Viewing profile — globie

D'oh!

We're talking about this line, right? >The precision of outages (at :29 and :44) matches a network-synchronized clock (NTP). I think this just correctly points out that if the trig…

When writing this inflammatory post, you seem to have forgot the bigger picture of the thread you are flaming. We're discussing whether it's right to take a second look from a secu…

I'm really surprised they do it at all. I always thought they'd be crazy to.

That's a good point. I suspect as the renewal period is shortened, scripts will attempt renewal faster and faster. I hope they don't go any shorter than a month. Let the user pick,…

Right you both are! I had no idea.

Like many others have pointed out, Apple is obsessed with avoiding antitrust scrutiny. A fun (edit: incorrect) example: they are fine owning the device you use to connect to their …

Were you running certbot multiple times per day? Looking at the relevant limit, "Consecutive Authorization Failures per Hostname per Account"[0], it looks like there's no way to hi…

Yep, the embedded video in the article really says it all. Proven Industries' wording here at at the very least ambiguous as to whether or not a shim that works on one lock will wo…

Here's a (very) small sample gathered from a search for "webrtc" on cve.org and picking high-severity CVEs affecting browsers: * CVE-2015-1260 * CVE-2022-4924 * CVE-2023-7010 * CVE…

I assume autoexec is referring to the plethora of WebRTC vulnerabilities which have affected browsers, messengers, and any other software which implements WebRTC for client use. It…

A "Fiduciary responsibility to shareholders" means exactly what I said: "legally bound to extract profit without these silly notions of empathy or trust". The only notions of empat…

I know, we're locking everything down behind WAFs and repeating captchas so only attested identities can get access in the end.

From the article it's sure starting to seem like people across the internet are just starting to realize what happens when you don't have just 3-4 search engines responsible for cr…

My bad, I forgot I'm a liquid. It's too late to edit, but s/po\w*/poured over/ anyway :)

>I don’t think people appreciate the degree to which information is siloed, intentionally and unintentionally, in the federal government. Thanks for that. Information can be comple…

Do you believe the disaggregation of those monoliths helps to put the "hypothesis to bed"? It sure seems like you were listing "constant litigation" over "records request" as count…

They only need to pay off or install a single employee to get total or near-total access. Consider this chart from 2013 showing when various tech companies were added to PRISM: htt…

>In the vast majority of cases, the US government at least, has to obtain a warrant to collect data on US citizens, so those two sets are not the same If only that were true[0][1][…

I... you're right. I was wondering why the world was only 9x9x9, there's 46k lines showing each block can have air, stone, grass, dirt, log, wood, leaves, or glass. I kind of like …

Without a doubt the most impressive thing I've seen with CSS. This immediately brought "A Single Div"[0] to mind, which stood as the coolest CSS demo I'd seen for... 11 years! This…

The people behind Cloudflare engineer this issue for profit, which is a very different motive than to "solve" the problem. The people most interested in doing away with the problem…

If you have a single server flooding spoofed traffic, it appears as a DDoS to the victim. It's at this point that the distinction between DoS/DDoS breaks down slightly. It is very …

Do you ever find that advocating for these tenets feels "weird" nowadays? As in, don't you know these publicly traded companies are legally bound to extract profit without these si…

This conclusion stems from that it is much easier to launch a DDoS from a single server w/ spoofed traffic than to use a botnet. If you have a single 10Gig server, you will likely …