yabones

39 ms·

421.
by yabones 5y ago
Obviously, things have changed quite a bit in the three years since this was written. I'm curious what we now consider boring that was "exciting" then. First thing that comes to mind are the managed kubernetes services that w
422.
by yabones 5y ago
Put those devices on a separate subnet would be the easiest way. In order of technical complexity: * Buy a second router, plug it into your existing one, set the DHCP options to point to 1.1.1.2 * Reconfigure your existing router to add a s
423.
by yabones 5y ago
I’m sure there will be a cutout for “critical infrastructure” that includes IT, so they can continue working network and server guys like rented mules.
424.
by yabones 5y ago
While it's not good to ship outdated client libraries & software, it would be much worse to distribute an old OpenSSH release... Can anybody with a Windows 10/11 box check the version they supply? That, to me, would be a much
425.
by yabones 5y ago
Yes, absolutely true. The idea is that `ksh` is good enough , and the extra features of bash are extraneous or unnecessary, making it an add-on rather than a core feature. It's an interesting idea, and while I feel bash is absolutely
426.
by yabones 5y ago
Linux systems are made by dozens of disparate teams, and it shows. Every command has a different syntax - just think about how "help" could be -h, --help, -help, -? etc BSDs are very tightly integrated. The entire OS is very consi
427.
by yabones 5y ago
It's not that money is abundant, it's that debt is cheap.
428.
by yabones 5y ago
The rate might be higher, but the cluster effect is completely different. If you're in traffic, the only people you can "spread" a car accident to are the other cars around you. But with infectious disease, you have a chance
429.
by yabones 5y ago
The inconvenient reality of domain "ownership" is that you don't own anything at all. You rent it, and there's no control on increases or fees like other types of rent/lease. It's sort of like renting a car for
430.
by yabones 5y ago
I really don't agree with this hard-line stance on maintenance windows. The use of extreme examples doesn't really strengthen the argument. It really comes down to the cost of implementing "Super HA" for everything. If t
431.
by yabones 5y ago
Speak for yourself. I've happily been using an iPhone SE since 2016, and will probably keep it until iOS 15 is EoL. It turns out, I just haven't added any new use cases to my phone since around 2013.
432.
by yabones 5y ago
I'm coming at this from the perspective of Ontario, Canada. eHealth, as cumbersome and obtuse as it is, is unquestionably secure. It's not perfect, but it's good enough. We have the IPC ( https://www.ipc.on.ca/
433.
by yabones 5y ago
An important detail - this was a third party app, NOT an official government one. So, people were essentially uploading their PII to some guy's server and hoping for the best. This is what we all feared, and hoped wouldn't happe
434.
by yabones 5y ago
Indeed, there's more to it than that. I haven't gone in-depth, so this is my very pedestrian understanding... The very secretive spam filter has cut-outs for 'high value' accounts - this isn't really documented form
435.
by yabones 5y ago
My speculation: The exact same thing that happens with reddit accounts used for astroturfing... People will 'build up' a profile over the course of several months, reposting popular posts from months/years ago, etc. They&#x27
436.
by yabones 5y ago
Of course it's elasticsearch. Elastic did irreparable damage by paywalling authentication and TLS on a supposedly open source project. If you make security optional, you've created an insecure and unsafe product.
437.
by yabones 5y ago
It entirely depends on your threat model but if yours is similar to most people, holes that let anybody on your network hijack your system via `tcp.sys` RCE's might be a showstopper...
438.
by yabones 5y ago
Wow, that's incredible! I just went on their website and found the most adorable little electric pickup truck for only $2K https://www.alibaba.com/product-detail/4-wheel-electric-tric... If it weren't for the
439.
by yabones 5y ago
I've felt this as well. Before the pandemic, I lived in a small apartment in an up-and-coming part of my city. Downstairs was a very nice small grocery store, cafe, and central Asian food restaurant. I took the bus to work each day, an
440.
by yabones 5y ago
For full standards compliance, the teapot should be designed and implemented according to the ISO-3103:2019 specification. https://en.wikipedia.org/wiki/ISO_3103 https://www.iso.org/standard/73224.
441.
by yabones 5y ago
What makes it dangerous is that those requests aren't coming from a single source - it's a distributed denial of service attack. Anybody can push huge throughput from an XL cloud server with good networking, but it's just a
442.
OpenSSL 3.0(openssl.org)
150 points by yabones 5y ago|54 comments
443.
by yabones 5y ago
I've seen XML hex encoded before. That was from a Toshiba printer driver on win 7. This seems like the logical next step...
444.
by yabones 5y ago
> The vulnerable endpoints can be accessed by a non-administrator user or unauthenticated user if ‘Allow people to sign up to create their account’ is enabled. Only applies to public servers... Still should patch, but not as critical. h
445.
by yabones 5y ago
I'm sure the 'third world' is bracing for the ecological disaster this will create. Anybody with a device more than four years old will toss it right in the trash and buy something new. Sure, it will create lots of devices fo
446.
by yabones 5y ago
Cast iron pans are wonderful. I inherited one that was purchased originally in 1929. It's used every day or two to cook eggs for breakfast, and as I've found over the years butter is fantastic for keeping the seasoning in great sh
447.
by yabones 5y ago
Computer - Thinkpads with Linux or BSD flavours - enough to run web apps, and a capable SSH client. Phone - Nokia 225 (dumbphone) - enough to call 911 or my partner/mother/pizza shop. I'm keeping my iPhone SE, but it's e
448.
by yabones 5y ago
I'm going to assume that most 'killer robots' will be reasonably heavily armoured, so unless you have very powerful AP rounds the best approach will be to disable rather than destroy. They'll also likely be hardened agai
449.
by yabones 5y ago
I bought onetwoseven.one for the sole purpose of sending one silly email as "root@onetwoseven.one" to somebody. I'll probably get some real mileage out of it at some point.
450.
by yabones 5y ago
Very frequently. Way more than should be acceptable for the 19th most visited site on the net.

More ›