back
user profile
Bender
68,555karma·24,253submissions·June 16, 2015
about
Σ I am not for everyone. To ignore me in uBlock Origin, add to "My filters":
news.ycombinator.com##tr.athing.comtr:has(a.hnuser):has-text(/\bBender\b/)
- For HN usage questions see [1] for HN tips not my repo
- Suggested Firefox add-on to replace or restore inflammatory words and phrases: Foxreplace [2]
[1] - https://github.com/minimaxir/hacker-news-undocumented
[2] - https://addons.mozilla.org/en-US/firefox/addon/foxreplace/
(\_/)
(='.'=)
(")_(")recent activity (24,253 total)
comment
I've been using Redhat/CentOS as long as they have existed. I recently started converting all my VPS nodes to Alpine Linux for these reasons. I don't imagine that happening at work any…
comment
It could likely be carry-over from WWII. Many of the U.S. and German spy devices were engineered in small cylinders and then tucked away in corners of rooms. IIRC it had to do with improving the abi…
comment
I use it for my own sites, mostly for file uploading, forums, etc... We use them at work in simple cases where writing something in java or C would have been overkill. CGI will be around for a very …
comment
Gotta keep those hashcat farms in business :-)
comment
I agree. I used 4096 in the example just in case my great grandkids find this post. They will have Quantum implants.
comment
Does this prevent reproduction of the mosquitos, or of the disease? If mosquitos, will this have a negative impact on bats? My bats eat mosquitos and moths, but there are not many moths any more.
comment
Even SHA512 and bcrypt, totally uncrackable! /S
comment
You can have a GitHub specific ssh key. ssh-keygen -q -t rsa -b 4096 -N "passphrase" -C "mygithub@someaddress.org" -f ${HOME}/.ssh/.ghub
then in your ${HOME}/…
comment
My point is, this is not a technical issue. S3 is a fundamental design flaw and/or not an appropriate location for sensitive data and/or a PsyOp. They are teaching people to put sensitive …
comment
What numbers does your rig give using hashcat and your video card?
comment
They were being sarcastic.
comment
Is it possible that there isn't a climate problem? Perhaps we have served our purpose[1] and now the Earth is simply shedding us. [1] https://www.youtube.com/watch?v=rld0KDcan_w …
comment
15+ years ago, there were similar issues with people leaving directory indexing enabled with Apache. At least in those cases, people knew they were putting their data on a web server. And more often…
comment
Have you also tested on Vultr and Linode?
comment
I just have to put faith in two ladies and their cup.
comment
Ah, I was not aware it would be January. Then for now the targets would have to be specific DNS records.
comment
Out of curiosity, who put him in that position?
comment
I put up an extremely offensive (yet legal) image or video, then link to it from a conservative forum. I then log the date/time and calculate how long, if at all, my server remains online. If i…
comment
I don't know if LetsEncrypt would issue that, even if you control it. That would be a good exercise to validate if there is an "easy mode" for state sponsored fun. I've read that …
comment
That could certainly be useful in the follow-up investigation and forensics. Hopefully our attacker did not spin up those VM's using a burner card or stolen CC and proxies. There isn't anyt…
comment
This isn't specific to your question, but I have VM's that have 6 logical processors. I use taskset to set the affinity of all OS processes to logical proccesor 0. This doesn't work f…
comment
If you control the root DNS servers for .io, you can simply not answer the DNSSEC queries. Many resolvers will fail open. HSTS requires the site is HTTPS with a valid cert. If you own all .io, you c…
comment
For non-commercial folks, there are a couple of VPS providers that provide Anycast support. I personally have not used them, so I can not speak to how easy they have made it to configure. I agree wit…
comment
CNAME discussions in this article are specific to their site. In general, you can load balance just as well with A or CNAME, apex or sub-domain. It's only when you get into artificial technical…
comment
How do we make it more obvious to non technical people the difference between a DV cert and other certs, in a way they will completely understand? I understand what the browsers do today and I don…
comment
I would agree that it would not be scalable or fair to LetsEncrypt to police all of them. Would it be feasible to maybe just police the top 50 or top 100 financial institutions?
comment
Fair enough, that makes sense. I understand that there are about 17k certs with paypal.com in the name. Are there plans to try to prevent some of that in the future?
comment
Serious question. What does LetsEncrypt buy me that I could not get from having a knob in applications and browsers that lets me accept self signed certs? To be clear, the reason I am asking is that …
comment
I do not see any references to Thought Leader[1]. [1] https://www.youtube.com/watch?v=_ZBKX-6Gz6A …