r1ch

42 ms·

391.
by r1ch 9y ago
This is not how Windows code signing is supposed to work. Normally you'd get a countersignature from a timestamp server so that the verification process can prove that the certificate was valid at the time of signing. It would appear t
392.
by r1ch 9y ago
This is a great example of why it's important to pick secure defaults when writing software, especially software that is often deployed on high bandwidth servers or cloud instances. If no listening interfaces are specified then the def
393.
by r1ch 9y ago
Are there even any legitimate domains under these new super-cheap-50c-domain TLDs like .bid? I've seen a 100% spam bot rate for all email domains ending in .bid on our sites. I'm considering changing my local DNS to NXDOMAIN the w
394.
by r1ch 9y ago
Agreed. It's getting a bit much, almost every one of his blog posts has some advertisement for Cloudflare. 2 of Cloudflare's 3 SSL options generate an insecure setup yet look perfectly fine to the user with a shiny green padlock i
395.
by r1ch 9y ago
Beware that this release seems to destroy your filesystem if run via sudo. https://github.com/npm/npm/issues/19883
396.
by r1ch 9y ago
Another way is to prefix the command with whitespace.
397.
by r1ch 9y ago
This was used to steal bitcoin cash tips on Reddit by hijacking password reset emails ( https://www.reddit.com/r/bugs/comments/7obxkb/mailgun_securi... ) I find it amusing they still have a "trusted b
398.
by r1ch 9y ago
Microsoft's Skype for business servers block(ed?) ICMPv6. That was a fun one to track down when there was an MTU issue on our network, especially when their diagnostic tool claimed there was a 403 error from the SIP endpoint!
399.
by r1ch 9y ago
Some of the blocks appear larger on Bitcoin Cash even though they have a lower transaction count because they contain transactions that are consolidating unspent outputs (example: https://blockchair.com/bitcoin-cash/tra
400.
by r1ch 9y ago
Who mines a block or where the nodes are etc is irrelevant, the ledger is open and public for both Bitcoin and Bitcoin Cash. This isn't the place for wild anti-Chinese conspiracy theories.
401.
by r1ch 9y ago
Ironically this is the one thing that the Android ecosystem fragmentation has going for it. My guess is that no one can be bothered to make reliable exploits that have all the correct offsets and addresses for who knows how many different k
402.
by r1ch 9y ago
OVH are very open about their outages and root causes. Even routine maintenance tasks are cataloged with updates at http://status.ovh.net As a more technical user it's nice to have providers that give this information rathe
403.
by r1ch 9y ago
Their prices are pretty amazing for some of the configurations you can put together, especially since you can pay a large setup fee in exchange for a lower monthly rate. Just the bandwidth alone would cost us 3x what we pay at OVH if we wer
404.
by r1ch 9y ago
Looks like only their routing / network was down. My servers just came back up and haven't experienced any power outage.
405.
by r1ch 9y ago
I've been growing increasingly concerned by MariaDB bugs. The latest Debian versions from mariadb.org had annoying libmysqlclient symbol conflicts with Debian packages and it still isn't fixed in the latest stable release. I also
406.
by r1ch 9y ago
Has anyone else had trouble using pagespeed insights recently? I think they changed something about their API, every site I try to test gives me "The referrer https://developers.google.com/ does not match the referrer
407.
by r1ch 9y ago
It's a pity this didn't completely break WPA2 like how WEP was broken, now it will be years before there's any new security developments. Things like management frame authentication and dynamic client keys for open networks w
408.
by r1ch 9y ago
It gets a 403 on https://www.googleapis.com/analytics/v3/management/accountSu... after logging in. I am signed in to multiple Google accounts, although the primary account is also the one I use with analytics
409.
by r1ch 9y ago
Doesn't seem to work for me. Asks me to log in to Google, I choose my account then it goes back and shows an empty list of sites. Never got a prompt to approve any permissions.
410.
by r1ch 9y ago
Xiaomi's MIUI has this feature, you can use different fingerprints to directly enter a "2nd Home" or something where all apps / data is segregated. It's not really designed to be too stealthy though as there's
411.
by r1ch 9y ago
This only appears to be for VOD.
412.
by r1ch 9y ago
I wonder if you could use the interest in bitcoin wallets as a canary for device compromise - load up servers, phones, desktops, etc with unprotected wallets, add a small amount of bitcoin and set up an alert system if the funds are moved.
413.
by r1ch 9y ago
The free version does load itself into the background these days to pop up messages reminding you to clean your PC.
414.
by r1ch 9y ago
I wish there was more technical information, even the advisory is unclear here. The CCleaner installer is always 32 bit for compatibility - it installs both 32 bit and 64 bit program binaries. On 64 bit systems, the default shortcuts are to
415.
by r1ch 9y ago
Oddly this updated version has worse code generation than the last official release (at least on Windows). It uses 3 instructions just to push one arg to a function call!
416.
by r1ch 9y ago
I hope that 300KB refers to the backend code size, since one of the selling points is organizations run their own version. There's no way you need 300 KB of frontend code to render HTML from a database.
417.
by r1ch 9y ago
This looks very scary, especially given how many Android devices are out there that receive few or no security updates.
418.
by r1ch 9y ago
Somewhat related is positioning your WiFi AP based on passive signal strength monitoring. Both Apple and Google do this to maintain their own private WiFi positioning databases, but there are also public databases with this information too.
419.
by r1ch 9y ago
This relates to the setting mentioned in the article, "always allow scanning".
420.
by r1ch 9y ago
You may want to look into adding a CAPTCHA or some other kind of spam prevention system to the contact form. Spambots these days will fill in any contact forms with all kinds of spam. If you're remailing those contact form responses th

More ›