r1ch

34 ms·

331.
by r1ch 8y ago
I wonder if password managers should consider running under a higher privileged account (eg administrator). This would prevent lower privileged processes (eg your typical drive-by malware) from being able to get a handle to read memory with
332.
by r1ch 8y ago
These services are / were very popular in online gaming to knock opponents offline, you only need a few minutes of DDoS time to kill a residential connection. Console games in particular are quite vulnerable as a good amount of them st
333.
by r1ch 8y ago
btrfs still has a lot of issues unfortunately. I tried using buildroot once and the entire filesystem kinda died with the infamous "out of space" error even though there was plenty free. Several RAID levels are also unsafe to use.
334.
by r1ch 8y ago
Even their free services have great support, I had some non-standard DNS setup that wasn't possible through their web interface and it was up and running within a few hours.
335.
by r1ch 8y ago
I think the parent comment is referring to the "Flexible SSL" option where Cloudflare does HTTPS on the frontend but HTTP over the internet to the origin. Customers like it since they get the "green lock" in one click an
336.
by r1ch 8y ago
I would hope that requests to "POST /store/checkout" are encrypted. Cloudflare is a MITM so they can of course see this (and the associated personal / payment data...) regardless of encryption.
337.
by r1ch 8y ago
I hated having to use a proprietary app for this (even if it was based on the Authy SDK), so this is a nice improvement. I'd really like to see U2F support though as well, domains are very valuable assets and deserve the strongest prot
338.
by r1ch 8y ago
For Bitcoin, BIP 70 was proposed (and quite widely implemented) to take care of a lot of these issues. I assume many other cash-style cryptocurrencies have something similar these days. https://github.com/bitcoin/bips&#
339.
by r1ch 8y ago
Web Packaging in the W3C draft was a completely different idea - there's not even a single mention of signatures. The "specification" you linked is actually a standards draft published by Google. And the open source project i
340.
by r1ch 8y ago
Between Google's browser market share and Cloudflare's internet dominance, I'm getting quite worried about the speed at which large changes like this are occurring. Google rolls out an experimental feature with no standardiza
341.
by r1ch 8y ago
Seriously! Every click feels like a chore, it's easily 3+ seconds before the page is interactive again. I've started using the mobile app for everyday tasks since it's so much more responsive, I just wish it supported better
342.
by r1ch 8y ago
Fragmentation by the IP layer is very unreliable in today's internet. I've seen plenty of consumer routers that throw away the whole datagram if a fragment arrives out-of-order, and who knows what kind of hell corporate middleboxe
343.
by r1ch 8y ago
Let's Encrypt is already taking steps to mitigate this. BGP hijacking is a noisy event - it should be possible to see that routes have changed recently and deny issuance. They can also perform challenges from multiple geos / netwo
344.
by r1ch 8y ago
This is the theory, but I've never seen it in action. Even those cryptocurrency scam bots that reply to high profile accounts with wallet stealing sites have their links working for hours / days.
345.
by r1ch 8y ago
As KRACK is a client vulnerability, an access point shouldn't be vulnerable in the first place.
346.
by r1ch 8y ago
RouterOS is a proprietary set of programs (all the way from an init replacement) on top of Linux (a super old version of Linux at that, Kernel 3.x from 2012 IIRC) with a bunch of patches to hack in all the necessary hardware support.
347.
by r1ch 8y ago
Unfortunately Mikrotik updates tend to change a lot of things and potentially cause issues. Recently the whole bridge implementation was rewritten which required config changes if you had anything beyond the basic bridge/port setup. An
348.
by r1ch 8y ago
I think there's still a lot of blame on Mikrotik for having such bugs in their management service and other daemons. I explicitly opened up the winbox port to be able to remotely manage Mikrotik routers I deploy (I considered their VPN
349.
by r1ch 8y ago
The problem is that a full backup on Android requires root, which breaks a lot of security guarantees and isn't even always possible. As far as I'm aware, there is no possible way for me to backup my non-rooted phone, wipe it and
350.
by r1ch 8y ago
I don't know how others feel, but if I kept control of the device I would feel much more comfortable with this process. The fact that they can make me unlock the device then take it out of my sight and do unknown things to it means I c
351.
by r1ch 8y ago
I've been trying to find a registrar with more-than-normal security without much luck. I want a registrar that will stand up to a sophisticated social engineering attack using leaked documents and personal information etc. The big name
352.
by r1ch 8y ago
They've gone well beyond the extension now. These days you have no idea if that "free" app you've installed has made a deal with Luminati to sell your bandwidth to the highest bidder. They also have an Android SDK too. I
353.
by r1ch 8y ago
Looks like there's a bug with the wait list, once you sign up don't visit the page again or it registers you again in a later wave! On further investigation it seems to be throwing 502 errors and then saying Wave 8, so maybe it&#x
354.
by r1ch 8y ago
There was a 0-day winbox bug this year that was being actively exploited in the wild. They definitely have their share of security issues, and more are likely to come since they write their own versions of httpd, sshd, smbd, etc instead of
355.
by r1ch 8y ago
I believe they used Wifi BSSID tracking for that, GPS would be too battery heavy. If you're connected to the same Wifi networks it can reasonably assume you're in the same vicinity.
356.
by r1ch 8y ago
This sounds great. Hopefully the TLD coverage is extensive, I dislike having my domains split across multiple registrars based on their supported extensions.
357.
by r1ch 8y ago
Cloudflare offers unmetered bandwidth, so this should remove any bandwidth costs completely. https://support.cloudflare.com/hc/en-us/articles/200172656-D...
358.
by r1ch 8y ago
It takes a long time to build up IP reputation if you run your own infrastructure. Even today after a year+ on the same IP, DKIM/SPF/DMARC, senderscore of 100 and transactional email only, Yahoo still randomly blacklists us for we
359.
by r1ch 8y ago
Are there any plans to support SRI? It's a pretty big security risk to incorporate 3rd party JS onto all pages - if someone compromises your CDN account then they have full control over every site that's using this code. This is o
360.
by r1ch 8y ago
"Cloudflare will forward abuse reports that appear to be substantially complete to the responsible website hosting provider and to the website owner. In response to a substantially complete abuse report, Cloudflare will provide the co

More ›