terom

12 ms·

91.
by terom 4y ago
Swallowing an hour or two of pre-scheduled downtime can be worth it if you can significantly reduce the complexity and risks associated with a migration, and get it over and done with sooner. Particularly if you're already hurting from
92.
by terom 4y ago
A 1km reel of unsheathed 9/125um single fiber strand would last maybe about one minute during installation before it snapped.
93.
by terom 4y ago
TODO: use commit-confirm for automated rollbacks Sounds like a good idea!
94.
by terom 4y ago
That alone will not prevent connections to port 22 on the public IP: the 1:1 non-port-based NAT means that any incoming packets to the public IP will show up at your instance with the private IP as their destination adderess. The TCP/I
95.
by terom 4y ago
Agreed, it shouldn't be unreasonable to expect everyone to learn Mandarin Chinese, or perhaps Spanish? [0] https://en.wikipedia.org/wiki/List_of_languages_by_number_of...
96.
by terom 4y ago
https://youtu.be/rRbY3TMUcgQ 2013 and still totally relevant Outlaw Techno Psychobitch FTW
97.
by terom 4y ago
My parents had their car parked right behind a caravan with a bike rack on the back - they didn't notice anything when driving off the ship, and so it was kinda too late to do anything about it by the time they noticed the impact damag
98.
by terom 4y ago
Does that mean that you leak it out over DNS / Google search for autocomplete?
99.
by terom 4y ago
AFAIK Ola Melzig (the m-m-pr.com guy) is off working on the US version of the song contest [0], and there isn't any tech diary for this year - which is sad :( There's a similar tech blog for last year [1], but it's sorely mis
100.
by terom 4y ago
$40k bounty for complete read access to any customer database using the "public" networking access. Caused by a bad regexp in the authentication mechanism acting as the first security layer, and lack of network-level inter-tenant
101.
by terom 4y ago
4 billion databases and 10k connections - I sense a problem :D And I don't think even pgbouncer would help.
102.
by terom 4y ago
It was faulty in the sense of allowing it to be executed with incorrect human inputs, and in such a manner that there was no recovery process in place for what happened. Lesson learned is not have any semi-automated script dependent on huma
103.
by terom 4y ago
The list of affected data that was wiped out by the compliance delete and now requires recovery also includes the metadata in their orchestration system, and what sounds like other multi-tenant data stores. It's not just restoring a si
104.
by terom 4y ago
Please take the 500 user minimum license and $42k/year cost into account. https://www.atlassian.com/licensing/data-center#data-center-...
105.
by terom 5y ago
The standard crypto exit strategy
106.
by terom 5y ago
PCB design is unfortunately a confusing mix of metric and imperial measurements, and mils are a very common measurement in the field.
107.
by terom 5y ago
Automation is not only about saving time, it's also about guaranteeing consistency and quality.
108.
by terom 5y ago
Depending on what exactly you mean with multiple datacenters, make sure you take a look at the pictures of their DC sites - the DCs in one location may be right next to eachother. Like having your servers in SBG2 and backups in SBG1. You wo
109.
by terom 5y ago
Breaking the S3 durability guarantees badly enough to get press attention would be a critical reputational hit, with the consequences going far beyond just the contractual SLA compensation for the customers. It would still heal with time, t
110.
by terom 5y ago
:+1: for the effort to document this, and coordinating the disclosure with the vendors. This mainly talks about rate-limiting bypass/DoS, but if XFF is also used for audit trail logging of IP addresses and/or IP-based access lists
111.
by terom 5y ago
I would add also PCBs for hardware prototyping. Ordering custom PCBs is ridiculously cheap and easy now.
112.
by terom 5y ago
Required reading for all of the "I could code up Twitter in a weekend" -types. The long listen queue -> multiple queued up retries feedback loop is a classic: https://datatracker.ietf.org/doc/html/rfc8
113.
by terom 5y ago
That sounds like you would be able to exploit the bug... does it happen to use a libc that implements %n? If so, just include a payload in the title that fixes the bug by patching the code :)
114.
by terom 5y ago
But this thread is about companyB.com blocking incoming email delivery from companyA.com :D You need to involve legal.com.
115.
by terom 5y ago
> I don't think he has anything to do with the actual political body responsible for interpretating the Finnish constitution [4] - he's certainly not listed as a member. The term "anything" is not quite accurate, base
116.
by terom 5y ago
> What is worse, the constitution of Finland is currently interpreted by a former board member of Finnish Communist party, one Dr. Martin Scheisse. So everything goes, Soviet-Style mock lawsuits of MPs and China-Style vaccination passpor
117.
by terom 5y ago
This was one of the interesting details in the analysis: > however, we note that OpenBSD is not exploitable, because its kernel refuses to execve() a program if argc is 0.
118.
by terom 5y ago
Are these documented YAML 1.2 JSON incompatibilities listed / linked to somewhere? I assume these are something related to non-ascii string encoding / escapes?
119.
by terom 5y ago
https://bugzilla.mozilla.org/show_bug.cgi?id=1749908#c19 current info is that it's not just telemetry that can trigger this HTTP/3 bug, it just happens to be the first/most common service that users' bro
120.
by terom 5y ago
https://bugzilla.mozilla.org/show_bug.cgi?id=1749908#c21 telemetry is not the only service affected, it's advisable to disable http3 entirely as a workaround for now

More ›