winstonwinston

8 ms·

91.
by winstonwinston 8mo ago
Yes, though do all of these wifi devices actually have a formal assurance (as in written specification) of network L2/L3 isolation between virtual APs? I have some of those wifi APs that do not even provide any sort of isolation besid
92.
by winstonwinston 8mo ago
> Now imagine doing this with your own server I can imagine it would be very similar because in both cases you’ve got your own Dedicated IP, which is only your responsibility in terms of reputation and problem solving. If you instead use
93.
by winstonwinston 8mo ago
To me it implies it is designed to be used local, instead of an afterthought feature.
94.
by winstonwinston 8mo ago
I published AAAA records for my MX hostnames a few years ago and so far only gmail.com is sending mails via IPv6, which is disappointing.
95.
by winstonwinston 8mo ago
Not really, Intel Celeron/Pentium/Atom (apollo lake) that was made in the last decade does not have AVX. These CPUs were very popular for low-cost, low-tdp quad-core machines such as Intel NUC mini PC. Edit. Furthermore, i think t
96.
by winstonwinston 8mo ago
The title is misleading. It would be justified if it leaked over network or outside of home directory. If file history features are a privacy threat then it should be disabled.
97.
by winstonwinston 8mo ago
> However, because AI was used it failed successfully.
98.
by winstonwinston 9mo ago
Well, yes. But autonomous is acting in accordance with one's duty (a law) rather than one's desires.
99.
by winstonwinston 9mo ago
The article does not explain in detail how all this works. But educated guess is that if a baseband SoC provides this information, that's it. The phone operating system (iOS, Android) does not get a chance to decide what to do, since b
100.
by winstonwinston 9mo ago
It would be interesting if chromium based browsers could finally enable system level decoding of DD AC3 and DDP E-AC3.
101.
by winstonwinston 9mo ago
Here in Serbia the gov uses “ConsentID” for online identity management. ConsentID appears to be a product of AET Europe B.V. It’s a Dutch company? So you already got an alternative platform to “DigiD”.
102.
by winstonwinston 9mo ago
If you are looking for serverless compute (aws lambda, cf workers), I know of Scaleway in europe.
103.
by winstonwinston 9mo ago
Technically it is possible to configure butlocker using passphrase instead of a TPM. It is not easy though. It is configured via GPO. However it is not a local account password. It is a separate passphrase which you need to provide early in
104.
by winstonwinston 9mo ago
The system handles these changes for the user automatically. The disk key is encrypted by user password, when user changes the password, the system completes disk key rollover automatically. Which means it will decrypt key with old password
105.
by winstonwinston 9mo ago
It works for macOS. Filevault key is encrypted by user password. User login screen is shown early in boot process, so that Filevault is able to decrypt data and continue boot process. It sure works fine for a about a decade. No TPM nonsense
106.
by winstonwinston 9mo ago
> NAT66 doesn't add much in the way of security here, because the external address is fully routable and maps 1:1 to the internal address. You are once again fully dependent on a correctly configured firewall. When using the statefu
107.
by winstonwinston 9mo ago
The race to the bottom of software quality accelerates using AI to generate software. Based on my experience using Claude for software development.
108.
by winstonwinston 9mo ago
That is how it works if you have Messages sync enabled. Other MFAs are also synced on Apple devices: TOTP and Passkeys are synced via iCloud Keychain to all iPhones and Macs using the same iCloud Keychain account. I believe google synced T
109.
by winstonwinston 9mo ago
If you have a localhost server that uses a client input to execute code without authentication, that’s a local code execution vulnerability at the very least. It becomes a RCE when you find a way to reach local server over the wire, such as
110.
by winstonwinston 9mo ago
Sometimes the WebDAV client is to blame, especially clients provided by the OS itself, awful performance. Nowdays i just use (encrypted) SMB over the internet, performance is great and it works on all major systems without additional softwa
111.
by winstonwinston 10mo ago
> It should be no surprise that even the SPF-DKIM-DMARC trinity is not actually enough to avoid bounces and disappearances That is the main takeaway. Unauthenticated mail is guaranteed to cause delivery issues to gmail and then authentic
112.
by winstonwinston 10mo ago
What is unyielding fidelity? noun. A steadfastness in loyalty and support, characterized by a firm and unwavering devotion to a cause, principle, or person, demonstrating exceptional persistence and reliability despite obstacles or challeng
113.
by winstonwinston 10mo ago
> Chromium-based browsers violate the HSTS spec and allow bypass. If you were able to bypass HSTS using google chrome, that sounds like a bug.
114.
by winstonwinston 10mo ago
Press X to doubt. I also use 150$ NUC for over a decade at home. At first it was ext4 then xfs, without ECC memory.. It looks to me, and i could be wrong, that many “homelabbers” upgraded from hoarding dvds to hoarding docker containers or
115.
by winstonwinston 10mo ago
When vulnerability description says “unauthenticated exploit” that means that you can exploit without being required to authenticate first. It means it just works even with authentication being required on the server. When it says “authenti
116.
by winstonwinston 10mo ago
It is more scary that many (most) websites now use SPA frameworks that randomly crash itself, cannot even load on a iPad with 2GB of RAM or use 100% CPU constantly.
117.
by winstonwinston 10mo ago
It kind of is relevant, Python seems to be a go-to language for “hacking”, isn’t it? When you look at computer or software vulnerability POCs, it is usually Python.
118.
by winstonwinston 10mo ago
That’s true for all accounts that i’ve been using (Google, Apple, Microsoft). Passkey generated on a device can only change login flow for this one specific device. If you don’t synchronize passkey to other devices or if you do not generate
119.
by winstonwinston 11mo ago
Exactly. Netflix is doing a total opposite of HBO content. Also HBO has been great at localization for european regions (subs, local content) unlike Netflix which cannot be bothered to even make subtitles for markets they sell to. IMO,Netfl
120.
by winstonwinston 11mo ago
> Serbia: Has Serbian infrastructure been tested by a sustained Russian cyberattack? There is Microsoft software development center in Belgrade (for 25 years). I heard they moved Azure development team to Belgrade Hub recently. Does that

More ›