slasaus

14 ms·

91.
by slasaus 11y ago
And see this recent patch [1] from an Oracle developer to make PF SMP proof. It's under review. [1] http://marc.info/?t=143526332700004&r=1&w=2
92.
by slasaus 11y ago
See this follow-up as well "Ted Unangst: signify shortcomings": https://news.ycombinator.com/item?id=9721737
93.
The Bitcoin Consensus Red Herring(blog.conformal.com)
2 points by slasaus 11y ago|0 comments
94.
5 simple ways to troubleshoot using Strace(hokstad.com)
5 points by slasaus 11y ago|0 comments
95.
by slasaus 11y ago
It's really a shame that there's still no good way to revoke a certificate [0]. Mozilla has been discussing it for years [1] but an implementation or even a chosen direction is far from reality. [0] http://www.rfcreader
96.
by slasaus 11y ago
a little tweak for nginx https redirection* , use: > return 301 https://example.com$request_uri; instead of the rewrite. * http://wiki.nginx.org/Pitfalls#Server_Name
97.
Deleting secret data with public verifiability(blogs.ncl.ac.uk)
3 points by slasaus 11y ago|0 comments
98.
by slasaus 12y ago
I really like the support for tls in syslogd. Unfortunately it looks like it is not yet supported server-side. At least in current, syslog.conf(5) doesn't mention anything about specifying a private key.
99.
by slasaus 12y ago
I've recently found out about Diceware and the importance of a strong password [1][2]. Often users choose a really weak password to begin with. I've read [3] that if you have a strong password (like a 7 word Diceware password) eve
100.
by slasaus 12y ago
That is not true. OpenNTPD is a server as well. Just put the following line in your /etc/ntpd.conf: listen on * See ntpd.conf(5) for all options: http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-curr
101.
by slasaus 12y ago
From [1] I get that PHK decided not to use privilege separation because it's not portable enough. AFAIK that's one of the main differences between OpenNTPD and Ntimed. Well, that and precision of course. OpenNTPDs accuracy is &quo
102.
by slasaus 12y ago
for Single Page Apps it definitely is. Though I wonder if every website will end up as some sort of (single page) app.
103.
by slasaus 12y ago
"I've got nothing to hide" is a straw men. It's a fact that people who are being watched, or even who think they might be watched, behave different then those that think they are totally private [1]. So in order to disco
104.
by slasaus 12y ago
The business model of Facebook and Google is about getting to know as much as possible about you. Apple makes most money without your data.
105.
by slasaus 12y ago
Although µBlock might be a lot slimmer than AdBlock Plus, according to this article [1] it's comparable with Ghostery. Ofcours µBlock is open source where Ghostery is not and I personlly really like µBlock's philosophy [2] about t
106.
by slasaus 12y ago
Wow, that is cool! for others that are interested, see https://support.mozilla.org/en-US/kb/tracking-protection-fir...
107.
by slasaus 12y ago
About the deal with Google, that bothered me as well, fortunately it has expired last year and has not been renewed. Instead a deal with a lot more companies has been made, based on which part in the world you live in. For the US Mozilla ha
108.
by slasaus 12y ago
I'm afraid this is the Silicon Valley way of doing business. I believe it's what you get when dealing with VCs. Read more about that here: https://aralbalkan.com/notes/the-camera-panopticon/
109.
by slasaus 12y ago
Hence my argument about large scale fraud (only possible with electronics) vs. small scale fraud. Fraud with paper and ballot boxes is extremely hard to organize at large, because it would involve a couple of orders of magnitude more people
110.
by slasaus 12y ago
> Don't let the perfect be the enemy of the good. Also, don't replace a secure, well-tested and practically proven system that works (paper and a ballot box), with something that fosters large scale malice (electronic voting) i
111.
by slasaus 12y ago
It's funny that just today, before I found out about the glibc vulnerability, I reconsidered if I really want to upgrade my Ubuntu 10.04 mail and web servers to Ubuntu 14.04 LTS. I was triggered after reading some bad things about 14.0
112.
by slasaus 12y ago
"If an attacker has full control over your DNS" Shouldn't this be "over the CAs DNS resolver"? /edit well I guess if the attacker has control over your dns server, ofcours, but another vector is to spoof as the
113.
by slasaus 12y ago
The author is an OpenBSD developer talking about crypt(3) which supports bcrypt hashes: http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/... OpenBSD implemented bcrypt more than 17 years ago
114.
by slasaus 12y ago
TransIP in the Netherlands offers OpenBSD VPSs https://www.transip.eu/vps/operating-systems/
115.
[bcrypt] Determine the number of rounds for a fixed maximum amount of login time(npmjs.org)
2 points by slasaus 12y ago|0 comments
116.
by slasaus 12y ago
one of the first things I do on a new box is setting up /etc/aliases to send all mail to root to my e-mail address. about alerting, I use the simple (and old but has all you need) logsentry also sometimes called logcheck.
117.
by slasaus 12y ago
"Web developers trying to make their pages look exactly the same in "all browsers" may enjoy a browser monopoly since it reduces the effort, but I think that's the wrong way to do it; ... The idea of progressive enhancem
118.
by slasaus 12y ago
Make sure to checkout https://ffdevtools.uservoice.com if you have any suggestions for the firefox devtools dev team.
119.
Glenn Greenwald live tonight in Amsterdam(youtube.com)
1 points by slasaus 12y ago|0 comments
120.
by slasaus 13y ago
An interesting and related article is this one by Paul Bohm from 2011: http://paulbohm.com/articles/bitcoins-value-is-decentralizat... His conclusion: "Is there value in Bitcoin? Let me ask a counter question: Is

More ›