w7

15 ms·

91.
by w7 5y ago
If this helps you understand, NAT and stateful firewalling are often the same code base. NAT is basically just a sub-feature, purely for translation, that is it. The NAT feature solves the problem of: - public ipv4 exhaustion You get
92.
by w7 5y ago
It's less of a "you're doing it wrong" or "you're not allowed to like the NAT" and a more complex "you've incorrectly attributed your protection to NAT"
93.
by w7 5y ago
Nothing new needs to be proposed. Nothing is being replaced. The current state of things is that whatever your edge device is provides actual security with stateful firewalling and translation with NAT, already. It's simple to understa
94.
by w7 5y ago
What I find common is people conflate NAT with stateful firewalling, and believe that if you lose NAT you lose all forms of edge/perimeter network security. They don't understand that you can still filter and prevent unwanted pack
95.
by w7 5y ago
We've had capability based security frameworks aka MAC (ex: AppArmor) in Linux since 1999 or earlier. Containers (which also existed long before docker) have been popularized for convenience, and virtualization would still be useful fo
96.
by w7 6y ago
Some form of GPU with modern display out is needed for some multi-monitor setups (mostly 4k), even if you don't do ML or gaming. Unfortunately there are also many motherboards out there that only support running one 4k monitor at 60 Hz
97.
by w7 6y ago
I wouldn't look at the 10900k trying to "save a buck" on the high end. Instead the 10850k which is, for most purposes, just a 100 MHz slower 10900k can be found on sale for 350$. Higher availability, and prices that meet or a
98.
by w7 6y ago
At the same time; not everyone became a blacksmith.
99.
by w7 6y ago
Is JSON a programming language then?
100.
by w7 6y ago
You can have network segments which do not use ethernet and therefor have no MAC addresses, but still use IP addressing and need to be routable. It doesn't make sense to tie the next-hop in a table to MAC addresses which are an impleme
101.
by w7 6y ago
With regards to DNS-01, only the temporary TXT record needs to be public. If you want everything to be internal you can run your own DNS server on your network and have all the actual A/AAAA/etc records there.
102.
by w7 6y ago
None of those actually. Mind you 4/5 of what's listed here is also functionally available on -nix, or straight up pales in comparison. Specifically looking at Storage Spaces and ReFS: can't protect boot media with it (can&#x2
103.
by w7 6y ago
"80% of the basic functionality" Is this a desktop functionality oriented post or something? Because there are things I find daily that can't be done with Windows Server, but come out of the box on most Linux distributions. M
104.
by w7 6y ago
Does it though? Using a VPN for access to internal infrastructure doesn't mean said internal infrastructure is insecure or authless itself. As in, defense in layers.
105.
by w7 6y ago
I'd honestly consider Golang "excitingly boring". Simple C-ish syntax that's relatively familiar to most programmers, write once and compile to/from anywhere without arcane flags, easy to understand and use concurre
106.
by w7 6y ago
Level playing field how? What's the US going to do, regulate other companies in foreign countries? Magically convince China to de-integrate its tech companies in the same way?
107.
by w7 6y ago
I think there is a profound difference between car companies, which produce a "dumb" item that's consumed, and "big tech" companies which have shown they can have a major cultural and political impact both domestica
108.
by w7 6y ago
My interpretation of this article is it's related to incognito mode. How is it circumventing a "decision of the user not to be tracked" when "private" modes usually explicitly state they can't/don't
109.
by w7 7y ago
There is no "fair" here. China routinely puts soft pressure on foreign companies for making statements that it dislikes. That will likely expand in the future as China's soft power grows. See anything Taiwan, Tibet, or Hong K
110.
by w7 7y ago
The problem is it's not a either/or situation. If China can spy on you, the US likely can as well with its likely greater resources.
111.
by w7 7y ago
How does proof that the USA did something affect or change the risk that Huawei devices can pose? That's literal whataboutism. The alternative providers aren't even USA owned, they're European. Discourse is going no-where bec
112.
by w7 7y ago
As far as I'm aware most of the US installed backdoors were via interception of the hardware en-route to its point of installation without the vendor's knowledge. Hardware being a direct product from Huawei doesn't by itself
113.
by w7 7y ago
> Is this not outrageous? That we're so intolerant of other kinds of economies that we must try and band and block so that people don't realise the disadvantages of our own system? If your system is so superior, let it compete
114.
by w7 7y ago
Just cables.
115.
by w7 7y ago
Some Dell enterprise switches actually used HDMI for stacking[0]. Image: https://kbimg.dell.com/library/KB/DELL_ORGANIZATIONAL_GROUPS... But it's not a common thing and I believe is outmoded. [0] https:&#x2F
116.
by w7 7y ago
For my personal projects I use Gitea (source code hosting) + Bazel (build system) + Drone.io (automated builds) + Harbor (container registry) + Keel (deployment to Kubernetes). At a glance of Gitlab's documentation it looks like these
117.
by w7 7y ago
That's not the install size. From the documentation there are multiple install options ranging in size so they just decided to package it all in one. "Minimal" install is like 400-500 MB iirc.
118.
by w7 7y ago
If you're mainly just looking for something with Docker preinstalled VMWare's PhotonOS[0] may be an option. It's a stripped down CentOS/RHEL based distro that's targeted at being a container host. I believe they&#x2
119.
by w7 7y ago
As of some recent Windows 10 build (edit: 1803 or insider 17063+), curl.exe (need to specify full executable name not just "curl", which is aliased to Invoke-WebRequest by default) is shipped by default as well. I believe it came
120.
by w7 7y ago
I don't think anything ever gives 100% security. I was simply talking about people thinking proof is needed for justification of the ban. Anyone using factory shipped firmware for the entire life cycle of a device is negligent. I don

More ›