News for hackers. Stuff that matters.

BehindTheMath

Re:We halved DNS build delay and cut memory use by 85% on Tuesday November 03, 2026 @07:15AM (#50351047)
At least it's not 4.
Re:The Internet Is No Longer a Safe Haven on Sunday November 16, 2025 @03:00PM (#45947942)
You don't need mTLS for that. Just block all IPs beside for Cloudflare's ranges.
I haven't used iodine, but this seems simpler. Iodine wraps requests with actual DNS requests. In this case that wasn't needed, because port 53 wasn't filtered at all. So all they needed was a simple proxy on port 53.
Re:Open IP Camera Firmware on Monday August 04, 2025 @02:06PM (#44789441)
What's wrong with Amcrest IP cameras?
Re:I Use Zip Bombs to Protect My Server on Wednesday April 30, 2025 @02:04PM (#43848764)
aria-hidden="true" should take care of that.
Re:I Use Zip Bombs to Protect My Server on Wednesday April 30, 2025 @08:54AM (#43844530)
Check out Modsecurity WAF and CoreRuleSet.
Doesn't that mean that you're charging extra from those that don't care about updates to subsidize them for those that do?
Re:Ask HN: Why buy domains and 301 redirect them to me? on Sunday January 26, 2025 @05:35PM (#42834917)
Can't you check the Referer?
It's linked in the post.
Re:It is hard to recommend Google Cloud on Sunday September 22, 2024 @08:03AM (#41616469)
Why not Cloud Domains?
Re:The Origins of Yiddish (2014) on Friday June 28, 2024 @06:52PM (#40826180)
Nearly all Israeli Haredi Jews speak Hebrew. For most, it's their primary language. Most do not speak Yiddish.
Isn't the point of salting to prevent dictionary attacks? That's still auth 101.
Re:Ask HN: Looking for an Alternative to Stripe on Wednesday September 06, 2023 @01:16AM (#37401565)
The BIN is not covered by PCI. There's no reason they can't provide the BIN for every card.
Re:Alphabet selling Google Domains assets to Squarespace on Thursday June 15, 2023 @10:01PM (#36350023)
GCP has Cloud Domains. It's unclear to me what the future of that is.
Re:I gave commit rights to someone I didn't know on Tuesday May 30, 2023 @01:37AM (#36121470)
I maintained the pjax library at one point. This is what the author posted at the time:

https://twitter.com/MoOx/status/955903710617620482?t=BvPIWQ-...