yabones

22 ms·

301.
by yabones 4y ago
Right, but 641 wasn't about the integrity of the data, it was about the confidentiality. They had a big-ass fibre splitter intercepting the firehose of the internet, and presumably running protocol analysis on "their" copy of
302.
by yabones 4y ago
Windows (in a domain environment) sends a Kerberos token for network auth which is generated on sign on and signed by a domain controller (authentication server). When the user authenticates to a network service, the token is sent to the se
303.
by yabones 4y ago
We've successfully subverted and revolutionized the global centralization of financial control by... concentrating wealth and power... Wait...
304.
by yabones 4y ago
It's honestly a fantastic case for incremental improvements over time. There's practically no single part on a modern B-52 that's original to the 1960s since everything has been overhauled and modernized decade by decade. Eve
305.
by yabones 4y ago
This is tragic news. In the future they will point to this as the pivotal moment that lead to the downfall of my career, relationships, financial security, etc. Is there a 12 step program for infrastructure maintenance survival horror games
306.
by yabones 4y ago
I absolutely loved expresscard. So many crazy projects from the last decade wouldn't have been possible without it. I had an "eGPU" on a laptop back in 2012 by hooking up a riser card to an expresscard slot [1]. The image qua
307.
by yabones 4y ago
Well, the problem was never technological to start with. The problem with supersonic transports was and will always be economic. There's a reason that there were only two SSTs in the 20th century instead of the five or six that were pl
308.
by yabones 4y ago
Well, looks like it's the end of the line for my 1st gen SE. It's been a good run. I'll miss you, little guy. Looks like my other options for a small phone are 12/13 mini or possibly the 2nd/3rd gen SE. But not near
309.
by yabones 4y ago
That does make sense... Is there any estimation for how much gold _would_ be required to for every country on the planet to have a gold-backed currency?
310.
by yabones 4y ago
It's definitely less than the world's total GDP, considering that China and the USA are both at or above that. So, it would not be possible for every country to have a gold-backed currency without a major decline in wealth. https
311.
by yabones 4y ago
Few years ago, I needed a quick way to create Qemu VM's locally for testing some weird software configurations. So I made a script to pull Ubuntu cloud images and clone them into qcow2 disks, then create and register libvirt virtual ma
312.
by yabones 4y ago
I agree completely. After having the freedom to tailor my environment precisely to how I do my best work, going to an office feels entirely performative. It feels like doing a show and dance to make other people feel important rather than i
313.
by yabones 4y ago
There exists a very strange group of people who practice "churning", something I don't fully understand. It involves opening as many accounts as possible to get sign-up bonuses, promotions, etc, then transferring balance back
314.
by yabones 4y ago
Not GP, but I did something similar for a few years with an old T60. I used the expresscard slot onboard to connect a quad-port server NIC using a pcie riser. For OS, I tried a couple different options including PFsense, VyOS, centos with S
315.
by yabones 4y ago
The problem with the single-port router-on-a-stick is that it effectively cuts your throughput in half. 10/100/1000 is full-duplex, but since your traffic is going both ways on the same port you get 1G total rather than 1G in each
316.
by yabones 4y ago
Wow, this is almost precisely the process for creating a new Air Canada account.
317.
by yabones 4y ago
EVs aren't going to save the world, but they will save the auto industry for a few years.
318.
by yabones 4y ago
A Kinzhal missile is not what people are referring to when they talk about "hypersonic missiles". They're usually referring to either maneuverable glide vehicles (lifting bodies for warheads that allow them to change course d
319.
by yabones 4y ago
For anybody curious, here's the current status of the CVEs on Ubuntu and Debian. tldr, patches haven't been released yet * https://ubuntu.com/security/CVE-2022-28693 * https://ubuntu.com/secur
320.
by yabones 4y ago
I like to have things well-lit, but only with indirect light and no "hot spots" that I find distracting. What works best for me: * North side of the house, so no direct sunlight and nice even shadows * Lots of lamps - currently ha
321.
by yabones 4y ago
Should be noted that the only version marked as vulnerable, "Bookworm", is the "testing" version that has not been officially released yet and has no "security policy" other than best-effort. Its purpose is for
322.
by yabones 4y ago
Maybe this will help clean up the debris from Russia's ASAT missile test last year?
323.
by yabones 4y ago
Hacked together a quick and dirty shell script to install on my boxes in a repeatable way... Hope this helps others that find themselves in this situation. https://gist.github.com/noahbailey/0260efa836b4ea67163cbfeef...
324.
by yabones 4y ago
This is a great case for why proxy pre-auth is so important. Doesn't matter how buggy and riddled with worms your app server is if nobody can get to it without a valid token. Sure, it introduces plenty of other problems, but it does re
325.
by yabones 4y ago
The discoverers of the vulnerability posted this write-up: https://www.volexity.com/blog/2022/06/02/zero-day-exploitati... This looks like a bad one, folks. Their advice is "turn off your confluence
326.
Confluence – Critical unauthenticated remote code execution vulnerability(confluence.atlassian.com)
14 points by yabones 4y ago|3 comments
327.
by yabones 4y ago
"He's an internet plumber. He wrestles the big greaseballs clogging up the tubes to make it go faster"
328.
by yabones 4y ago
To any NIDS newbies out there... Please don't deploy this in-line. Ever. You should always have your IDS out-of-band. Software like Snort is great for detecting threats, but if you block every "threat" you're going to ha
329.
by yabones 4y ago
I've set up Suricata (similar to snort in many ways) on AWS, and it was a pretty horrible process. Basically what you need to do is set up VPC-Mirroring on every single interface in that VPC and send all the traffic to an endpoint atta
330.
by yabones 4y ago
Are there any situations where it would be desirable to keep some payphones around? Potentially in some sort of natural disaster where cell towers get knocked down, or at least reduced in capacity to the point where it's no longer poss

More ›