pt
Re:Oh no, not again a meditation on NPM supply chain attacks
on Wednesday September 17, 2025 @11:16AM (#45276866)
When we close and reopen VSCode (and some other IDEs), it updates the NPM packages for the installed plugins. Would these mitigations steps (e.g. pnpm) also take care of that?
Re:Nikon Issues Small Recall for a 16-Year-Old Film Camera
on Thursday July 16, 2020 @09:34PM (#23866041)
Baby bullet.
Re:Helping organizations do more without collecting more data
on Friday June 21, 2019 @01:53PM (#20244818)
From https://github.com/google/private-join-and-compute:
"Our protocol has security against honest-but-curious adversaries. This means that as long as both participants follow the protocol honestly, neither will learn more than the size of the intersection and the intersection-sum. However, if a participant deviates from the protocol, it is possible they could learn more than the prescribed information."
Also: "Disclaimers: This is not an officially supported Google product. The software is provided as-is without any guarantees or warranties, express or implied."
Re:Ask HN: What VPN service are you currently using?
on Sunday February 24, 2019 @09:21PM (#19242267)
Is there a way to setup an “always on” VPN on my device, such that it disallows any traffic to egress unless connected to the VPN?
Re:I made my own WireGuard VPN server
on Sunday August 05, 2018 @10:52AM (#17691602)
On the client, is it possible to setup an “always on” VPN? Such that when the client restarts on reboot, there is no internet connection until the VPN is on. Or when either the client or server glitches, the end point computer/mobile does not connect to the internet in the clear?
Re:Marissa Mayer launches Lumi Labs, a new incubator
on Wednesday April 18, 2018 @05:56PM (#16871587)
“Thinking about what's next, I returned to my roots, rented the original Google office where I started my career, and founded a lab with my longtime friend and teammate @eamunozt. A bit of info: lumilabs.com”
https://twitter.com/marissamayer/status/986716678682587136?s...
SAML authentication bypass vulnerability disclosure
Re:Show HN: Fanout – Reverse proxy to push real-time data to connected...
on Thursday September 28, 2017 @07:28PM (#15361623)
How do you compare it with PubNub?
Re:Frp: A fast reverse proxy to help you expose a local server to the ...
on Friday August 12, 2016 @12:43PM (#12276999)
Check out https://www.trustedpassage.com (private beta right now). It's like ngrok but with security as the primary focus.
Disclaimer: I am one of the co-founders.
Re:Why aren’t we using SSH for everything?
on Wednesday August 03, 2016 @08:26PM (#12222536)
I was referring to the browser side certificate that can be generated using the <keygen> tag, and then used for the subsequent HTTPS sessions. Would this be equivalent to ssh-keygen for SSH?
Re:Why aren’t we using SSH for everything?
on Wednesday August 03, 2016 @02:06PM (#12220090)
Do TLS client certificates make HTTPS equivalent to SSH?
Re:Opera VPN behind the curtains is just a proxy
on Saturday April 23, 2016 @10:56PM (#11558369)
I am actually working on build something similar. So, you could roll out an app-specific VPN like secure tunnel real easy. It is inspired by the work at Google IT called BeyondCorp [1].
The target market is companies whose employees require secure remote access to internal apps, but IT does not want to give a broad network access via VPN. So, marketing/sales like employees who simply want to access internal portals, etc. without the hassle of dialing into a VPN.
VPN key exchange flaw exposes Cisco security appliances to remote hacking
Re:CloudFlare and Google Cloud Platform
on Wednesday September 09, 2015 @06:47PM (#10195165)
Yes, DNS history is one way to leak your IP. There are several other ways that the origin IP may get leaked, so you should be very careful if you use Cloudflare:
* Keep all subdomains on CloudFlare
* Don't use wildcard subdomains if you are not on Pro account
* Don't host mail or other services on the same server as your web server (email headers have origin IP)
* Never initiate an outbound connection based on user action
* Make sure that your web server and web application are patched against all known information disclosure vulnerabilities.
