News for hackers. Stuff that matters.

neuronflux

Re:Hijacking the PS5's RTMP Stream on Tuesday September 29, 2026 @01:21PM (#49896873)
I love the cursor trail on your website. A nice bit of nostalgia from the web of yore.
Re:I Won't Download Your App. The Web Version Is A-OK on Monday April 06, 2026 @12:07PM (#47662760)
So they issued you a company provided phone for this work specific functionality?
Re:Is it a pint? on Monday March 23, 2026 @04:40PM (#47494796)
Also Canadian. I don't often see "pint" on the menu, usually something like "16oz." Evidently restaurateurs and bar owners are wise to the law. Though I am pleased when I see "20oz" on the menu!

I kind of understand the logic by not serving 20oz and saying "pint". Customers might avoid a place because their "pints are more expensive", when in reality that place is also serving them 4oz of extra beer. A bit like the classic 1/3 lb cheeseburger being "smaller"[1].

Annoyingly, I do find that servers will often refer to their larger size beer as "pint" regardless of whatever the menu says.

[1]: https://en.wikipedia.org/wiki/Third-pound_burger#Marketing_f...

Re:Learning to Boot from PXE on Wednesday November 19, 2025 @12:15PM (#45982083)
I'm guessing you use WipeOS to more easily handle securely erasing disks. Could you have iVentoy host WipeOS to simplify the setup?
Much more sophisticated and reliable than Xfinity.

Good datacenters have redundant and physically separated power and communication from different providers.

Also, in case something catastrophic happens at one datacenter, the author mentions they are peered to another datacenter in a different country, as another layer of redundancy. Cloudflare handles their ingress, so such a catastrophic event wouldn't likely to be noticed by their customers.

SPF alignment ensures the MAIL FROM domain matches the From header. DKIM alignment ensures the From header matches the domain in the DKIM signature header. In the DMARC policy, you can set both adkim=s and aspf=s.

Google owns and manages all of this, so they can send emails with a google.com MAIL FROM, a google.com header, and signed with a google.com DKIM key. And they could do likewise with gmail.com emails.

I'm not clear on why this isn't practical, perhaps there is something I'm missing though? I would appreciate your viewpoint.

Edit: I see you added a point about forwarding.

They probably sent it from gmail which would pass the SPF check (google.com and gmail.com have the same SPF). They wouldn't have it signed to pass DKIM, but google doesn't use strict alignment checking so to pass DMARC either SPF or DKIM are acceptable.

    ~ dig _dmarc.google.com txt +short
  "v=DMARC1; p=reject; rua=mailto:[email protected]"
Re:My Bank Keeps on Undermining Anti-Phishing Education on Thursday July 17, 2025 @11:46AM (#44594619)
Of course it is typically wise to consider Chesterton's fence.
Re:Interesting Daily Game on Tuesday June 24, 2025 @12:22PM (#44367863)
I enjoyed it.

My girlfriend's first reaction after getting 30/36 and seeing the neutral smiley face emoji was, "Wordle doesn't judge me."

Re:Linux Kernel Exploitation: CVE-2025-21756 on Wednesday April 30, 2025 @05:24PM (#43850853)
Try the Reader View feature of Firefox.
Re:Zelensky leaves White House after angry meeting on Friday February 28, 2025 @04:16PM (#43211138)
Regarding Pine Gap, they've allegedly done it before even without Elon.

https://en.wikipedia.org/wiki/Alleged_CIA_involvement_in_the...

Re:Show HN: Matle – A Daily Chess Puzzle Inspired by Wordle on Wednesday February 05, 2025 @05:20PM (#42956118)
I think that this solution is a bit backwards. I think it should be on the extension to detect if the site is already "dark".
Re:A combo of ChatGPT and spot EC2 instances screwed me over on Thursday January 02, 2025 @01:21PM (#42577103)
You can deploy production workloads to spot instances, just make sure you have the rest of your infrastructure setup to handle the spot terminations. Excluding spot instances from the discussion, for any robust use case your infrastructure should be able to handle a single point of failure anywhere. See https://netflix.github.io/chaosmonkey/
Over COVID I couldn't wargame with friends in person, so I started an N scale railroad to fill the hobby void as they share a lot. Also it was fun doing all the automation etc as mentioned in other comments there. I've sold the railroad off since as I started wargaming again though.
Re:What kind of password reset scam is going on at Facebook? on Thursday September 07, 2023 @01:43PM (#37422710)
My email is <first initial><last name>. I also have the same first initial as my father, sometimes I get email intended for him. Fortunately our last name is unusual so that's about the extent of it.
Re: on Friday January 13, 2023 @01:23PM (#34371771)
> is there an angle for me to pitch myself as "The guy who will clean up your code base"?

