r1ch

63 ms·

601.
by r1ch 11y ago
Got an example of how to drop it into crontab? I'm not really a Python guy and it seems to only run under the venv which I'm not sure how to setup from a cron job. EDIT: Never mind, figured it out, I can just run the simp_le scrip
602.
by r1ch 11y ago
Problems with a reverse proxy? "There were too many requests of a given type :: Error creating new registration :: Too many registrations from this IP" First time trying to sign up and only for a single domain.
603.
by r1ch 11y ago
Given that pagefair does this for free and already has whitelisting agreements with adblock lists, I think your pricing is too high. The only differences I see at a glance are that you break it down into per-device stats and have a tabular
604.
by r1ch 11y ago
Ad supported sites can't really use it since the vast majority of ads are still not SSL compatible, meaning you get mixed content warnings (and no ads / revenue).
605.
by r1ch 11y ago
I had the a similar problem, they refused to issue a certificate because the domain had a trademarked word in it. Seems strange they would be the ones to enforce trademarks, but I guess it could be considered as an anti-phishing measure or
606.
by r1ch 11y ago
I'm hoping once QUIC matures that Google will release some open source Apache / nginx modules to support it. Development without any commercial incentive seems to happen very slowly otherwise.
607.
by r1ch 11y ago
Seems like this could have been prevented if they supported subresource integrity.
608.
by r1ch 11y ago
Not too surprising given the permissions require complete access to everything. Not gonna trust a random extension not to steal all my logins.
609.
by r1ch 11y ago
You can do subdomains, but with only class 1 verification you are limited to one subdomain per cert and the root domain is also included.
610.
by r1ch 11y ago
Tried this once. Ad block maintainers went out of their way to create custom filters for our site.
611.
by r1ch 11y ago
Twitter requires auth for every API call, even reading public information. They would burn out their own API quota pretty fast if they didn't have each user grant them a read-only token.
612.
by r1ch 11y ago
In this context, UPnP is what allows uTP to be used as a reflector, since the target reflector will have their ports opened automatically by UPnP (normally a NAT would block it). That said, improperly configured UPnP can also be used to per
613.
by r1ch 11y ago
Unfortunately the first two options aren't really viable if you're an ad supported website. HTTPS will kill your ad revenue since most ad scripts don't work properly over HTTPS.
614.
by r1ch 11y ago
I find it a little ironic that the author argues sites should use https to avoid someone MITMing their ads when the majority of ads out there don't function correctly over https. For any ad supported website, this is the one of the mai
615.
by r1ch 11y ago
Just a heads up, your DNS took a long time to resolve for me. You appear to have an invalid nameserver (ns3.gridhost.co.uk) listed at the root. https://r1dns.com/dnscheck.cgi?domain=expirify.com
616.
by r1ch 11y ago
TCP being awful at high bandwidth, and scientists not knowing how to use anything more efficient.
617.
by r1ch 11y ago
Adblock Plus is semi commercial, they sell whitelisting services to publishers (you can pay them to have your non-intrusive ads show by default).
618.
by r1ch 11y ago
Unfortunately this would break TCP Fast Open, which transmits data with the initial SYN.
619.
by r1ch 11y ago
Compromising a page doesn't necessarily have to alter existing content. It would be easy to add a "Download Preview Build" link pointing to a trojan, add links to a fake kickstarter, etc.
620.
by r1ch 11y ago
And it only has access to all your bank logins, emails, passwords and more!
621.
by r1ch 11y ago
One thing to be aware of, these replacement zlib libraries are not always "drop in" safe as some software such as nginx pre-allocate the zlib state buffers by hard coding in the original zlib structure sizes (the original zlib mak
622.
by r1ch 11y ago
It seems I meant "Flexible SSL" instead of "Universal SSL". According to the main website, flexible SSL is not secured. https://www.cloudflare.com/ssl The beta test of a Cloudflare CA for "Full SSL&
623.
by r1ch 11y ago
A bit off topic, but I find it quite disheartening that cloudflare has regular blog posts about how great their security is and how safe you are with cloudflare, but at the same time offers customers seriously broken SSL options. 2 of the 3
624.
by r1ch 11y ago
There's a non-trivial paperwork requirement too. I'd have no problem paying and getting a cert from the comfort of your chair like you can do with SSL. However for code signing I have to take time out of the day to visit a notary
625.
by r1ch 11y ago
Any chance of adding STARTTLS support to tls.so? I've found a lack of decent tools to scan FTP servers, SMTP servers, etc.
626.
by r1ch 12y ago
Unfortunately most spdy / HTTP2 implementations mandate TLS. This means websites that rely on ad revenue cannot benefit from these improvements without losing revenue. I'd really love to use spdy / HTTP2 but ad revenue is mor
627.
by r1ch 12y ago
Yeah, it's the primary reason why I can't get any of our properties on https. Any ad supported platform / website simply can't afford to use https.
628.
by r1ch 12y ago
For domain validated certificates those details are often ignored, only the domain name is part of the final certificate.
629.
by r1ch 12y ago
It's easy to examine once, but once you grant permissions, the author can silently push out a malicious update at any time. I really wish there was a way to disable auto update on an extension by extension basis.
630.
by r1ch 12y ago
A more specific email appears to have been sent to affected users. It seems to imply that malicious code was inserted into the login page, but doesn't provide any further details to the extent of the compromise. http://i.gya

More ›