addingnumbers

7 ms·

241.
by addingnumbers 5y ago
should worry about -> do think there is a problem with shouldn't worry about -> don't think there is a problem with How are those the same?
242.
by addingnumbers 5y ago
If John Carmack doesn't meet the standards, then you probably SHOULD think about 'lowering them.'
243.
by addingnumbers 5y ago
This only makes it more confusing: > a day of unixtime + potential pids makes ~86420 potential XIDs, this is a feasible attack vector. The number of potential XIDs isn't timestamp PLUS pid, it's timestamp TIMES pid, right? Tota
244.
by addingnumbers 5y ago
I'm super confused by the statement "The unix time component has a more broad domain, but this turns out to be not a practical problem (see later)." I don't know what exactly he expected us to "see later," exce
245.
by addingnumbers 5y ago
Can you show me somewhere that says putting a thumb in your butt lowers security? You can't? Hmm, does that mean we should really do it?
246.
by addingnumbers 5y ago
> Passwords must have at least one non alphanumeric character. What kind of 1990's-era security-theater antipattern junk is this
247.
by addingnumbers 5y ago
Now you're just advocating for the Hasty Generalization Fallacy
248.
by addingnumbers 5y ago
> explain how it could happen to seemingly all MyBook's at once Explain what makes you think this happened to all of them at once. That's a huge leap
249.
by addingnumbers 5y ago
1000 days of uptime is 1000 days of configuration drift since the last time you confirmed your services still boot properly. I don't want to wait for a power failure to find out whether my services still recover from a cold boot.
250.
by addingnumbers 5y ago
> the manufacturers are far disconnected from the needs of the end users of computing -- they mostly serve big businesses Same goes for power. They're not going to burn one less lump of coal because your laptop uses 100W instead of
251.
by addingnumbers 5y ago
If you wanted to be honest you could have said "I have literally no idea what Comcast is doing with DNS, but I will attempt rationalizing everything they do as I am gradually informed of it"
252.
by addingnumbers 5y ago
When I said blocking all outbound 53 I meant no exceptions, my local forwarder already uses DoH to an outside resolver. Everything that I don't have complete visibility into the network stack of goes on a VLAN that does not forward tra
253.
by addingnumbers 5y ago
That was a pretty rapid shift from "Comcast isn't doing anything to your DNS" to "So what if they are? There are times when they should!"
254.
by addingnumbers 5y ago
"... except in reasonable and justifiable cases where a user has been placed into a so-called "walled garden" for reasons of abuse, security compromise, account non-payment, new service activation, etc." Their own words
255.
by addingnumbers 5y ago
That couldn't be more wrong. They literally published an IETF draft standard on how they do it. https://datatracker.ietf.org/doc/html/draft-livingood-dns-re...
256.
by addingnumbers 5y ago
I just block all outbound port 53 traffic, any device or app that doesn't honor my DHCP-provided DNS resolver can suck it. Looking at you, Chromecast that tries 8.8.8.8 40 times an hour even though you know perfectly damn well that 10.
257.
by addingnumbers 5y ago
wigle.net returns lat/long for SSID and BSSID (MAC) searches
258.
by addingnumbers 5y ago
Geo-noshing?
259.
by addingnumbers 5y ago
For wikipedia it's pretty easy if you've got even the most basic systems administration experience... https://en.wikipedia.org/wiki/Wikipedia:Database_download#Of...
260.
by addingnumbers 5y ago
Splitting the request packet into two TCP fragments right down the middle of the offending pattern in the Host or SNI field, that's adorable
261.
by addingnumbers 5y ago
You're describing single factor, not two factor. If you can change the password with SMS alone, it's not multi-factor. I plainly stated that exception two comments ago.
262.
by addingnumbers 5y ago
The paragraph you quoted is just describing a side effect of adding nodes. That excerpt appears in every one of their capacity expansion announcements, going back years.
263.
by addingnumbers 5y ago
A bad second factor is better than no second factor. I enabled TOTP on every account I have that supports it, which comes to about 2 out of every 5 services. I'm not going to leave the other 60% with only one factor just because SMS ca
264.
by addingnumbers 5y ago
The problem is with most online services, the only second factor allowed is SMS. If you see it as "don't bother, they can just steal your SMS number" instead of "that's slightly better, at least now they can't
265.
by addingnumbers 5y ago
This doesn't even really seem like a problem that docker introduced. All these problems have been encountered by anyone running an NFS server, or a dozen other ways you can have systems with disparate uid/gid mappings using a shar
266.
by addingnumbers 5y ago
You say "dv" four times like people should already know what it means
267.
by addingnumbers 5y ago
Hang on. You think the power company only asks for $0.10 after you use $1 worth of power that month?
268.
by addingnumbers 5y ago
80 developers reviewing for a month isn't enough work for you? They just put more man-hours into reviewing these commits than the contributors put into writing them.
269.
by addingnumbers 8y ago
Those criticisms are not specific to this method, indeed they are against every possible form of shorthand.
270.
by addingnumbers 11y ago
> If you need to transmit more than fits in one packet (1452 bytes) You must never make assumptions about what fits in one packet. The MTU could be 100, or less, or 8000, or more. As soon as you start doing math based on MTU values that

More ›