ti_ranger

10 ms·

31.
by ti_ranger 7y ago
> Productivity-wise, MFA will work better than USB tokens - I know a bunch of people who regularly forget their work smartcard pass, I don't know many people that forget their mobile phone. (Your terminology is weird. What do you me
32.
by ti_ranger 7y ago
To add to my previous answer: > While AWS has ruffled a bunch of feathers with their Elasticsearch and Kafka managed offerings which can be easily construed as attempts to steam roll the respective open source-first entities, I am actual
33.
by ti_ranger 7y ago
> I am quite surprised that its Azure that has shown creativity here while AWS and Google have limited themselves to offering marketplace AMIs/images at ridiculous markups. Are you sure that is accurate for AWS? https://d
34.
by ti_ranger 7y ago
> You can still set 1.1.1.1 as your DNS resolve in your DHCP server if you want to trust your ISP. It's not that I necessarily trust my ISP, I don't want to be forced to also trust Cloudflare (both for privacy and availabilit
35.
by ti_ranger 7y ago
> There's also no trust with ISPs. They've already all lobbied at the Congressional level to legally sell our data. Yes, for you Americans. Please, go fix your politicians, rather than inflicting technical "solutions"
36.
by ti_ranger 7y ago
> DoH is a vendor-neutral protocol. But there are still gaps regarding discovery of DoH servers. > DoH is simply DNS transmitted over a secure encrypted medium, whereas existing DNS is transmitted over an insecure unencrypted medium.
37.
by ti_ranger 7y ago
> The Cloudflare DNS servers you connect to are in the EU and are subject to EU regulation just like your ISP. In my (non-EU) country, ISPs are subject to relatively strict regulations, and Cloudflare doesn't fall under those regula
38.
by ti_ranger 7y ago
> I reached out to Mozilla, and they've confirmed that DoH is being enabled by default only for installations inside US. How do they know? What is the likelihood of them getting it wrong? What protections do they have in place for t
39.
by ti_ranger 7y ago
The article title, "Dear Email Industry, We’ve Got a GDPR Problem", implies that. Either you do think email marketing comprises the entire industry, or the article title (and HN submission) are (or give the impression of) clickb
40.
by ti_ranger 7y ago
> They can, it just takes extra steps. For 99% of users, that means they can't. Luckily for them, they probably aren't allowed to use Firefox anyway, and are stuck using Edge or whatever, and the local MCSE will use this as ano
41.
by ti_ranger 7y ago
> But if they do DPI, it will be resolved once ESNI starts being deployed. What if ISPs block requests with eSNI for all users, in order to be able to remain compliant with legal intercept legislation (e.g. warrant for suspected child po
42.
by ti_ranger 7y ago
My ISP is subject to specific regulations for licensed network providers, which Cloudflare isn't. Thus, Cloudflare is the problematic intermediary.
43.
by ti_ranger 7y ago
Fastest isn't necessarily best. My ISPs caching DNS, and any caching DNS running on IP addresses belonging/advertised by my ISP by BGP to various CDNs, are the best possible responses. I don't care if the p99 DNS response f
44.
by ti_ranger 7y ago
> What are the arguments against eSNI? Institutions providing internet access, but with an obligation or operational requirement to block certain kinds of content (e.g. insufficient network capacity on the free WiFi at a hospital to allo
45.
by ti_ranger 7y ago
> Then it would be easier for an ISP to block encrypted DNS (by port number). It is better to masquerade everything as normal HTTPS to make blocking more difficult. For most people, if you can't trust your ISP, you have bigger probl
46.
by ti_ranger 7y ago
> The only motivation your ISP has for logging this is making money; if getting the information is too tedious and expensive why would they bother? I used to work at an ISP. We configured (wrote policy language for) our DPI platforms to
47.
by ti_ranger 7y ago
> To mitigate this risk, our partners are contractually bound to adhere to this policy. You seem to think that: 1)No company in the history of the world, has ever violated a contract? 2)No government has ever forced a company to give u
48.
by ti_ranger 7y ago
> In followup, turns out they didn't even lose data as claimed. Link?
49.
by ti_ranger 7y ago
> All of S3 has, but that’s because S3 had a single choke point in a single region for a long time. The only S3 event here was limited to us-east-1: https://aws.amazon.com/premiumsupport/technology/pes/ S
50.
by ti_ranger 7y ago
> Back when I worked there, the AWS status board was (and probably still is) terrible b/c Service teams owned that communication channel, not AWS Support. That really ought to have been changed. It has. > Service teams don't
51.
by ti_ranger 7y ago
> We make software deployments constantly across the network and have automated systems to run test suites and a procedure for deploying progressively to prevent incidents. Good. > Unfortunately, these WAF rules were deployed globally
52.
by ti_ranger 7y ago
From the article: > AWS has the most granular reporting, as it shows every service in every region. If an incident occurs that impacts three services, all three of those services would light up red. If those were unavailable for one hour
53.
by ti_ranger 7y ago
>> Here are the S3 numbers: https://aws.amazon.com/s3/sla/ > 99.9% (single-region) There doesn't seem to be an SLA on S3-cross-region-replication configurations, but I am not aware of a multi-region
54.
by ti_ranger 7y ago
>> You could very easily reach 100 GByte/s read which no network will match. > High end networking gear already has higher throughput: 100GB/s > 200Gbps You would need 4x 200Gbps ports to reach 100GB/s, so 2x MCX6
55.
by ti_ranger 7y ago
You mean the link this thread is about?
56.
by ti_ranger 7y ago
"Building a high performing home NAS" "I was averaging 60-113mbps depending on the size of files being moved. This was a successful build in my mind! After selling my QNAP NAS, I came out ahead on my expenses for the build.&q
57.
by ti_ranger 7y ago
> I heard https://nvd.nist.gov/vuln/detail/CVE-2019-1804 is Cisco's ninth backdoor so far this year. Also the 9th they have fixed. > Not ninth security problem total, ninth backdoor. The ninth security
58.
by ti_ranger 8y ago
> But you have to live under the wing of your distro mantainers, instead of installing whatever you want from any third party. Isn't Linux supposed to be about freedom? You don't. Yes, but if you don't take advantage of th
59.
by ti_ranger 8y ago
> because then you have to spend 40 minutes trying to install all the dependencies and building the package from source, instead of the 3 minutes it would have taken to install an .exe on Windows. No, you take 2 minutes to install it usi
60.
by ti_ranger 8y ago
> to use an application the distro didn't deem worthy of inclusion in their repo. How did you come to this conclusion? Did you request the package be included in the distro you use? If so, and it wasn't provided, provide the bu

More ›