rekoil

22 ms·

301.
by rekoil 3y ago
I get the thing about config reloads, I don't think it's worth it due to the security risks of the current default, but I get it. Happy to hear you're moving to sockets by default on *nix! However, I'd like to point out
302.
by rekoil 3y ago
Love to hear it!
303.
by rekoil 3y ago
If you have any old S3 buckets, listing the index used to (in relative terms quite a long time ago) be enabled by default.
304.
by rekoil 3y ago
This (if they definitely must leave the functionality enabled by default) is what should be the default honestly. I still can't fathom why that isn't the case!
305.
by rekoil 3y ago
That's another really good point, even if it's less common these days to see this type of shared machine.
306.
by rekoil 3y ago
What purpose does it actually fulfil? Who is actually looking at individual HTTP requests like this? All it does is take up extra traffic... It's also a security risk if your web server is the only one doing it, as it is a way for an a
307.
by rekoil 3y ago
SSRF in an application is a serious issue to have on its own, that's true, but in combination with a Caddy admin endpoint it can be used to give an attacker full access to your local network. You could have a blind SSRF vulnerability i
308.
by rekoil 3y ago
If you're hosting your applications on localhost it can be a security risk. A blind SSRF vulnerability (with payload control) in your application could be used to gain full control over the reverse proxy resulting in the attacker gaini
309.
by rekoil 3y ago
The argument is mainly that "when you're dead you won't be able to renew the domain and someone can then take over your accounts". That argument can be turned around and argue the opposite, I feel very good knowing that
310.
by rekoil 3y ago
No what I'm talking about here is the unauthenticated JSON-based configuration API that hosts itself on port 2019 on localhost of the machine that runs Caddy. This is unrelated to sites hosted using HTTP. I was clumsily using the term
311.
by rekoil 3y ago
Caddy is amazing, but on production machines remember to disable the unauthenticated and enabled by default JSON-based admin API bound to localhost:2019, as it can be a serious security risk in certain deployments. Put the following in your
312.
by rekoil 3y ago
https://github.com/rcmaehl/MSEdgeRedirect is a decent band-aid on the problem.
313.
by rekoil 3y ago
Sweden is pretty crazy too.
314.
by rekoil 3y ago
Probably intentional to make sure they're not in trouble in case this happens to them: https://arstechnica.com/tech-policy/2023/04/tesla-workers-sh...
315.
by rekoil 3y ago
> But, it's not nearly as fast as many think it is. I'm running on an M2 Max with 64GB RAM here, both Kali and Windows VMs active and working, while my macOS host is running browsers, email clients, Docker containers, etc. All
316.
by rekoil 3y ago
You might be interested in this: https://github.com/mathiasbynens/dotfiles/blob/main/.macos I don't advise just running Mathias' config as is, but read through it and see if anything seems to b
317.
by rekoil 3y ago
Single-phase 16A? That's the standard? My tiny apartment homelab probably uses at least a third of that (I should measure its consumption actually...). Said 50m² apartment has 16A triple-phase installed, but the breaker box is wired to
318.
by rekoil 3y ago
You're working really hard to make this stuff upp mate. > Alt+Tab is bugged. You need a third party app to bring consistent behaviour. It's Cmd+Tab, and huh? What do you mean bugged? Elaborate please. > Closing a window with
319.
by rekoil 3y ago
> meaning you can really only have an electric shower and an oven on at the same time and that's it, you've gone over the limit What's the deal with your electric showers anyway? Surely it's more efficient to heat in
320.
by rekoil 3y ago
> How many residential appliances benefit from three phase Induction hobs, saunas, EV chargers, to name some. > and is the benefit outweighed by the additional cost of more copper for the additional wires? Additional cost? You don&#x2
321.
by rekoil 3y ago
> Some European houses even have a few 3-phase 380V outlets for heavy duty equipment, which would be exceedingly rare in the US. My European 50m² apartment has two.
322.
by rekoil 3y ago
> A lot of dev companies force their employees to use bacbooks in part as a result of their locked down practices and the only way to actually compile and test for "everything", because of how much easier it is to cross compile
323.
by rekoil 3y ago
Why would consumers ever demand it? 99% of customers don't understand anything about the TCP/IP stack...
324.
by rekoil 3y ago
Yeah I meant in general. Of course I know there are use cases for NAT that are valid regardless of IP version in use.
325.
by rekoil 3y ago
Haha, happens to us all. You're owning up to it at least!
326.
by rekoil 3y ago
> I am not a network engineer, but I believe it would have been far easier to make the two versions interoperable. And what do you base this belief on? Fact is you'd run into exactly the same problems as with IPv6. Sure, network-ena
327.
by rekoil 3y ago
The article was written over 10 years ago, things have probably changed a bit since then.
328.
by rekoil 3y ago
Yes. And we are abandoning NAT, we're just not abandoning firewalls.
329.
by rekoil 3y ago
Is it really that surprising? Here in Sweden many ISPs have begun charging for being assigned a public IPv4 address. I'm sure since it's happening here now it's probably been happening in the US for a long time. If IPv6 actua
330.
by rekoil 3y ago
The world is moving away from the AMD64 architecture fast, and Apple Silicon M-series chips are the high end of the current state of the art in ARM chips. If Arch Linux is ever to adopt ARM, working with Asahi would have been a smart move.

More ›