News for hackers. Stuff that matters.

isclever

Re:Towards HTTPS by Default on Wednesday August 16, 2023 @04:47PM (#37153577)
You can buy a domain, put public NS servers on it for the only purpose of doing Letsencrypt DNS validation. Hint: Create root and wildcard (eg domain.ca and *.domain.ca) so you aren't leaking internal DNS records (not that it matters much).

You run an internal DNS server (Pihole + unbound is my combo of choice) which becomes authoritative for your internal LAN.

Re:So this guy is now S3. All of S3 on Thursday May 04, 2023 @03:46PM (#35821103)
Maybe, but the admin commented it was intentional for that specific post, it was slowing down the entire site.
Re:Mess with DNS on Wednesday December 15, 2021 @02:14PM (#29570338)
At least for certificate issuance they can turn it off via a CAA record:

https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...

Re:DNS doesn't “propagate” on Monday December 06, 2021 @02:50PM (#29464671)
Google and Cloudflare allow anybody to expire any record in their cache, handy to have to if you make a mistake that is affecting customers.

Google's 8.8.8.8: https://developers.google.com/speed/public-dns/cache

Cloudflare's 1.1.1.1: https://1.1.1.1/purge-cache/

Re:Btop++ is a power resource monitor for Linux on Saturday September 25, 2021 @03:22PM (#28655549)
This is why I have trust issues when github pulling or exploding a tar.
Re:Serving Netflix Video at 400Gb/s on FreeBSD [pdf] on Sunday September 19, 2021 @11:33AM (#28585122)
Go to fast.com, open webdev tools on the network tab. Run a speedtest, the hosts are the local caches (OpenConnect) that you would use to stream movies.

Note: I don't know for sure, but its the most likely.

Re:Whistleblower: Ubiquiti Breach “Catastrophic” on Tuesday March 30, 2021 @03:06PM (#26638919)
This boggles me when I see this option in any password manager (and I think every single one has this 'option').

Why do password managers let people store TOTP next to the password, this completely invalidates the 2FA of TOTP if your password manager get broken into.

Re:IBM Cloud was down, as well as their status page on Tuesday June 09, 2020 @07:44PM (#23472247)
It happens a lot, when you have so much infrastructure and redundancy you think it is too big to fail. Then you lose S3 in US-East1 and break everything.

https://www.theregister.com/2017/03/01/aws_s3_outage/

Re:Netflix urged by EU to slow streaming to save internet on Thursday March 19, 2020 @11:03AM (#22628137)
Netflix is open to any peering, some ISPs are not: https://techcrunch.com/2014/07/29/netflix-and-att-sign-peeri...
For Canada, specifically Bell, they both an eye ball network and a transit provider. Bell has no incentive to peer at local IXs and "give away" part of their service (the eyes, as that is the lucrative part) when they can sell on the fact they are a large national network AND you can get access to their end customers as well.

Edit: clarification on the part that is more valuable.

Re:Cloudflare silently deleted my DNS records on Monday February 24, 2020 @03:42PM (#22408221)
A domain registered at a provider (but not DNS) can be down with no impact to your domain, so long as the domain is still in the TLD root servers, everything will keep going.
Re:Cloudflare silently deleted my DNS records on Monday February 24, 2020 @02:53PM (#22407730)
Here is a good list: https://github.com/n1trux/awesome-sysadmin#monitoring

Maybe one fits what you are looking for.

Re:Cloudflare silently deleted my DNS records on Monday February 24, 2020 @01:36PM (#22406897)
My takeaway:

1. Setup up monitoring on your critical domains. UptimeRobot and Hetrixtools are good starters with generous free tier. You should know when your website/email/dns isn't working.

2. Don't tie your domain registration with your DNS provider. You lose everything if something goes wrong with your account.

3. Be able to jump ship easily, have backups of your zone, already know where you will transfer to.

Re:Apple Edge Cache on Friday February 14, 2020 @02:14PM (#22329354)
There is also https://qwilt.com/ which is more of an open(?) local cache servers for ISPs.
Re:Netgear Signed TLS Cert Private Key Disclosure on Monday January 20, 2020 @09:14AM (#22098902)
mini-app.funjsq.com is revoked (https://decoder.link/result/418b8d20793d3f4daa4153752e45e78b...), can't check routerlogin.net/com as they didn't paste the public cert.
Re:Mail a Letter Online on Monday April 29, 2019 @12:25PM (#19779806)
You need to get on the HTTPS bandwagon as well https://doesmysiteneedhttps.com/
My personal view of using Wealthsimple is a stepping stone, I've realise that I've throw away money to the banks with higher then needed MERs and Wealthsimple provide a easy way of transferring my money in and saving money now. When my portfolio is larger and I'm seeing a higher cost with them VS doing it myself I'll look into buying ETFs myself.

The lowest bank mutual fund in Canada that I've seen in from Tangerine at ~1% MER, are there ones lower?

Not only do you get on average better returns, you can do better even when they perform poorly since those funds (in Canada) can charge you anywhere from 1.5% to 3% of your portfolio in fees (MER), while an index fund could charge as low as 0.1%.

https://www.wealthsimple.com/ (I'm a customer) has recently expanded into the US from Canada and are one of a group of what is being called Roboinvestors which take these index funds and let you easily invest in them.

Wealthsimple adds on 0.5% fee which is still lower then active funds, my portfolio has a weighted MER of 0.64%.