You sort of answer your own question unfortunately.

> managers keep pushing us to limit our time and move on to things that are visible to customers.

So if a manager only values things visible to a customer, why would they hire an expensive consultant work on things that aren't valuable to them?

Re:I recorded user behaviour on my competitor’s websites on Tuesday October 25, 2022 @02:58PM (#33334732)
How do other browsers handle this behavior? The author mentioned Chrome specifically.
Do you know if Microsoft setup this EU shell after the whole thing with the FBI wanting emails stored in Ireland?

https://en.wikipedia.org/wiki/Microsoft_Corp._v._United_Stat... (2016) and https://en.wikipedia.org/wiki/CLOUD_Act (2018).

If so, it might end up in court again, and we'll have to see how that precedent gets set out. Will be curious to see how this plays out.

I imagine you avoid Google because you don't want to get locked into their centralized closed source ecosystem and don't want them to track your entire online presence. So I'm surprised to see you say email should be avoided, as a completely open decentralized communication protocol.

Your stances on these two topics just seem to be in contrast with each other, would you care to elaborate?

Re:How journalists use youtube-dl on Monday October 26, 2020 @06:30PM (#24902285)
Assuming the content is public, why would they need a subpoena?
Re:How does the Gmail unsubscribe button work? on Friday May 29, 2020 @12:21PM (#23351940)
It unfortunately would probably only do the opposite as this validation occurs during the SMTP transaction when the message is delivered to the server.

Going back after and saying you don't exist is like answering the phone and going "nobody is home".

Edit: I suppose this ghost setting could be used for future delivery attempts though. Perhaps this is what you meant originally.

And yet, that's the job of fire fighters.

Lifeguards don't contain storms...

Re:DNS 101: An Introduction to Domain Name Servers on Thursday October 17, 2019 @02:51PM (#21285224)
Perhaps an issue with your local DNS server. Use Google's public resolver to test.

  dig @8.8.8.8 -x <ip address>
Re:Chef CEO Defends Contract with ICE on Friday September 20, 2019 @04:34PM (#21030984)
You're suggesting that nobody should every take a stand for what they feel is right and good because their actions are too insignificant anyway? Grim.
BGP filters fix this. Only accept routes from customers for IP space that they control.

I imagine Verizon has some sort of webUI with bad defaults (no filter) so that their helpdesk can setup new customers - Hanlon's razor being what it is.

Reminds me of the movie Snowpiercer[1]. The "protein blocks" served to the population are made from ground-up cockroaches.

The setting is on a train during an ice-age so they really need to make use of the space efficiently. They don't really go into what the cockroaches eat, I can only assume waste from the population.

1. https://www.imdb.com/title/tt1706620/

Re:As AWS Use Soars, Companies Surprised by Cloud Bills on Monday February 25, 2019 @12:31PM (#19247429)
You can choose how to setup your billing for reserved instances.

> You can choose to pay for your Reserved Instance upfront, partially upfront, or monthly

source: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts...

> after I finished serving in the Air Force Reserves in 2014, but then decided to go to graduate school for business administration

> My salary was $80,000, which is on the higher end. They gave me more because I said I wouldn’t accept anything less, since I had a master’s.

Re:The Great French Mustache Strike of 1907 on Monday October 08, 2018 @12:20PM (#18168751)
Interestingly, a recent study indicates that seems to be more form than function.

https://www.cbc.ca/news/canada/british-columbia/beards-now-p...

This is similar to what competitive Counter Strike has become. Even though Valve has been talking about some interesting anit-cheat methods [1], third party matchmaking services rely on such client software to try to combat cheaters [2].

[1] https://www.pcgamer.com/vacnet-csgo/

[2] https://www.faceit.com/en/anti-cheat

Older »