r1ch

14 ms·

121.
by r1ch 4y ago
A well-run bug bounty should encourage early reporting of issues. Should he have waited until public release so the impact was bigger?
122.
by r1ch 4y ago
It's also a way to get an email address that you can retarget ads to.
123.
by r1ch 4y ago
Have the complete opposite experience here - we (OBS Studio team) often have malware copies of our website set up by scammers, and Namecheap are the most responsive by far at suspending the domains - usually in under an hour (!).
124.
by r1ch 4y ago
That isn't always the case these days, web apps can run on Cloudflare without an origin.
125.
by r1ch 4y ago
I've been seeing some cleverly encoded emails with multiple MIME parts that bypass the spam filter. Gmail decodes one representation but displays another. Luckily the content they show to the spam filter is mostly static so a regular f
126.
by r1ch 4y ago
Why does your API want the full email address? That becomes a privacy liability as surely the domain alone is enough.
127.
by r1ch 4y ago
There's several Python scripts that can pull the data over Bluetooth. https://github.com/stijnstijn/pyaranet4 https://github.com/Anrijs/Aranet4-Python
128.
by r1ch 4y ago
My partner takes Megafood's "Blood Builder" iron supplement which seems to work well and avoids the GI symptoms.
129.
by r1ch 4y ago
For me this is very noticeable whenever I open a new Chrome tab. It takes 3+ seconds for the icons of the recently visited sites to appear, whatever cache is used for the favicons is extremely slow. Thankfully the disk cache for other resou
130.
by r1ch 4y ago
We have actually just launched a user survey[1] today hoping to get some feedback about how people use OBS, with the goal of improving UX. No telemetry makes it difficult to get an idea of which features users actually use or find important
131.
by r1ch 4y ago
Have you tried taking theanine with it?
132.
by r1ch 4y ago
If you have an Intel WiFi card, there's a driver setting "Global BG Scan Blocking" to never scan if you already have a good signal. Works great
133.
by r1ch 4y ago
I tried the top rated Omega 3 from labdoor for 6 months, it's incredibly expensive and I noticed no difference at all from my generic brand. A lot of the lower labdoor scores come from label inaccuracy rather than anything seriously wr
134.
by r1ch 5y ago
While there have been remote exploits against exposed management ports, the vast majority of compromised Mikrotik devices are caused by insecure configurations by users. Mikrotik is huge in the smaller ISP world and especially in developing
135.
by r1ch 5y ago
I have even greater things to say about OpenWrt on Mikrotik hardware (where supported)!
136.
by r1ch 5y ago
As if I need another reason not to recommend Ubiquiti... Yes, Kreb's reporting wasn't great and he should have retracted the original article once the facts came out, but I don't think being a bad journalist is something you
137.
by r1ch 5y ago
int is still 32 bit on 64 bit platforms, architecture makes no difference here.
138.
by r1ch 5y ago
Not necessarily even then. Connecting to a new domain has the overhead of a DNS lookup, TCP connection and TLS handshake before you can even send the request (and be stuck in slow start for the first few RTTs).
139.
by r1ch 5y ago
Well this is downright scary. Homebrew crypto implementations, what could go wrong... I expect we'll see an exploit to log in with any password soon enough :).
140.
by r1ch 5y ago
Agreed, and I hope they don't lose too much of that as they continue to grow. My personal experience - I found an issue with a certain DNS query type returning incorrect results and opened a ticket. The first reply was a confirmation o
141.
by r1ch 5y ago
I received a data breach notice from a local business as required under GDPR and it had failing SPF and DKIM as if it was intended to go straight to spam. Hard to say if it was intentional or incompetence, but it seemed like a good way to f
142.
by r1ch 5y ago
That "manual verification" back in the day was an email verification link, so again, back to relying on DNS. I don't think there's a way around it, but at least with certificate transparency we'll know if it happens
143.
by r1ch 5y ago
I remember writing a Foobar2000 plugin to emulate the Winamp API so my mIRC song spam scripts still functioned. It was buggy as hell as I was still new to C++ programming and it eventually got added to a hard-coded blacklist in the app for
144.
by r1ch 5y ago
I remotely installed a firmware update on a Broadcom NIC and the server rebooted with completely different device names and no networking. Thankfully I could still access OOB management. It was definitely a shock to see how fragile the new
145.
by r1ch 5y ago
Wouldn't this have to be constantly transmitting to work? I can't imagine the amount of interference this would create. The lower frequencies are already congested enough...
146.
by r1ch 5y ago
The choice to use SHA256 is surprising to me given that there are a number of other hash functions such as the BLAKE family that are explicitly designed to have arbitrary output sizes.
147.
by r1ch 5y ago
That guidance is pre-omicron. Someone talking in your face seems like extremely high risk these days.
148.
by r1ch 5y ago
The downside of such a setup is that as a user, I now have no idea if the site is actually secure. If the mom-and-pop shop is taking credit card orders and has a secure Cloudflare cert, how do I know they aren't then transmitting my cr
149.
by r1ch 5y ago
Note that while option 3 will fix this particular issue (because they only seem to care about port 80), it doesn't stop them from MITMing the connection with their own self-signed cert in the future. Only options 4 and 5 ensure a fully
150.
by r1ch 5y ago
Full isn't actually enough to secure this - with their MITM position, Airtel could send an untrusted certificate and continue to intercept and modify traffic. Full (Strict) is the only safe option.

More ›