r1ch

15 ms·

151.
by r1ch 5y ago
2 of the 4 SSL options Cloudflare provides will give a nice lock icon in your address bar and HTTPS will all look like it's working fine, but the connection to the origin is still insecure. It's very misleading and IMO irresponsib
152.
by r1ch 5y ago
Cloudflare terminates SSL at the point closest to the user, so any of the ISPs between Cloudflare's POP and the origin could MITM the traffic. Normally an untrusted MITM cert would throw up a TLS error, but since the Cloudflare <-&g
153.
by r1ch 5y ago
Full does not check certificates, so a MITM can supply any untrusted certificate and intercept your traffic. Only Full (Strict) does trusted cert checking.
154.
by r1ch 5y ago
Glad to see this getting attention. Flexible SSL is an awful option that has no place in the modern encrypted web. Out of the four SSL options Cloudflare gives users, only one is actually secure. It's a huge foot-gun.
155.
by r1ch 5y ago
My solution to this was to make my SSH agent (Pageant) show a prompt for authorization when a request comes in, since I only use it for interactive sessions it doesn't break anything. Seems like it would be a good feature for any agent
156.
by r1ch 5y ago
It's annoying how you have to work around Cloudflare's weird Argo pricing like this. Paying per GB for already-cached data that takes the same route as non-Argo traffic makes no sense. I believe it's also against Cloudflare&#
157.
by r1ch 5y ago
Basic Auth has become increasingly difficult to use as a generic way to protect a web app. Many apps these days have endpoints that respond with 401 when a user isn't logged in, which if you're fronting the application with basic
158.
by r1ch 5y ago
Not all financial contributions are shown there. There's a Patreon and also private contributions that exceed the Open Collective tiers, they appear in the Premier section on the OBS homepage.
159.
by r1ch 5y ago
In retrospect, definitely. But a huge part of why Wi-Fi is so successful is the wide compatibility, so we're stuck with a design that is 20+ years old. Beacons also serve to do power saving wake-ups and various other things these days,
160.
by r1ch 5y ago
For those curious about the "Wi-Fi spam" comment: even though nothing is connected to the network and it's a hidden SSID, it still has to broadcast beacons every 100ms. The 802.11 standard says beacons must be sent at the low
161.
by r1ch 5y ago
I'm the one on the OBS team who originally found this. I saw a tweet yesterday from someone that's in the beta, and as with any desktop live streaming software (and especially with "Studio" in the name) I was curious if
162.
by r1ch 5y ago
Not at the moment, we're trying to resolve it in private. Similar to how the Streamlabs situation unfolded, we don't want to "go public" until all other options have been exhausted, though it's looking like this cho
163.
by r1ch 5y ago
It's designed to discourage people from exercising their GPL rights. If they push code every day and the only way to get the most updated code is to pay for a CD to be mailed to you, it becomes quite tiring to keep an up to date online
164.
by r1ch 5y ago
The binaries must be accompanied with an offer of the source code. There is no mention of source code anywhere during the download, install or execution of TikTok Studio, nor any offer inside the application folder or similar.
165.
by r1ch 5y ago
Streamlabs violated OBS' trademarks, their fork has always complied with the GPL.
166.
by r1ch 5y ago
OBS developer here. It doesn't "install OBS in the background". They ship several executables as part of their software that contain code derived from OBS and there is no offer of source code. They're currently in violat
167.
by r1ch 5y ago
Don't recall if this was a deathstar but it certainly clicked. Warning, loud! https://r-1.ch/hdd.mp3
168.
by r1ch 5y ago
The Argo (optimized routing to the origin) pricing makes no sense to me either. Cloudflare charge for bandwidth when you enable Argo, but on ALL requests, not just those that hit your origin. There's actually zero change in routing for
169.
by r1ch 5y ago
The $1 TLDs like .top .xyz .fun etc will be blocked in a lot of places due to heavy spam and malware distribution.
170.
by r1ch 5y ago
Be careful, turmeric can sometimes be adulterated with lead chromate to give it a more vibrant orange color. Make sure you buy from reputable places that test it if supplementing.
171.
by r1ch 5y ago
I always seem to dream more with CBD, I don't know if that translates into better sleep quality or it's just better dream recall, but it seems quite consistent.
172.
by r1ch 5y ago
The trend has definitely been towards lower and lower TTLs with cloud deployments and such. What used to be a 1 day TTL with a static host is now 5 minutes in the cloud. Servers that use geo DNS (EDNS-Client-Subnet) also cause considerable
173.
by r1ch 5y ago
Using a Rwandan TLD negates pretty much all the effort in finding the fastest provider. No glue records and an unresponsive TLD nameserver translates into 100+ms for the initial DNS lookup (likely the only one that matters for such a servic
174.
by r1ch 5y ago
The most common solution is one-time-use backup codes that most services give you when enrolling. Hopefully you saved them somewhere safe! The main issue is Google Authenticator and how popular it is. As GP noticed, it doesn't flag the
175.
by r1ch 5y ago
What kind of bandwidth limitations have you seen with OVH? Their burstable bandwidth works great for us during peak times, I've never noticed any throttling. Though if you're running a seedbox and maxing the interface 24/7 th
176.
by r1ch 5y ago
I think the title is fine, it's showing how even the most simple memory safety bugs can be exploited to lead to system compromise. Not every submission has to be about something happening right now.
177.
by r1ch 5y ago
With the move to client-side rendering, too many. The backend becomes dumber and dumber and all logic such as filtering data moves to the frontend. You'd be surprised what you can find poking around at APIs that client-side apps use.
178.
by r1ch 5y ago
Cloudflare likes to use the "We're just a proxy" defense when it suits them, but with the rapid release of other products they are very capable of generating arbitrary traffic and hosting content without an origin.
179.
by r1ch 5y ago
According to Mikrotik the recent botnet of hacked routers are only used for proxying traffic, not generating it. If this is true then they're only useful for hiding source addresses, an attacker actually loses power if using them for a
180.
by r1ch 5y ago
More pretty marketing gimmicks. Fix the god awful software and get your security in order and maybe I'll reconsider Ubiquiti in a few years.

More ›