JankySolutions
Re:ACME v2 and Wildcard Certificate Support is Live
on Tuesday March 13, 2018 @01:59PM (#16578182)
They are not the only CA that issues certificates for free. For example, AlwaysOnSSL[0] was on HN a few days ago[1], with some important differences (as pointed out in the HN comments)
Re:Dtube – A decentralized video platform using STEEM and IPFS
on Wednesday February 28, 2018 @05:22PM (#16487681)
wow, very cool.
Re:Dtube – A decentralized video platform using STEEM and IPFS
on Wednesday February 28, 2018 @01:33PM (#16485400)
Wow, nice domain. I wonder how much that cost
Breaking into iOS 11
Utorrent: various JSON-RPC issues resulting in RCE, information disclosure, etc.
Re:Facebook spamming users via their 2FA phone numbers
on Thursday February 15, 2018 @03:22PM (#16387264)
I'd be interested in seeing a specific law or case where that sort of thing was illegal. Lying by itself isn't illegal (in the United States at least, i dunno about elsewhere)
Re:Facebook spamming users via their 2FA phone numbers
on Wednesday February 14, 2018 @08:40PM (#16381277)
It's not legal? What part is illegal?
Re:SpaceX hits two milestones in plan for low-latency satellite broadband
on Wednesday February 14, 2018 @02:09PM (#16378383)
So what kind of latency should we expect from a satellite at that altitude?
Re:We took a hacker to a public WiFi café (2014)
on Tuesday February 13, 2018 @03:52PM (#16370641)
But sniffing probe requests doesn't get you much. You get a list of SSIDs they've seen, which could be potentially bad, but not nearly as bad as insecure sites not being marked as such.
Re:What Thunderbird Learned at FOSDEM
on Friday February 09, 2018 @06:28PM (#16344727)
Since we're listing issues with K9: It's pretty easy to setup if you know what you're doing, but the lack of any sort of autoconfig for non-Gmail mail servers make it very difficult to give it to a normal user and have it just work. Thunderbird has a standard autoconfig file to do this, and there is an open issue on K9 to add support for the same format, but it's been open and stagnant for years[0]
Re:Chrome 68 will mark all HTTP sites as “not secure”
on Friday February 09, 2018 @01:40AM (#16338389)
What other shenanigans are you concerned about? MITM and sniffing are basically what https/tls are designed to prevent.
Re:Chrome 68 will mark all HTTP sites as “not secure”
on Thursday February 08, 2018 @02:12PM (#16334681)
Required maintenance for a simple, static https site: Install certbot, press enter a few times, forget about it.
"keep a cron job running" sounds like it you're running the cron job by hand.
>Even the top 100 sites are only at 80% https by default, and they do it for a living!
That's entirely separate from your "simple, static site" example and yes, rolling any sort of large change out to a big site is a big deal, and if there isn't business motivation to do it it likely wont happen. Google is providing everyone a business motivation by threatening to point out to users that insecure sites are insecure.