andyjh
Re:Apple's iCloud+ “VPN”
on Wednesday June 16, 2021 @04:10PM (#27532912)
Licensing issues aside, it would cost _additional_ money to actually serve all that content to a global audience (shipping bytes over the internet isn't free).
Re:Did a weak WiFi password lead police to our door?
on Sunday May 23, 2021 @06:07AM (#27253808)
My first thought was that it's more likely something like this than a bad actor on their wifi: https://en.wikipedia.org/wiki/Hola_%28VPN%29
Anyone with that browser extension installed on any device on their network is making themselves an open VPN exit for millions of random people.
Re:BBC.com Is Down
on Thursday April 08, 2021 @05:38AM (#26736824)
It would also be useful if you can tell us which IP you're connecting to when you see the error (eg from dev tools).
Re:'Five Eyes' nations discuss backdoor access to WhatsApp
on Tuesday July 30, 2019 @06:18PM (#20569767)
One might reasonably assume the "bad guys" they're trying to catch would go elsewhere though, if they have any sense. So then you're just left with innocent people to spy on.
Re:China's e-buses dent oil demand more than electric cars do
on Wednesday March 20, 2019 @03:05AM (#19439706)
Milton Keynes has had electric buses since 2014, which top up their batteries via induction chargers at the end of each route throughout the day: https://www.bbc.co.uk/news/technology-25621426
http://www.cbi.org.uk/insight-and-analysis/milton-keynes-wir...
The number of buses is set to increase after the initial successful trial: https://www.miltonkeynes.co.uk/news/more-electric-buses-on-t...
Re:Why No HTTPS?
on Tuesday July 24, 2018 @11:49AM (#17602116)
Chrome isn't forcing anyone, it's just making it clear to users that a non-https site is insecure, which it is. What's the problem with providing information so that users can make an informed choice about whether to use the site?
Re:Justice Dept. Seizes Times Reporter’s Email/Phone Records in Leak I...
on Friday June 08, 2018 @02:53AM (#17263203)
Why can't you just sign up via tor?
Re:Evolving Chrome's security indicators
on Thursday May 17, 2018 @02:09PM (#17093823)
Not true: Currently the "info" indicator appears on first interaction (which _could_ be after they've auto-completed everything, but may not be). This is changing though: In Chrome 68 the info indicator will be there on all HTTP pages, without form interaction required. So this change just changes it from "info" to red warning.
Re:Evolving Chrome's security indicators
on Thursday May 17, 2018 @02:02PM (#17093750)
No, as of chrome 68, http will be marked as not secure without waiting for any user interaction at all. The change for http pages outlined in this post is to upgrade that from the grey info message to a red warning.
Re:Evolving Chrome's security indicators
on Thursday May 17, 2018 @01:59PM (#17093713)
Actually the target position is that https _won't_ be marked as "secure", but rather than http will be marked as "not secure". Can't really argue with that.
Re:More Than a Million Pro-Repeal Net Neutrality Comments Were Likely ...
on Saturday November 25, 2017 @04:17AM (#15775171)
It's not really any business of the ISPs which services their customers want to use. If demand for bandwidth increases such that the price isn't viable anymore, charge customers more if necessary. You don't find restaurants charging potato suppliers because diners like to eat lots of fries.
Re:Trusting transferred root certificates
on Thursday November 02, 2017 @04:05AM (#15608629)
I'm personally glad Mozilla take such an interest in ensuring CAs are trustworthy. After all, they are the linchpin for security and authenticity of just about everything on the web.
I think this post shows that Mozilla are trying to be as transparent as possible about what they expect, and thay they're proactively working with Digicert to make it as likely as possible that the new CA will be trusted. A certain amount of open-endedness is inevitable though, otherwise it'd be possible to find loopholes with enough motivation (and the survival of a business is fairly good motivation).
Re:Standalone Signal Desktop
on Wednesday November 01, 2017 @04:45AM (#15599612)
No proxy support, so I can't use it in my corporate environment.
https://github.com/WhisperSystems/Signal-Desktop/issues/1632
Also a bit annoying that it can't be run in the background, at least on Windows.
https://whispersystems.discoursehosting.net/t/new-desktop-ap...
Re:Public Key Pinning Being Removed from Chrome
on Saturday October 28, 2017 @04:51AM (#15574482)
You can use client certificates in h2, you just can't do TLS renegotiation. So you have to request a client cert in the initial handshake; you can't ask later (eg for a specific URL).
Re:Ask HN: What are the implications of CloudFlare leak?
on Saturday February 25, 2017 @09:39AM (#13731748)
"...the leaked information is from any website which was using the service..."
Potentially, yes. Not just HTTPS, but those are obviously the more worrying cases.
It's not possible to know the totality of information that has been leaked, though efforts are being made to try and list affected / potentially affected sites.[1]
My advice would be: For any sites you're worried about (ie hosted on CF and you have an account), log out of all sessions on all devices, and reset your password. Don't share passwords between sites either; if you're using 1password now, you can use unique & complex passwords for everything.