regecks

17 ms·

121.
by regecks 8y ago
Strange and potentially busted, if that interpretation is correct. What if your ACME client is updating the certificate and private key when an nginx connection comes in? You can't atomically update both files, right? So nginx will pot
122.
by regecks 8y ago
Route53/IAM doesn't have any way to restrict access to only _acme-challenge DNS labels. Use RFC2136 like civilized folk, I guess. ¯\_(ツ)_/¯
123.
by regecks 8y ago
> What would be better is to require 2FA for all zone hosting companies. Even with this, many registrars and DNS hosts are too fast and loose with disabling 2FA when you call them up and tell them you lost your second factor. Alternative
124.
by regecks 8y ago
I know that the linker will ignore LD_PRELOAD for suid binaries, what other kinds of issues are there?
125.
by regecks 8y ago
Another curiosity is that it still shows up in the search results for anonymous users: https://github.com/search?q=faceswap Hard to guess at the intention.
126.
WireGuard for macOS released(lists.zx2c4.com)
8 points by regecks 8y ago|1 comments
127.
by regecks 8y ago
Very reminiscent of RuneScape.
128.
by regecks 8y ago
There's a nozzle for that :) - http://www.fire-protection.com.au/news/hush-nozzle From what I understand, using water/dry pipe isn't unheard of. Some prefer it over Halon - https://blog.equini
129.
by regecks 8y ago
You can also take a blacklisting approach, where it's open-by-default and users shall be able to restrict any domain to properly authenticated users only. That way, it is purely a security enhancement for those who want it (like me). I
130.
Spoofing Google Search results(wietzebeukema.nl)
5 points by regecks 8y ago|0 comments
131.
by regecks 8y ago
There's already a root requirement so that `mkcert -install` can deploy to the trust store. The problem is that after this point, the trust store is totally undermined, because the new CA's private key sits around unprotected. I f
132.
by regecks 8y ago
I don't understand why you made the CA private key user-readable. On my system, modifying the trust anchors requires root privileges. mkcert undoes this boundary by opening a "shortcut" where any code on the machine can mint
133.
by regecks 8y ago
Even if you ditch your voluntary use of their services (like search, docs, forums), you are still faced with things like reCAPTCHA pervasively track your browsing and gatekeeping your access to large swaths of the internet.
134.
by regecks 8y ago
Been using it for some weeks via TestFlight, it's really solid and works without a hitch. Great to see it on the actual store. It now has "on-demand mode" and transitions seamlessly between Wi-Fi and cellular. When setting up
135.
by regecks 8y ago
I feel like it's pretty easy to understand the hate. For example, the recent x.509 verification DoS patched in <Go1.11.3 required me to recompile, tag and redeploy bunch of services. And then also push an RPM to thousands of custome
136.
by regecks 8y ago
SQLite is heavily subjected to fuzzing already ... maybe this vulnerability was discovered that way.
137.
by regecks 8y ago
Why victimize Fastmail? Law enforcement access to your email inbox remains exactly the same as before this bill was passed. If you're just punishing any Australian company, FeelsBadMan (as an Australian developer).
138.
by regecks 8y ago
> it doesn't do any real damage I'm not sure about that. You can perform blind exfiltration of row data by using SLEEP. Handy in situations where you can run a query but can't get it reflected in the server's output.
139.
by regecks 8y ago
Really appreciate the transparency shown in this comment. I recently moved away from Namecheap after 10 years of it being my primary registrar (mainly because of the crappy 2FA) but this is certainly making me reconsider.
140.
by regecks 8y ago
Are you sure? I'm using a X1 Carbon Gen 5 (which I believe is 2016? maybe 2017), and I read that Linux 4.18 (which comes with Ubuntu 18.10) now has functional fingerprint support. I haven't tried it yet, not a fan of biometric aut
141.
by regecks 8y ago
A massive thank you to you and any of the sponsors who made it possible to put a rush on the iOS app. Never imagined it'd be here so soon. Worked fantastically - generated a client profile on the server and setup within a couple of min
142.
by regecks 8y ago
And when Verisign (the registry operator for .com) decide that they no longer want [some undesirable domain] registered at all, where then? Go hopping between TLDs/ccTLDs? What about when ICANN gets dragged into the politics of all of
143.
by regecks 8y ago
Isn't that the OP's point? What if no accredited .com registrar wants to serve them for fear of being criticized in the media? Gab would be SOL and lose the ability to meaningfully exist on the internet. Why are private companies
144.
by regecks 8y ago
Be grateful, I'm sitting in metropolitan Melbourne and am stuck with ADSL until 2020, when we will be "upgraded" to decades-old HFC.
145.
by regecks 8y ago
It's also really easy to screw over the merchant. Report the transaction as fraudulent, and they're out $20-30 over a dispute that's impossible to win.
146.
by regecks 8y ago
There's no reason to remove TLS 1.1 from your server. This change is about the minimum protocol version supported by the browser. Your server can advertise SSLv3 support alongside TLS 1.2, and Chrome 70 will still happily connect to it
147.
by regecks 8y ago
> For example, in Python you can ask for a specific TLS version libcurl has the same thing. A really common problem in PHP ecommerce libraries and applications is the misuse of CURLOPT_SSLVERSION to pin a specific protocol version. Then
148.
by regecks 8y ago
It seems to be caused entirely by `scroll-behavior: smooth;` on the `html` element. Try add that style to this (HN) comments page. Same problem. Seems like the vim addons aren't dealing with browsers' implementations of that style
149.
by regecks 8y ago
Yeah, gross. jk gg G all stopped working. Checking archive.org, it looks like the scrolljacking was just added on October 12.
150.
by regecks 8y ago
If anybody is thinking about Java, check Graal out. I was able to successfully create fast, completely static ELF binaries of real JVM applications from fat JARs (not in the fake self-executable archive way). It's still early days in t

More ›