* Change your origin IP once configured for maximum DDoS protection on CloudFlare
Cloudflare documents it here: https://blog.cloudflare.com/ddos-prevention-protecting-the-o...
Re:CloudFlare and Google Cloud Platform
on Wednesday September 09, 2015 @03:37PM (#10193835)
Besides Cloudflare being the biggest man-in-the-middle on the internet, their DDoS mitigation offering is also questionable. If you google "clouflare bypass" [1], you get to websites that can tell you the origin IP address of a cloudflare customer's domain name. So, malicious guys could hit the real IP directly.
Re:Ask PG: How is Arc coming along?
on Wednesday August 12, 2015 @02:03PM (#10049488)
A dream is a goal without a deadline.
Re:
on Wednesday April 08, 2015 @02:52PM (#9342951)
So Rapportive for XLS?
Apple Store is down – unable to pre-order
Re:Apple – Live – September 2014 Special Event
on Tuesday September 09, 2014 @01:06PM (#8291275)
Anyone hearing Chinese commentary?
Re:LocalFlow – Discover your neighborhoods
on Thursday July 24, 2014 @04:14PM (#8081913)
``It was through the private world of family that the public world of politics came alive.´´
-Sonia Gandhi-
This is a first. Never seen a startup quoting from a politician from India (not related to Mahatma Gandhi) in their landing page :)
Re:Introducing Swift
on Monday June 02, 2014 @03:06PM (#7835298)
swift-lang.org mentioned at the bottom of the page seems to be down.
Re:Show HN: JS library to make your website instant
on Monday February 10, 2014 @02:11PM (#7212988)
Yeah, just tried it. Does not work with angular SPA.
Re:Powerchair: A dad hacks a wheelchair for his disabled 2-year-old son
on Saturday November 30, 2013 @01:10PM (#6823904)
I would like to contribute money for Alejandro (as I do not have the hacking ability/skills to contribute anything meaningful for the tech). Is there a way to contribute money for Alejandro and his dad?
Re:iWork "free" only for Macs purchased after Oct 01, 2013
on Tuesday October 22, 2013 @07:06PM (#6595616)
From the fine print:
"Keynote is free on the Mac App Store for qualifying Mac computers purchased on or after October 1, 2013."
So disappointed to learn that Keynote is not really free for everyone :(
iWork "free" only for Macs purchased after Oct 01, 2013
http://www.apple.com/mac/keynote/
From the fine print:"Keynote is free on the Mac App Store for qualifying Mac computers purchased on or after October 1, 2013."So disappointed to learn that Keynote is not really free for everyone :(
Re:The Yahoo board has approved a deal to pay $1.1 billion in cash for...
on Sunday May 19, 2013 @12:43PM (#5733406)
Heard Kara "Fisher" for the first time, and not sure why, but I like the sound of it.
Yahoo Premiers IntoNow 3.0: The Best Second Screen Experience Ever
http://ycorpblog.com/2012/07/30/intonow-07302012/
Pretty neat app. tried the "capIt" feature that displays the TV shows's live images ready for captioning and posting to social media sites. Also, neat is a feature to fuzzy match a song, something that Shazam can't do.
Tesla Model S Delivery Starts Today [Live Webcast]
http://www.teslamotors.com/model-s-has-arrived
The all electric sedan from Tesla Motors starts delivery today. The live webcast from their Fremont plant is on...
Re:Oracle launches their own social network
on Sunday October 09, 2011 @02:36AM (#3089854)
This is not new, been around for 3-4 years now, and is targeted for oracle employees.
What Oracle launched on Wednesday is this:
http://cloud.oracle.com//my-cloud/service_social.html
This is a Social Network layer on top of their latest Fusion Applications. In my opinion, this is more about enterprise collaboration and less about "social". Oracle is just being buzzword compliant here.