pilif

104 ms·

901.
by pilif 11y ago
With regards to TrendMicro I still remember having to deal with an end user who had this installed and had the "internet security" feature enabled. It intercepted the not-quite standard response header "Content-Encoding: ps-b
902.
by pilif 11y ago
Yeah. I know - but I also wanted the free backups with instant-imapd support for when Google decides that they want to cancel our account for $REASONS and we won't have anybody to call (to this day still my biggest worry with google ap
903.
by pilif 11y ago
> Helpful for info@, jobs@, privacy@ etc. I don't know about Zoho, but in case of Google Apps, they allow you a configuration to route all mail through a host of yours which would allow you to create these aliases without having t
904.
by pilif 11y ago
>Haven't tried Sentry, but will give it a shot after reading this post. you should - it's amazing. When I tried it out, the really nice UI and the ability to self-host (it's good to know it's there - we're stil
905.
by pilif 11y ago
I really think it's time for guides to be written that don't contain the advice to disable all IPv6 support. IPv6 is coming. It's 2015 and categorically disabling (or actually just breaking) IPv6 definitely isn't good ad
906.
by pilif 11y ago
>And it's not "silently corrupting" things - it's logging the conflicts to postgresql's log and, if configured, to a historical table. I stand corrected. Still, it would be useful if there was a mode when it bl
907.
by pilif 11y ago
> It’s better to think of BDR like other eventually consistent data stores […] with the exception that this will never be consistent. Silently corrupting data goes totally against the usual Postgres spirit (which might be one of the re
908.
by pilif 11y ago
> No, a stateful firewall keeps state per connection, not per address, the number of distinct addresses is of no consequence. which is all well until it isn't: http://blog.bimajority.org/2014/09/05/t
909.
by pilif 11y ago
You will block many more possible addresses, but you'll still only block one subscriber's network(s) which is exactly equivalent to blocking a v4 NATed address - you block all of their LAN, regardless of which individual device is
910.
by pilif 11y ago
>Don't VoIP devices such as SIP clients become more vulnerable if they use IPv6? not really. Whether they are reachable via the help of a STUN server or directly doesn't make a difference. They are reachable either way.
911.
by pilif 11y ago
in general, I agree 100% with you > With sane defaults the only thing leaked is the IP address, which is already public (same as IPv4 with NAT.) Compared to v4 NAT though, this will leak an address per device behind the firewall wherea
912.
by pilif 11y ago
Yes it would. But from a blocking-the-offender perspective, it would be equivalent to blocking the offending IPv4 address. In v4, you block the offending address and you block all the NATed devices behind that v4 address. In v6, you block t
913.
by pilif 11y ago
> Is there a commercial interest for different companies to keep IPv4? aside of the short-term practical issues, you also have a potential huge long-term advantage as you can stop all these pesky new disrupting services from causing you
914.
by pilif 11y ago
block the prefix just like when you blocked single addresses.
915.
by pilif 11y ago
Also, pgAdmin II was written in VB and thus inherently Windows-only
916.
by pilif 11y ago
If you check the linked page, you'll see that it has been fixed and only then the bug was opened to the public
917.
by pilif 11y ago
So the TL;DR would be "because we don't want to make changes on current clients, we break compatibility for old clients where we cannot make changes"?
918.
by pilif 11y ago
Let's say CAs continue to issue SHA-1 certificates and fail to do the recommended Legacy Validation but just issue the certs. Let's further assume that clients which still get updates are updated to not accept SHA-1 at all any mor
919.
by pilif 11y ago
That's not enough - that's just removing the current working directory. But unfortunately, the issue here is that DLLs are put into the same directory as the executable to be run. You can't remove loading DLLs from the same d
920.
by pilif 11y ago
Back in 2008 I have blogged ( http://pilif.github.io/2008/05/why-is-nobody-using-ssl-clien... ) about client certs. The UI around them is horrendous and they also serve as a very good solution to uniquely identify c
921.
by pilif 11y ago
I think OP was talking about the issue in git itself that caused merges with mod 256 conflicts to go though and be committed, including all the merge error markers. This happened on their live system (and would have happened on the command
922.
by pilif 11y ago
Once you have more than 50MB of JSON, maybe it's time to switch to a streaming parser. While that's not going to give you more parsing speed, it will solve all your memory issues and if you are getting that data from a slow source
923.
by pilif 11y ago
At least in case of mailbox, I would say they were sherlocked by Google Inbox: nearly as good an UI but without the need to share access to email with a third party. I really never liked that aspect of mailbox and I thus never used it with
924.
by pilif 11y ago
In general, that's probably the right decision. But I also think that using police records for personal purposes is different from browsing Facebook at work. One only damages the employer slightly, the other has huge potential issues a
925.
by pilif 11y ago
> It should also ideally be a /renewal/ of the old one, and not an entirely new private key generated each time as well sure? A new key provides quite a bit of security benefits because even when the key got loose without you
926.
by pilif 11y ago
There is an option to run it in a different port which will allow you to reverse proxy to it. --standalone-supported-challenges http-01 --http-01-port 9999 Will make it listen on port 9999. Their server will only connect to the official por
927.
by pilif 11y ago
In the rare occasions where I still have to do something for Windows, I'm still using my old and trusty version of Delphi 2010. If I had to say anything about Pascal, I would say that it's very readable. Even with multi-years ga
928.
by pilif 11y ago
>what are some reasons that prevent you from nudging users this direction our customers want to sell to these IE8 users. The response to telling them to upgrade is "we'll use a different vendor then - one which does support I
929.
by pilif 11y ago
Of course this doesn't change anything for the 70% of our users who are still on XP and Vista. At best we get IE9, at worst IE8
930.
by pilif 11y ago
Back in 2004, I wrote code for the Intermec ck1 barcode scanner. It ran uClinux and had a stack size limited to 4K. That thing could only very barely run sqlite 2 (after applying a few patches to it works with the small stack size) and I co

More ›