Viewing profile — mmmooo

in case you didn't know neato is suspending operations and closing up shop

they mention servers, so possibly not jbods, but R740xd2 (or newer R760xd2). The former are 26x3.5" so would match what they describe.

yeah exactly, had to go into "installer mode" and configure the CT that's on a secondary powerwall, so it wouldn't count that value as part of the generation (forget the exact cryp…

from the looks of it, his CTs are mis-reporting/double counting. A very common problem with tesla installs. My solar roof had the same issue initially, and electricians really thou…

can use $RANDOM to get more entropy/avoid collisions, though as you said, better not to use files at all.

interestingly, when the psuedo 'irc' connection is created, the user's ip address looks to be intended to be the source address..but because someone forgot that there's an akamai p…

It's not unheard of for the fbi to operate (and pay for) the infrastructure to facilitate and even promote piracy. See "operation bandwidth" where they essentially did just that fo…

Sooner or later I'm going to need to know the name of the company (unless they want to hire me sight unseen). What stops me from circumventing them then? I think this is a ridiculo…

So ~650M daily active users..4PB of data warehouse created each day, that means ~7MB of new data on each active user per day. Given that its data warehouse, I'm going to guess its …

This sounds like arp cache. And can be "fixed" by arping (forced arp responses without a who has)

nice catch, I definitely think that would be the nail in this coffin.

Just wrote something very similar, but more targeting development sandboxes. host runs a script that uses rubydns. a zone cut to the host for dev.domain.com. rubydns then uses dock…

I wasn't really stating that assumption, and I agree, many will convert, but I was simply referring to what they are 'betting with'. Yes that's the most they can lose (ignoring tha…

definitely a fair point, though personally, based on absolutely nothing, I don't think it is likely that 'those that login via facebook/google' have a drastically different behavio…

That's a pretty bold move, given over 100k people a day/800k a month use the facebook auth alone[1]. and though looks like its on a bit of a decline. Maybe losing 100k users a day …

Though I completely agree with the intention of your point, the same sort of logic can be used to justify all sorts of dubious "three letter" activity. By that same logic, are you …

Anyone care to guesstimate how many assassination plots could have been prevented if just read the assailants public twitter feed in which he or she outlined, in plain english, his…

Yep, and/or not back-ported.

well redhat back ported it to their 2.6.x kernels, which, one could consider, can cause a giant regression due to a minor kernel patch (assuming you are using swappiness=0). As sai…

Some of it must have required at least some level of code review (e.g. (MACFileIO.cpp, Line 209)). Even so, between the review, and the writeup, etc, if the total 'billed hours' is…

> This report is the result of a paid 10-hour security audit In just 10 hours? If really so color me impressed. I don't think I've been so productive in 10 hours, ever.

firefox doesn't allow cross domain fonts w/o allow-origin

its more about zero after trim support (dzat), and sounds like they maybe use ssd's that don't support it, and are handling it by zeroing the block device on create instead of wipe…

yep, sounded like they shared switches between public and iscsi lans, or worse.

iSCSI san, so attached via ethernet or similar, taking network devices offline would take san offline. The rest is pure magic.