warhorse10_9
warhorse10_9 on Hacker News
Thanks, I followed their security.md to contact them. Appreciate the insight on a possible standard lack of synchronous versions.
Posted by
warhorse10_9 on Thursday April 16, 2026 @04:38PM
from the self-post dept.
Hi All,Not really sure if this is the correct place to post this, but it looks like the VS Code release mechanism might have been compromised. The Visual Studio Marketplace has a release today of 0.44.1, but the github page shows no such release present (not even 0.44.0). Given the recent slew of supply chain hits I am a bit suspicious.
I was going to say, we went over this in undergrad Statistical Mechanics and Thermodynamics.
It's like people completely forget about the "A" in the CIA triad.
What you just described is incredibly prone to social engineering.
Modern crls are partitioned so this really isn’t a problem you will run into.
Read up on “color charge.”
They are an FFRDC, and do a lot more beyond the CVE database. You simply pointed out what they are most known for.
Quaker Bridge Mall I am guessing? There are always so many teslas parked there.
For stuff like that use
https://old.reddit.com/r/rustIn my experience that solves the issue. It’s not the most mobile friendly but workable and my go-to regardless.
Your school is likely using a NGFW like a Palo Alto. These provide very granular application based filtering of traffic.
No, voids are normal in these types of simulations and are observed in real world observations as well. Some dark energy alternatives actually looked at the effect of voids on our observations, but could not sufficiently explain the observed acceleration.
Look at FFRDC's (Federally Funded Research and Development Centers) as a whole. There are quite a few of them and depending on the type of mission, some will have very dedicated software development teams.
Apple has implemented a way for developers to do this already with DoT. If you are running a pihole I suggest you block. _dns[.]resolver[.]arpa. If not and your upstream DNS resolver supports DoT, this will tell clients who your upstream provider is and then they will send DoT requests out, bypassing your pihole. This is part of so called Discovery of Designated Resolvers (DDR).
Sorry, but I disagree. You have to look at the customer base crowdstrike is serving which can be wide and varied. There exist environments where the user "needs" admin privileges but should not be able to uninstall the sensor. Think corp where users code etc, but they dont have the admin staff to do some more complicated IT security. In that instance this is just what is needed. Also, privilege escalation exist and these sensor server to help prevent do IR for real malware.
I do this too. My only issue I am having right now is I am "locked" to my current registrar because of how it is set up. Do you have a mail server you are using or just having your registrar do it? I am looking for alternate solutions that dont cost much.
If you have a cluster of virtualization hosts, you can license each physical server for 225 a year. It will then cover all vms on that physical host. I went over this multiple times with Canonical reps before purchasing as it seemed too good to be true, but it is. It doesn't even matter what hypervisor you are using.
I had the same issue. I am wondering if this wasn't a mess up on the OP's computer configuration. I have checked older systems that have been upgraded repeatedly as well. None have the issue.
You can also just set the policy to disable this in registry or using policy.json on Linux. Mac has a similar setup, i'm just not familiar with it.
The results were missing from DDG ecause DDG gets its results from Bing. It is about the active choice to censor which Bing made, not DDG.
Looks like they added the "-sk" options to Git Bash for windows. That seems to be what they are promoting for the most part with this post. Though the title is a bit deceptive.
Yes, I have. That interface is not for non-experts. It is for the IT professionals configuring the portal.
Let's lay this out. Let's say you are a government IT shop (it doesn't matter what level, state, nation whatever), or a bank, or a hospital, you are required by law to control how data is processed on your network. Therefore you must monitor compliance for devices connecting to your network. This is what GlobalProtect was designed for. It can be used in less restrictive environments, but the IT shop should make sure to audit the rules and policies of the client to not be overly burdensome on users. Palo Alto has numerous courses to train IT professionals to configure their products. It is on the IT professionals to configure the services correctly.
The policies are really not excessive, Palo Alto is designing for enterprises which would want many of these restrictions on their assets. It just so happens the software is flexible enough to be used in BYOD settings. The IT professionals in those settings need to do their due diligence and apply appropriate policies. This is a PICNIC/PEBKAC.
I posted this in a comment response below.
All of these things are actually configured by the company/library you are connecting to. They are configuration options for the firewall that are enforced by global protect. Blame your library IT, not Palo Alto.
All of these things are actually configured by your university. They are configuration options for the firewall that enforces the portal. Blame your university IT, not Palo Alto.
If you have vlans set up at your house you might have a decent firewall that can block dns requests to unauthorized servers, so there's that.
That is a very good point on it possibly being regulatory related. I agree, that is probably also a big part of it.