notfoss

In Japan, even the bees know martial arts.

They also don't have to pay any taxes for money earned through scamming.

While I like the concept, the title of this article is misleading, as nowhere on the GitHub page or even at https://einaregilsson.com/redirector/ does the author highlight the privacy implications of this.

As mentioned in another comment, https://github.com/SimonBrazell/privacy-redirect seems to be more relevant for privacy minded folks.

> Surprisingly a couple of times, I was asked about recognizing birds by their singing. The library can't do it, but it is something I am thinking about exploring one day.

Hopefully, it'll be easier than this: https://xkcd.com/1425/

Android - at least for now - supports DoT. But, who knows, they might switch to DoH in the future.

https://developers.google.com/speed/public-dns/docs/using#an...

PS: I have been using it for a while and it works fine.

> people email me now instead.

And then you manually add that to the article or just keep it to yourself?

Many companies use shortened URLs in SMS messages.

They should name it Borderlands cafe :P

Zoho.

If I was one of their shareholders, I would be happy instead, as they seem to have come out as the real good guys in the whole story (unless they were legally obligated for covering the mess).

Well, it's generous for non-americans ;)

Give the kid Emacs, the language doesn't matter :P

I am not sure why you were downvoted, but that is exactly the reason why many blog posts don't display the post date.

Recently I was watching "The Dictator" in which Sacha Cohen's character told someone that his name was something like "Imumoccupancy120", to which the other one replied "There is a number in your name?".

But, I guess, it isn't impossible in real life ;)

Thanks for the explanation. But generally I have found aria2 to be more reliable in such scenarios.

aria2 is much more reliable when downloading stuff, especially for links which involve redirections.

For example here's a link to download 7zip for windows from filehippo.com.

Results:

* Curl doesn't download it at all.

  curl -O 'http://filehippo.com/download/file/bf0c7e39c244b0910cfcfaef2af45de88d8cae8cc0f55350074bf1664fbb698d/'

gives:

  curl: Remote file name has no length!

* Wget manages to download the file, but with the wrong name.

  wget 'http://filehippo.com/download/file/bf0c7e39c244b0910cfcfaef2af45de88d8cae8cc0f55350074bf1664fbb698d/'

gives:

  2016-03-03 18:08:21 (75.9 KB/s) - ‘index.html’ saved [1371668/1371668]

* aria2 manages to download the file with the correct name with no additional switches.

  aria2c 'http://filehippo.com/download/file/bf0c7e39c244b0910cfcfaef2af45de88d8cae8cc0f55350074bf1664fbb698d/'

gives:

  03/03 18:08:45 [NOTICE] Download complete: /tmp/7z1514-x64.exe

This would be better directed at those who use Outlook. The ones using curl to send mails will be boasting about it ;)

Don't worry, this is how HN works and we are able to discover different programs around a similar theme.

For new IP addresses, you can write a script to monitor your auth.log file.

What is the Full SSL feature offered by you? From what I understand it means supporting weaker ciphers apart from SSL and older TLS versions. Is that the case?

That's why I tell users to always remember the '-h/--help' option ;).

Shouldn't it be the opposite? If clients receive a REJECT message, they will simply stop trying to connect, but if they don't receive any response at all, i.e., DROP, they will keep on trying to connect before any timeout threshold kicks in, thus putting more load on the server.

Very nice article, even for advanced users (not attackers ;)).

I have one question though. What are your thoughts on DROP vs REJECT firewall rules, as some people claim that DROP offers no additional benefits over REJECT while causing inconvenience to legit users. ref: http://www.chiark.greenend.org.uk/~peterb/network/drop-vs-re...

Not trying to excuse OSX's behaviour, but non-technical users are the ones who use passwords like: abcdef, 123456, password123, etc.

In fact, using such characters (emojis, other unicode characters, etc.) in passwords should be considered a secure practice.