bshipp

8 ms·

1.
by bshipp 2y ago
The people who are crashing their 600HP Linux systems are, unfortunately, not the ones who are reading CVE listings in their spare time. Canonical and other distros are probably going to have to patch that default setting.
2.
by bshipp 2y ago
Likely no good reason. But he seemed to have identified many many systems that were, inexplicably, exposing port 631 to the internet. There is some reason people are doing it and, given the number of target systems, it must be some sort of
3.
by bshipp 2y ago
This is the worry. It seems like a really unnecessary privilege escalation.
4.
by bshipp 2y ago
I guess the important question is whether or not these things are blocked by default or require user intervention to disable cups? Sure, many of us block all ports by default and either route everything behind a reverse proxy or punch very
5.
by bshipp 2y ago
I don't know if I would say it's a nothing burger, but i don't see how it affects important servers. It might impact a number of linux desktops and, if they are linked to important servers, provide a backdoor access into impo
6.
by bshipp 2y ago
This is entertaining reading. Although I don't know how pervasive this issue is, from the chunk i have read so far I can see why he was concerned that it was relatively trivial to have a target system accept anything identifying itself
7.
by bshipp 2y ago
How does an attacker exploit this vulnerability? - An attacker can exploit this vulnerability if it can connect to the host via UDP port 631, which is by default bound to INADDR_ANY, in which case the attack can be entirely remote, or i
8.
by bshipp 2y ago
https://gist.github.com/stong/c8847ef27910ae344a7b5408d9840e... Original report Affected Vendor: - OpenPrinting Affected Product - Several components of the CUPS printing system: cups-browsed, libppd, libcu
9.
by bshipp 2y ago
From an eating-popcorn perspective, I would find it truly entertaining that a printer package could somehow result in a 9.9 security vulnerability that is somehow worse than heartbleed. How many linux systems actually have cups installed an
10.
by bshipp 3y ago
Ukraine is (and will continue to be for decades) a fascinating case study for multiple reasons, but most impressively regarding NATO support. Although headlines detail billions upon billions in spending, the vast majority of those expenditu
11.
by bshipp 3y ago
I think the Chinese perspectives of how a war against Taiwan might proceed was dramatically altered after watching Russia get slapped around by Ukraine. I'm convinced it delayed any aggressive move by China against Taiwan by a decade,
12.
by bshipp 3y ago
Indeed, although because I heavily utilized Docker I also ended up using UFW-Docker. It was fairly straightforward to incorporate into my startup scripts. https://github.com/chaifeng/ufw-docker
13.
by bshipp 3y ago
I was brand new to managing an Ubuntu Hetzner server and the moment I saw how many port 22 scans the server received i decided to try changing the port number, followed by key-only passwordless logins. My logs immediately shrank in size. I
14.
by bshipp 3y ago
You're a legend, thanks for posting that.
15.
by bshipp 3y ago
Just opened the Play store and there are numerous Harmony apps. Could you provide a link, please?
16.
by bshipp 3y ago
Judging by the declaration of war against Ukraine by Russia, it appears an underappreciated aspect of the equation is equal measures of senility and insanity.
17.
by bshipp 3y ago
This kind of reminds me of when the Concorde first started flying and technically could cancel IFR flight and proceed under visual flight rules over the atlantic because it was above 60,000 feet. An interesting legal possibility but likely
18.
by bshipp 3y ago
In many ways its no different than electronic musicians building songs based on short samples of older songs. I have no doubt there will be rulings supporting the sort of creativity you're discussing at some point in the not so distant
19.
by bshipp 3y ago
Some people obviously prefer the old days when security problems were hidden within proprietary code so the only people who knew about them were the ones who found the exploit.
20.
by bshipp 3y ago
If water was priced appropriately it would incentivize hydroponics that captures and recirculates waste water to minimize usage.
21.
by bshipp 3y ago
As a simple example, Threading in Python works good for i/o-bound operations like scraping a website, whereas Multiprocessing works best for CPU-bound operations like result hashing/transforming the data you just scraped.
22.
by bshipp 3y ago
I understand everyone wants concurrency because that's the way everything else in programming works these days, but SQlite in memory or on an SSD (in WAL mode) writes so fast that it makes infinitely more sense to dedicate a single dat
23.
by bshipp 3y ago
I think Musks turning point was when he randomly accused the Thai boyscout guide of being a pedophile. Since then his image has been continuously circling the toilet.
24.
by bshipp 3y ago
I don't know if it's wise to place such a challenge in front of all of us.
25.
by bshipp 3y ago
I can't imagine .io would ever be removed. if anything, it'll be categorized like .org or .com if it loses its geographic justification.
26.
by bshipp 3y ago
What is it then?
27.
by bshipp 3y ago
Agreed, or only render the bags at full zoom and have them dematerialize as you move in for a closer look. That way you can easily find the airships on an overview map by their large sphere but still be able to micromanage the infrastructur
28.
by bshipp 3y ago
The....Gerber Baby? Is there a story there? She seems pretty normal and pleasant from her Wikipedia. https://en.wikipedia.org/wiki/Ann_Turner_Cook
29.
by bshipp 3y ago
I understood the justification and necessity for lockdowns but not only were they too late but they were also infested with political exemptions and even if they had helped they were only ever a temporary solution. Full lockdowns certainly
30.
by bshipp 3y ago
Mastery of Python, in my opinion, is mastering "Pythonic" code, which incorporates readability as a fundamental tenet. In addition, the gigantic universe of not only the standard library but also numerous external libraries and to

More ›