r1ch

30 ms·

301.
by r1ch 7y ago
DoH /is/ a bad technology on a technical level. On a modern network DNS requests come in pretty much constantly and I've never seen so many DNS timeouts and slow lookups as when I tried running a DoH proxy for my LAN. The hea
302.
by r1ch 7y ago
I once got a friend's iPhone passcode correct first try by looking at finger smudges. If you're entering a passcode frequently it's definitely a risk to be aware of.
303.
by r1ch 7y ago
A scary amount of services will let you reset a password over SMS.
304.
by r1ch 7y ago
Given that it's always-on, I wonder how much it interferes with 802.11ad (WiGig) which also uses 60 GHz.
305.
by r1ch 7y ago
Most likely so the receivers of abusive traffic can contact the original ISP rather than Cloudflare having to deal with abuse reports.
306.
by r1ch 7y ago
For me the benefit isn't sustained peak use, it's about saving time when there is something big to download. I want to play a game I haven't played in a while but it needs a 4 GB patch? With 1gbps I don't mind sitting th
307.
Simjacker – Next Generation Spying over Mobile(adaptivemobile.com)
11 points by r1ch 7y ago|2 comments
308.
by r1ch 7y ago
Looks like it's overloaded - HTTP/502 on the API here.
309.
by r1ch 7y ago
Actually Forbes IS a blog these days. Look at the URL - anything under /sites/ is a blog post by some random guy.
310.
by r1ch 7y ago
Yeah don't do this - I did this once and I ended up having to reinstall since it broke enough stuff that the control panel wouldn't even work afterwards.
311.
by r1ch 7y ago
Microsoft considers this kind of escalation a security issue and will issue patches if this is found in Windows components. If Steam is installed on a corporate network PC (game development, QA services, esports teams, etc?), regular users
312.
by r1ch 7y ago
I'm rather curious why the UDP tracker protocol still exists (and is default on this tracker). Back in the day when the only viable web server was a prefork Apache, the small TCP connections from torrent clients would easily overwhelm
313.
by r1ch 7y ago
PHP 5 is also end of life and no longer receiving security updates. It's arguably one of the worst targets for new development.
314.
by r1ch 7y ago
Pretty powerful! Lots of breakage with things that touch this file. Simply downloading it in Chrome caused issues, Chrome began extracting it to a temp folder (presumably for some malware scanning?) and quickly started filling the disk. Win
315.
by r1ch 7y ago
The Cloudflare DNS-over-HTTPS resolver was serving up 502 errors as well, though the standard port 53 UDP resolver was working. This event definitely made me regret choosing Cloudflare as my sole DoH server.
316.
by r1ch 7y ago
Not really sure that a browser should allow a site to open 100 tabs programmatically, if anything this is telling me that Firefox is open to such abuse.
317.
by r1ch 7y ago
While tracking is uncommon, using it for language / geolocation is not.
318.
by r1ch 7y ago
I somehow got both messages - I need to migrate to Oracle's new platform and also "no action is required". I expect the DynDNS hostnames I had constituted part of the free service despite needing a Pro account to create them
319.
by r1ch 7y ago
Last time I switched phones I had to set up GA from scratch, re-scanning the seeds on every account. The initial SMS code was just to attach an authenticator to a new device. Someone compromising your phone number shouldn't be able to
320.
by r1ch 7y ago
SIM cards themselves can have a PIN attached to them too, usually with a lockout after 3 unsuccessful attempts. The card is supposed to be secure against tampering, but since it's running an OS which receives very little scrutiny and r
321.
by r1ch 7y ago
You can disable "multi device" mode in Authy, this prevents adding new devices via SMS auth.
322.
by r1ch 7y ago
If you're implementing CSP, you should only include the header on text/html or other rendered responses, so the overhead is more per-navigation than per-request. I've seen a lot of guides where CSP is added globally at the we
323.
by r1ch 7y ago
After using btrfs a couple of times and I don't think it's a good idea to call it stable yet. I expect a stable filesystem to perform well and work without admin intervention, both of which btrfs has let me down on.
324.
by r1ch 7y ago
One thing I learned was where to modify the pageant source code (Windows equivalent of ssh-agent) to make my agent prompt before signing (with the default focus on "no"). This feels much safer and is a very minor inconvenience. I
325.
by r1ch 8y ago
I'm rather worried about how closely Cloudflare is working with Google in pushing their proprietary stuff. I would have hoped they would be more neutral and take a similar position as Mozilla.
326.
by r1ch 8y ago
Privacy Pass doesn't help when various desktop and mobile app developers host their APIs behind Cloudflare. Users end up with timeouts or other error messages that have don't mention anything about being blocked by Cloudflare.
327.
by r1ch 8y ago
In the online gaming space, Skype used to be a big enabler of DDoS attacks due to its P2P nature. Almost everyone used Skype back before we had Discord and other alternatives, and there were plenty of sites that you could paste in someone&#
328.
by r1ch 8y ago
Not really. In theory the zone signing could be done as a separate process from zone updates, but I don't think any DNS provider implements this - they hold the keys, not you. The other attacks used compromised domain registrar account
329.
by r1ch 8y ago
Understandable position for them to take when you have the likes of Facebook / Onavo etc pushing VPNs and root certificates on uninformed users for "research".
330.
by r1ch 8y ago
The NVENC hardware encoder in Turing is actually comparable to x264 at fast / veryfast. This card will be quite interesting to Twitch streamers as it opens up the possibility to stream without CPU impact for those with a limited budget

More ›