News for hackers. Stuff that matters.

devicenull

What happened to the pricing for self-managed instances? We rather like our onprem setup.
Re:Warp – Mobile VPN on Monday April 01, 2019 @03:56PM (#19547509)
Which presumably only works if your site is using Cloudflare? Since you wouldn't be MITMing SSL in order to inject this header?
Re:I Can No Longer Recommend Google Fi on Friday January 11, 2019 @04:31PM (#18887287)
I've been trying to get Fi to resolve a billing issue.... I'm stuck in a loop with support where they keep asking me for a security code, then the next day they'll respond back saying it expired and they need another one. The codes only seem to be valid for 30m, so I don't have any idea why they keep asking for them...
Re:Why JWTs Suck as Session Tokens (2017) on Thursday August 30, 2018 @12:52PM (#17878260)
PW requirements are defined by your company as well.
Re:Possible BGP hijack of 1.1.1.1 on Tuesday May 29, 2018 @11:57AM (#17180313)
RPKI, but it's barely used
Re:You Need Deli Cups on Wednesday May 23, 2018 @11:11PM (#17140786)
Just wait until you hear my life hack about using plastic to prevent things from getting wet.
Except many of the big upstream providers don't actually filter anything. HE.net for example, doesn't.

We forgot to create some IRR entries and GTT just accepted our prefixes.

There is essentially no security, it's fairly trivial to hijack whatever space you want. (Doing it undetected is more difficult though!)

Re:NAT66: The good, the bad, the ugly on Monday January 22, 2018 @12:49PM (#16206302)
It's actually a /64 at Vultr.
No 2FA on staff accounts?
Re:Spam is back on Friday November 24, 2017 @12:43PM (#15771988)
> It's all clean, except on http://www.spamrats.com (specifically the RATS-Dyna list, and I am not using a home connection.)

That particular list is very well known for doing this. Essentially no one uses them, but they get a bunch of free traffic by being listed on mxtoolbox.

Their removal requirements are fairly absurd anyway (must provide them with a full customer list of everyone using your IPs)

Re:USPS ‘Informed Delivery’ Is Stalker’s Dream on Wednesday October 04, 2017 @11:50AM (#15401377)
I've nearly eliminated the amount of junk mail I get with https://www.paperkarma.com/ ... down to maybe one or two a week instead of multiple per day
Re:Alibaba Cloud on Wednesday July 19, 2017 @09:48AM (#14804221)
How much was the VPS you purchased?
Re:Amazon Drive removing unlimited storage plan on Friday June 09, 2017 @01:03PM (#14522682)
Yep, I cancelled my CrashPlan account when they pulled that. IIRC they gave me under a week to either download the data for 5-6 machines, or lose it forever.
I'd bet it's browing in incognito mode versus actually clearing cookies.
Just allow access from all of Google's IP space, as long as the user-agent contains "googlebot'. It's pretty trivial to do...

Sure, some people could set up GCP instances and proxy it, but that's a very tiny percentage of people.

Re:I took my family on the run for 19 years on Friday May 26, 2017 @02:57PM (#14426342)
s/birth/death/
Re:America Needs Small Apartment Buildings on Friday March 31, 2017 @01:12PM (#14005856)
The ice dams are due to poor air sealing and attic insulation. If you fix those, you won't get ice dams anymore (and your utility bills will go down!)

http://structuretech1.com/ice-dams-2/

Re:Paypal Horror Story 40k Frozen No Answers on Monday March 13, 2017 @11:04AM (#13858370)
> The only way around it is to shadow-ban: - Send blackholed orders to an approval page. - Send blackholed orders an approval email. Train your customer service to know which orders were banned, which weren't.

I don't use woot anymore because they did this to me... and apparently had no process for removing it.

SafeShepherd seems like it's dying. They were active shortly after launch, but it's basically been radio silence ever since. I used to have an account with them, and I didn't find much value from them after the initial cleanup wave (they didn't seem to be keeping up with the new sites that came online).
It's not very private when it's broadcasted for everyone to see...

https://github.com/bemasher/rtlamr

I have that reading both my gas and power meters, and I can easily see another 60 or so nearby meters. And that's with the terrible antenna that comes with the RTL-SDR stick.

Re:QEMU: virtfs permits guest to access entire host filesystem on Tuesday February 28, 2017 @09:58AM (#13754146)
The v9fs code has been a major source of bugs. Hopefully no one's using that in production...

https://www.cvedetails.com/vulnerability-list.php?vendor_id=...

> I do, however, often feel like USPS costs me more than UPS and FedEx just because I have to spend time each day throwing 95% of what I get from them in the recycle bin (and that's after I've opted out of everything I can).

I've been using PaperKarma for awhile, which has significantly reduced the amount of junk mail I get. It's been pretty effective, we're down to only a couple pieces of junk mail per day (most of which is stuff for previous residents that I've never seen before)

Re:How Australia is stubbing out smoking on Thursday February 02, 2017 @12:40PM (#13552522)
Re:Yubikey with USB-C on Thursday January 05, 2017 @12:26PM (#13329166)
I've worn out multiple USB extension cables with my Yubikey, but the device itself is still going strong.
Re:Lame showers, dishwashers that don't work, and dirty clothes on Thursday December 29, 2016 @03:20PM (#13279800)
> We haven’t talked about toilets but this much is true: they used to work well but the low-flow model is vastly inferior. Combined with low water pressure, toilets clog and break down, to the point that you always have to have a plunger nearby (this didn’t use to be the case). Folks, we know how to make toilets that work: they need lots of water. Your constant problems with flushing are not your fault!

My experience is exactly the opposite. After replacing an 80's era toilet with a modern one, it flushes much better (despite using a lot less water). Water pressure also doesn't effect toilet flushes (excluding commercial tankless toilets), it just effects how quickly the tank refills.

Re:Excessive load on NTP servers on Tuesday December 20, 2016 @11:45AM (#13221461)
The NTP servers are all run by random members of the community. There's no real coordination between them (outside of being part of the pool), so you can't really rate limit between servers.

The library was only doing a couple request per NTP server, so rate limiting really wouldn't have helped.

Re:Proposed server purchase for GitLab.com on Sunday December 11, 2016 @08:11PM (#13154714)
If you're doing this right, the management network will not actually be accessible via the normal operating system. Most IPMI controllers support sharing a normal nic and management (meaning both the IPMI controller and host OS can access it), but I wouldn't recommend doing this.
Re:Proposed server purchase for GitLab.com on Sunday December 11, 2016 @06:14PM (#13154053)
> Each of the two physical network connections will connect to a different top of rack router. We want to get a Software Defined Networking (SDN) compatible router so we have flexibility there. We're considering the 10/40GbE SDN SuperSwitch (SSE-X3648S/SSE-X3648SR) that can switch 1440 Gbps.

Noooooo. Do not go for Supermicro for anything where the operating system matters. Their software quality leaves a lot to be desired.

You might want something Cumulus Linux supports, since it seems like you have a lot more Linux experience then networking...

Older »