ago
Well, it was just a stock Hetzner dedicated server. All that was added/removed is a DNS AAAA record pointing to the server's IPv6 address. We used IPv6 before in order to access LXC containers hosted on that server. If THAT counts
621.
by patrakov 5y ago
In the past, one of the factors was SEO. A few years ago (in 2018, to be precise), the company I worked for tried enabling IPv6 on some of our websites, and observed some drop in Google ranking, that recovered when the IPv6 experiment was u
622.
by patrakov 5y ago
For the previous version of Lyra, there was a concern that it would discriminate against some languages.
623.
by patrakov 5y ago
Arch Linux ARM, with Phosh.
624.
by patrakov 5y ago
I have a PinePhone, but don't really use it. Too many usability bugs, like these: * the cameras working only in the Megapixels app, * no sound notification about incoming SMS, * poor microphone quality in the calls (to the point that
625.
by patrakov 5y ago
To add insult to the injury: he will probably not pass the Facebook coding interview. I tried (for a different position) and failed, due to a bullshit reason. It was a coding interview with two problems, 1-hour time limit, and an interviewe
626.
by patrakov 5y ago
A lot of applications were subtly buggy (unlocked an already-unlocked mutex sometimes). Unlike the previous implementation, with TSX, unlocking an already unlocked mutex is an instant crash. And the applications were buggy exactly because n
627.
by patrakov 5y ago
It is 100% unfair to blame Docker for this foot-gun, especially because they cannot really do anything to fix it, because that's how the firewall works in the Linux kernel. Look: Podman has exactly the same issue when not running rootl
628.
by patrakov 5y ago
Defaults don't matter as long as they are overridden in the official Docker image. And because of the way network works in Docker, they can't listen on anything else than 0.0.0.0 in their image.
629.
by patrakov 5y ago
The article says: "As for encryption on the Pinephone, the only OS that currently makes it easy to enable is PostmarketOS". And this is false, as there is also an easy-to-use installer for Arch Linux ARM with full disk encryption:
630.
by patrakov 5y ago
And your sales people will call this a misconfiguration serious enough to fire the sysadmin who did this. The problem is that, typically, nobody trains or supervises the filter applied to the outgoing mail, and nobody is warned that it did,

More ›