r1ch

43 ms·

271.
by r1ch 6y ago
Ironically their website doesn't work if you block 3rd party JS due to Cloudflare.
272.
by r1ch 6y ago
I put them into a password manager which is backed up both on Dropbox as part of sync and Backblaze for long term.
273.
by r1ch 6y ago
The idea is that you take all the links to the different font types and put them directly in your local CSS. Your browser knows which formats it supports, if you have TTF and WOFF2 fonts linked, Chrome will only download the WOFF2 version.
274.
by r1ch 6y ago
My favorite one is where the unsubscribe link is behind a Cloudflare country IP block. Subscribed in the US but can't unsubscribe after moving.
275.
by r1ch 6y ago
The URLs on gstatic.com are static. I've been doing this for years in production without issues.
276.
by r1ch 6y ago
Modern browsers are smart enough to only download the required file type, sniffing is unnecessary the vast majority of the time and you save an entire 3rd party connection. There are tools like https://google-webfonts-helper.hero
277.
by r1ch 6y ago
speedtest.net (and I expect quite a few other speed tests) will open many connections to overcome slowness caused by TCP (low max window sizes and slow scaling). This is likely where the download discrepancy is coming from. Personally I pre
278.
by r1ch 6y ago
Google Assistant failed on me recently trying to set a timer. It correctly understood my "set timer for three-and-a-half minutes" request, says it's setting a timer for 3am instead and proceeds to actually set a timer for 30
279.
by r1ch 6y ago
Be careful with automated rules - unless it's a full TCP handshake, you can't conclusively identify the source of a port scan as the IP may be spoofed. If someone port scanned you and spoofed eg the IPs of your DNS servers, you&#x
280.
by r1ch 6y ago
These were external scans - see if the visitor's IP is running an open SOCKS or HTTP proxy for example. Many IRC networks still port scan you on connect for the same reason.
281.
by r1ch 6y ago
Is this dump online anywhere? I got the notification from HIBP but it only tells me my email address appeared and I'm curious how accurate the rest of the data is.
282.
by r1ch 6y ago
I'm a bit surprised to not see criticism of their SSL options. For a security company, Cloudflare makes it incredibly easy to set up insecure configurations to your origin. There are four SSL options to choose from, but only one is act
283.
by r1ch 7y ago
Looks like this is having some knock-on effects, G Suite email deliverability is having issues now.
284.
by r1ch 7y ago
I believe this is for additional XSS protection - if a user clicks a suspicious API link, the worst that happens is the browser downloads a json.json file instead of rendering a potentially malicious payload.
285.
by r1ch 7y ago
Fastly have kindly sponsored us with free CDN service. They have a tiered caching feature called Shielding that ended up being our solution - it just needed turning on.
286.
by r1ch 7y ago
This is a common problem with laptops due to the multi-GPU power saving setup most laptops have, we have a thread at https://obsproject.com/forum/threads/laptop-black-screen-whe... which explains how to fix it.
287.
by r1ch 7y ago
We're hoping sooner than later thanks to Tobi's bounty on this. You can follow the design spec at https://github.com/obsproject/rfcs/pull/15 if you're interested.
288.
by r1ch 7y ago
Their latest Windows version has some weird DLL blacklist which blocks the ffmpeg DLLs used by the virtual camera. I made an inert version of the DLL[1] but this will break screen sharing due to a set of digital signature checks Zoom does b
289.
by r1ch 7y ago
I'm one of the core contributors for OBS. Our website traffic has more than doubled over the last couple of weeks due to the COVID-19 situation - when we released the v25 update we accidentally killed our site due to a cache stampede a
290.
by r1ch 7y ago
This is triggered by secure input causing issues with the hotkey code. We're aware of the issue and should have a hotfix out soon.
291.
by r1ch 7y ago
I wouldn't say Streamlabs is more robust - it's the same core of OBS Studio, with Electron instead of Qt for the frontend and better Streamlabs integration.
292.
by r1ch 7y ago
I know some cable ISPs outside NL will allow it if your modem is from a reputable brand without any known issues (and compatible with whatever DOCSIS version they're using of course). Ziggo's "connectbox" modem/rout
293.
by r1ch 7y ago
Do you know if this applies to cable modems too? Are they required to allow a 3rd party modem that they normally wouldn't provide to customers?
294.
by r1ch 7y ago
Debian offers a dropbear shell in initramfs which you can use to SSH in and provide keys. I only have a handful of servers so currently I do this manually on a reboot but it would not be difficult to automate using for example SSH keys unlo
295.
by r1ch 7y ago
I've used a few different ZFS snapshot management tools, the one feature I'm missing is something to assist with data retrieval. I'd like to be able to specify a dataset, path and date/time and the tool would mount the c
296.
by r1ch 7y ago
Meanwhile in Android land, Chrome gives all websites access to sensor data without any permission prompts!
297.
by r1ch 7y ago
This was changed recently, you can remove your phone number and continue to get 2FA support. The developer dashboard however won't function without a phone number for whatever reason.
298.
by r1ch 7y ago
I thought WiFi 6 mandated use of WPA3? According to the specs this only supports WPA2 which means either WiFi 6 is not implemented properly or the listed specs are incorrect.
299.
by r1ch 7y ago
Even so, I don't see how you exactly you go from internal storage to loading malware or exfiltrating passwords. Exposing internal storage doesn't let you access the isolated app storage where private app data and passwords would b
300.
by r1ch 7y ago
A lot of modern software is unfortunately following this trend. As companies outfit developers with higher end systems including NVME SSDs, performance issues from inefficient I/O patterns are hidden during development.

More ›