r1ch

54 ms·

541.
by r1ch 10y ago
This turns off the system performing WPAD discovery on its own, but does it actually block the DHCP option?
542.
by r1ch 10y ago
Seems to be done with a mix of compromised (reused) credentials and social engineering. Social media accounts in particular are quite vulnerable to social engineering since they are often tied to mobile devices and it's fairly easy to
543.
by r1ch 10y ago
Why provide the option to use unencrypted origin connections then? If a customer wants SSL, make them do it right.
544.
Cloudflare's “Flexible SSL” Traffic Is Being MITMed by an Indian ISP(medium.com)
57 points by r1ch 10y ago|4 comments
545.
by r1ch 10y ago
Asks for full permissions on all sites, so it's likely going to be replaced by adware / malware once the hype is over.
546.
by r1ch 10y ago
I have to wonder - when you're digging down into this level of complexity in order to discover issues with the language you're using, wouldn't something like C be better? IRC isn't a very hard protocol and you know the l
547.
by r1ch 10y ago
Twitch has a fairly high number of outages, although not all affect video playback (eg API outages). Most recently the whole site was down for about an hour from EU due to a botched CDN setup. I have a status tracker that monitors from four
548.
by r1ch 10y ago
It turns out the warning interstitial was actually added by a volunteer admin and has since been removed. Steam login to the gambling site is back to 100% functionality now with no warnings.
549.
by r1ch 10y ago
Curious how this was solved, anyone have a link to a followup?
550.
by r1ch 10y ago
You aren't performing your test properly. Encryption doesn't output random text, it outputs bytes of data (0-255). It should be obvious that compressing text is possible. $ dd if=/dev/urandom of=test bs=1k count=10 $ cat
551.
by r1ch 10y ago
Curious what they're using for backhaul wireless links if they're offering 1 gbps service. Not many solutions can handle that kind of speed.
552.
by r1ch 10y ago
Would like to see this default to HTTPS. Addresses can often reveal lots of personal information.
553.
by r1ch 10y ago
Some of these settings seem a bit dubious - setting the nginx keepalive timeout to 5 seconds for example does nothing to "harden" things, but kills performance of HTTPS sites. Be sure you understand what you're actually doing
554.
by r1ch 10y ago
No UDP support after all these years is really quite shameful. Tunneling TCP over TCP is insanely bad, the slightest packet loss and your connections are toast.
555.
by r1ch 10y ago
These are actually Mikrotik devices too, just with OpenWRT pre-installed instead of their proprietary RouterOS.
556.
by r1ch 10y ago
Wow, just looking at that URL is cause for concern.
557.
by r1ch 10y ago
Neat. It's disappointing how TCP congestion control is one of the main limiting factors of modern broadband connections. Even downloading from S3 or something it takes up to a minute before TCP discovers the link bandwidth, when the tr
558.
by r1ch 10y ago
This must expose an absolutely massive attack surface. Time to disable all these "delegates".
559.
by r1ch 10y ago
Yes this was meant to be my point - I didn't even consider ads using gelocation (which explains the downvotes I guess :))). While we do use geolocation and ads on one of our sites, it's only a single page so this doesn't real
560.
by r1ch 10y ago
So ad-supported sites have to choose between greatly reduced ad revenue or a broken app. Thanks Google.
561.
by r1ch 11y ago
Mostly Javascript and caches.
562.
by r1ch 11y ago
That's still 84 KB of highly compressed javascript code to parse and execute. Even on a 4.4 GHz CPU core and a cached request, jquery takes upwards of 22ms to parse - that's just parsing - not even executing anything! Now add a bu
563.
by r1ch 11y ago
You'd think an IRC network targeted towards gamers would make extra sure to keep things secure and private. Supporting SSL/TLS and enabling IP cloaking by default would go a long way to improving privacy on Quakenet.
564.
by r1ch 11y ago
Conflict Crusher, wow that takes me back! Back to that awful Visual Basic UI with random windows metafiles for backgrounds, what was I thinking.. :). Great to hear that I helped you on your path to become a programmer! Modding games inspire
565.
by r1ch 11y ago
I tried to call a few times and unfortunately kept getting disconnected from my VoIP line. I ended up using their live chat and the person I spoke to was very quick in recognizing it as a social engineering attack and worked with me to rese
566.
by r1ch 11y ago
I had my 2FA at Singlehop bypassed by social engineering attack. They helpfully changed the entire account contact info without any notice to me, presumably from a phone call. The attacker didn't even have any information to go off oth
567.
by r1ch 11y ago
Any idea why this needs such wide permissions like managing my apps and extensions and reading my history?
568.
by r1ch 11y ago
Seriously! It's 2016, unless you rely on 3rd party resources that don't support HTTPS there's no reason why your site shouldn't be HTTPS only. Certificates are free and there's negligible performance overhead with m
569.
by r1ch 11y ago
Looks like the go bindings are made from a separate libquic project at https://github.com/devsisters/libquic which looks a lot more streamlined than the Google one at 14MB.
570.
by r1ch 11y ago
Awesome, was hoping for something like this ever since reading up on QUIC. Looking forward to experimenting with it, TCP just hasn't kept up with today's internet and QUIC looks like a well designed replacement. EDIT: My enthusias

More ›