w3ll_w3ll_w3ll

7 ms·

61.
Local DNS Resolution not working on Android 12(support.google.com)
3 points by w3ll_w3ll_w3ll 5y ago|1 comments
62.
by w3ll_w3ll_w3ll 5y ago
Also, using TLS with Perfect Forward Secrecy (all modern ciphers), it's not possible to just capture the traffic and dectypt it later. You have to know the private key and do MITM.
63.
by w3ll_w3ll_w3ll 5y ago
"Since the RIPE NCC began operations in 1992, we have been responsible for distributing IP addresses and AS Numbers in our service region. In November 2019, we exhausted our remaining IPv4 pool. This means that networks in Europe, the
64.
by w3ll_w3ll_w3ll 5y ago
The contract I have with my bank (Italy) states that in case of dispute they will refund the money immediately (end of the working day). Then they take some time to review the transaction and then they can take their money back if they thin
65.
by w3ll_w3ll_w3ll 5y ago
"When I bring this up, people sometimes respond by saying that these kinds of strikes are illegal in the US. This is a true and worthwhile bit of information, but insofar as it is meant to imply that the different legal environment is
66.
by w3ll_w3ll_w3ll 5y ago
Most of these laws were written in Europe when staff leasing from external agencies was legalized at the end of '90/early '00. They were meant to avoid what you describe. I don't know if they work well, but it's bet
67.
by w3ll_w3ll_w3ll 5y ago
Google pays work agencies (like Adecco) that then pay workers. The worker has a temporary employment contract with the agency, but reports directly to Google staff. The laws are meant to cover temporary staff hired by a work agency hired by
68.
by w3ll_w3ll_w3ll 5y ago
It's not just incompetence. Apart from costs, there are some strange limitation and very specific feature missing if you use Azure PaaS DBs with private endpoint enabled. It's like private access has been added as an afterthought
69.
by w3ll_w3ll_w3ll 5y ago
Let's encrypt decided for 3 month to force users to automate and avoid the burden of too much user support. They are a no-profit after all. I believe commercial CA are offering free certificates milted to 3 months for the same reasons,
70.
by w3ll_w3ll_w3ll 5y ago
Nice video!
71.
by w3ll_w3ll_w3ll 5y ago
NFC (EMV Mode) is partially encrypted and much more secure than magnetic stripe
72.
by w3ll_w3ll_w3ll 5y ago
"The magnetic stripe will start to disappear in 2024 from Mastercard payment cards in regions, such as Europe, where chip cards are already widely used. Banks in the U.S. will no longer be required to issue chip cards with a magnetic s
73.
Swiping left on magnetic stripes(mastercard.com)
176 points by w3ll_w3ll_w3ll 5y ago|310 comments
74.
by w3ll_w3ll_w3ll 5y ago
Do you have more information on how Germany deliberately borked the encryption ecosystem?
75.
by w3ll_w3ll_w3ll 5y ago
Yes it will be a long time until we are able to change this old habits. But you can put it another way: if someone commit am identity fraud using a picture of your ID, you can defend yourself showing that you were required by many different
76.
by w3ll_w3ll_w3ll 5y ago
Authentication and digital signatures (like for signing contracts) are usually kept separate on electronic cards. There are already standards for that.
77.
by w3ll_w3ll_w3ll 5y ago
Most newly issued identity cards in Europe work that way. They have a private key stored in the chip, that can be used to prove identity, without giving the ability to the other party to impersonate the citizen. Unfortunately most places st
78.
by w3ll_w3ll_w3ll 5y ago
In Italy the new ID card (issued from 2015 onwards) has NFC capabilities. It contains key attributes (including the picture) that can be read via NFC signed from governament PKI. Some information can be unlocked using a code printed on it,
79.
by w3ll_w3ll_w3ll 6y ago
I think in OP case the app is not phoning home. The data are still in his pc, but he would like to export it in another format. I don't think GDPR applies here, but I am not an expert.
80.
by w3ll_w3ll_w3ll 6y ago
Well, Enel has a strong presence in Italy, Spain and Latin America. It's actually the second largest power company in the world after China's state company. It was the first company to use smart meters in 2001. But yeah, you don&#
81.
by w3ll_w3ll_w3ll 6y ago
If the DNS query is done with DoT or DoH the server name is not exposed.
82.
by w3ll_w3ll_w3ll 6y ago
Never give up
83.
by w3ll_w3ll_w3ll 6y ago
Italian digital team has a similar website. https://designers.italia.it/ But I believe believe most Italian agencies or local governments (around 22,000) don't follow those guidelines yet. "all this stuff is outso
84.
by w3ll_w3ll_w3ll 6y ago
A trivial thing that would became a mess really fast on a complex website. A new subdomain for every different "website" is the clean solution in my opinion.
85.
by w3ll_w3ll_w3ll 6y ago
Not if the resolver is validating the tls certificate. That's the point of doh, make impossible to intercept dns query.
86.
by w3ll_w3ll_w3ll 6y ago
I don't think Microsft Edge embeds its own root store on Android.
87.
by w3ll_w3ll_w3ll 6y ago
Or they could pay workers with privileged access more.
88.
by w3ll_w3ll_w3ll 6y ago
Yes they allow debit, but the other party should acquire some sort of authorization from you, even if the requirements are not strong. The typical use case: you want to allow recurrent payment for your electric bill. You login in with your
89.
by w3ll_w3ll_w3ll 6y ago
This method is actually used by many countries, most of them in Africa, where thanks to MPESA and such the need of protection against SIM swapping is even higher, since your SIM is literally your bank account. https://www.wired.c
90.
by w3ll_w3ll_w3ll 6y ago
I'm afraid the solution cannot be simple, not only because the trust problem is not so simple, but because the nature of the problem is political, not technical. And so the solution must be political (CA/B forum, ballots, convolut

More ›