regecks

21 ms·

151.
by regecks 8y ago
I think both comments are sarcastic jabs at Go.
152.
by regecks 8y ago
> no way to get past the warning. You are right, but there's always a chance that the various documented HSTS bypasses might filter down to normal people. People might be willing to find and use them if they /really/ need
153.
by regecks 8y ago
The one that I got a hit for was made specifically for New Relic. Is this some kind of sales platform or what? It's so tiresome to have your email become the town bike the moment any SaaS gets their hands on it.
154.
by regecks 8y ago
Yes, but they also come with Google's release engineering, so at least you can be somewhat confident they've not been subverted in some way not intended by the authors of the browser. The way Ungoogled Chromium is distributed is w
155.
by regecks 8y ago
After Microsoft's giant OneDrive bait-and-switch a few years ago I am super skeptical of any "too good to be true" storage pricing. I really wonder how it is physically possible to offer these rates.
156.
by regecks 8y ago
You can also just enable versioning on the bucket which prevents PutObject from doing any permanent damage. If restic needs DeleteObject, you can also configure IAM to not allow deleting of specific versions, which means it can only tombsto
157.
by regecks 8y ago
Whoever wrote that part of the net/http package probably wanted `Cookie` to fulfill the `Stringer` interface, so the compromise was to use an empty string. Mildly reminiscent of x/crypto/acme/autocert only having support
158.
by regecks 8y ago
Damn. All these years and I never realized anonymous/inlined ACLs were possible.
159.
by regecks 8y ago
Wherefore art thou iPhone SE? :(
160.
by regecks 8y ago
SaaS-ifying your docs seems risky to me. Writing documentation is a big investment and startups tend to come and go ("it's been an incredible journey"). $39/mo is much more than what it costs to self-host Confluence, whi
161.
by regecks 8y ago
> but don't keep up maintenance of it Not sure about this phrasing. It's not on the domain owner to maintain anything, you just need to not forget you have DNSSEC enabled if you move your zone to different NS. It's up to y
162.
by regecks 8y ago
If you're looking for a great Linux laptop, this is one. Very happy with the 5th gen.
163.
by regecks 8y ago
Forgive me for further splitting hairs, but you can buy SSL certificates without a credit card or proof of identity (Namecheap + Bitcoin since 2013 being one but not the only opportunity). I think this $ thing is an arbitrary line in the sa
164.
by regecks 8y ago
Is your argument honestly that paying less than $10 is a sufficient deterrent for a serious attacker? To take advantage of a mis-issued certificate to begin with requires more resources than that. It's disingenuous to call this certif
165.
by regecks 8y ago
Inaccurate status pages are fatiguing. Why are they not automated? It's such a drag to have to use Twitter and IRC to bully their CSRs into actually acknowledging problems. The cynic in me says that these companies want to get away wit
166.
by regecks 8y ago
Well, I think they're worth separating. I've seen a raw SIGSEGV in Go due to a runtime bug years ago, and the only safe outcome is process termination. On the other hand, dereferencing a nil value in Go in relatively safe (as in J
167.
by regecks 8y ago
When have you seen segfaults in Go? I think 100% of the time, it is either a bug in the Go runtime, or you're using cgo (which is not really Go anymore). A language as simple as Go without nilable types would be great, though.
168.
by regecks 8y ago
They do have AS redundancy, but only for their MX.
169.
by regecks 8y ago
Yeah, Linode Newark is an unaffected vantage point. Same with Vultr, but Digital Ocean is no go. Since the MX are spread between NYI/AS11403 and AS201628, I think that all mail delivery should still be fine. I'm receiving occasion
170.
by regecks 8y ago
Since 22:59 UTC for me. Due to the sudden drop-off, it seems like it may have been a poorly executed configuration change.
171.
by regecks 8y ago
Well, they are directly included in most root programs now (ISRG Root X1). The cross-signing was a bootstrapping and compatibility solution (e.g. Windows XP). It seems likely at some point that they will drop the cross-signing.
172.
by regecks 8y ago
> relatively long duration certificates are one area where they have something that Let's Encrypt doesn't. For some time recently, AlwaysOnSSL[1] was issuing automated, free and trusted certificates with 12 months validity via
173.
by regecks 8y ago
Vimium has been working great for me, even since they broke Vimperator.
174.
by regecks 8y ago
>it's all but impossible to tell if a site is made with it Do you mean visually? You can usually identify which SPA a site was built with by looking at the live DOM for a couple of seconds.
175.
by regecks 8y ago
>The tricky bits are all the hacks to limit resource usage which took a bunch of engineering time to implement and test and aren’t reusable across engines. Interesting. I built the same thing. Through some basic script examples, such as
176.
by regecks 8y ago
> The Cloudflare-APNIC experiment uses two IPv4 address ranges, 1.1.1/24 and 1.0.0/24, which have been reserved for research use. Cloudflare's new DNS uses two addresses within those ranges, 1.1.1.1 and 1.0.0.1. They had
177.
by regecks 8y ago
I did a contract in a corporate environment where the SSL interception proxy passed-through any site with an EV certificate. I first noticed that it wasn't intercepting my connection to my bank, and then after some experimentation, tha
178.
by regecks 8y ago
Can't reply to stephenr because comment thread is too deep, but it's perfectly possible to run WordPress without write permissions anywhere near executable code and then to schedule automatic updates at a different privilege level
179.
by regecks 9y ago
Yeah, that's a good point too.
180.
by regecks 9y ago
At least with Let's Encrypt, you can revoke a certificate issued by a different ACME account, as long the ACME account you are revoking from has a valid authorization for all of the DNS identifiers on the certificate being revoked. Of

More ›