tiberious726

9 ms·

91.
by tiberious726 2y ago
The candle that burns twice as bright lasts half as long. The converse is just as true of tungsten filaments as it is of candles. I know this is a common pop-history thing to cite on the Internet, but I would think hackernews would understa
92.
by tiberious726 2y ago
"If they found a zero day in these application whole Internet will go up in flames." Don't move the goalposts. I'm certainly not saying that nginx is insecure. I'm saying that if you think any piece of software writ
93.
by tiberious726 2y ago
I mean... 10 years of not being able to compete with companies subsided with a world powers national treasury isn't really saying much of anything
94.
by tiberious726 2y ago
As I recall, there wasn't a single thing in the leaks that wasn't already widely known in security circles. Hell, a few months before them I had IBM in my offices proudly telling me that they were the suppliers for the Utah datace
95.
by tiberious726 2y ago
And how would they tell anyone not right next to them what they thought? Word of mouth certainly isn't an answer, ever played telephone?
96.
by tiberious726 2y ago
The illiterate weren't able to communicate outside of their immediate vicinity. They simply weren't part of the conversation
97.
by tiberious726 2y ago
What planet are you on? Nginx had a 0 day as recently as April 2022 https://www.accuknox.com/blog/nginxday-2022-nginx-ldap-zero-... This happens _all_ _the_ _time_
98.
by tiberious726 2y ago
It's not defeatist, it's called defense in depth
99.
by tiberious726 2y ago
This is very much so sticking your head in the sand. Some attacks are sold to highest bidder, others are deployed wide and fast. Some of us are responsible for securing high-sensitivity systems where such a shoot from the hip and trust ever
100.
by tiberious726 2y ago
Don't most isps check the source address before relaying traffic nowadays? I know at least one of mine started a few years ago (and we had no idea we were asymmetrically routing our traffic till then...)
101.
by tiberious726 2y ago
But the SIM card would need to from the particular ISP you are trying to block, otherwise you would be coming out of a different isps cgnat range, no?
102.
by tiberious726 2y ago
Yeah exactly, try running an esp VPN on a different port and see how well that works.
103.
by tiberious726 2y ago
Your country is a bad global citizen. If they started taking action against the groups trying to break into my systems every minute of every day then I wouldn't need to block the entire jurisdiction. Geoblocking all sanctioned countrie
104.
by tiberious726 2y ago
Don't be ridiculous. The string is 'thisisunsafe' just type it when the hsts whining page has focus, no text box.
105.
by tiberious726 2y ago
The primary value I can see in it is extending something similar to w|x protection to JITs and interpretors. The article does say that it was originally for Chrome
106.
by tiberious726 2y ago
Oh wow... That's pretty nuts. I guess the reason is to make it harder for people to lock themselves out of all their servers if OSCP or whatever is being used to distribute the CRL is down.
107.
by tiberious726 2y ago
Why is this worse? Voltage step downs are cheap and not too hot in this day and age. I'm all for simplifying power distribution in my systems
108.
by tiberious726 2y ago
Eh, it's not just home/small office. Their proliant servers took a pretty big nosedive around Gen 9 or so. I'm sure they still have some nice specialized industrial equipment, but their general purpose computers, even on the
109.
by tiberious726 2y ago
I think they just wanted the fan replaced....
110.
by tiberious726 2y ago
There are like three operating systems in common use. An attacker being familiar with the one you use certainly isn't a "Hollywood level threat scenarios". Buying the same model laptop and swapping it with your targets is an
111.
by tiberious726 2y ago
So I get my hands on your laptop for a few minutes, there should be nothing you can do to impede me from doing whatever I want to it? TPMs are awesome of you use them correctly, it's like having a yubikey built into your computer
112.
by tiberious726 2y ago
Moneysphere lets you do this with tsigs on gpg keys. I find the web of trust marginally less painful than X509
113.
by tiberious726 2y ago
Setting up regular publishing of CRLs is just part of setting up a CA. Is there some extra complexity with ssh here, or are you (rightfully) just complaining about what a mess CRLs are? Fun fact: it was just a few months ago that Heimdall K
114.
by tiberious726 2y ago
https://ofac.treasury.gov/sanctions-programs-and-country-inf...
115.
by tiberious726 2y ago
No. It's just not safe to try to skirt international sanctions.
116.
by tiberious726 2y ago
Note that these are sanctioned countries
117.
by tiberious726 2y ago
You mean this? https://en.m.wikipedia.org/wiki/IPv6#IPv4-mapped_IPv6_addres...
118.
by tiberious726 2y ago
So robbery? If you want it, you'll take it
119.
by tiberious726 2y ago
The author kept calling it a security problem. Maybe the "babble" contained information there user wasn't supposed to have access to? I didn't know how else to it would be a security problem, unless they mean in the vacu
120.
by tiberious726 2y ago
Dupe of https://news.ycombinator.com/item?id=40451754

More ›