cremp

6 ms·

1.
by cremp 8mo ago
Back before ClusterFlutter (which was just a lot of Java object type-casting, large multi-dimentional arrays, and overflow math) botting was pretty easy to write yourself with very little JVM knowledge. Bans were (and still are) pretty hard
2.
by cremp 8mo ago
Great scripting language, but has a pretty troubled past. Once the original creator moved on from ownership, the new owner also had a business with Runescape botting. The story is that it didn't go well for the maintainers of Autohotke
3.
by cremp 8mo ago
This might be a good plug for Morphie or Revanced patches to automate the patch process.
4.
by cremp 3y ago
> a basic level of device security across all iMessage threads I have Is that really true though? Jailbroken phones, iMessage may still work. Any device security gets thrown out the window. You also can't expect everyone to have an
5.
by cremp 6y ago
> More and more of the internet is now moving behind Cloudflare This is a big double-standard here on HN. Everyone hates Google for making decisions on behalf of the internet as a whole; yet Cloudflare has done the exact same thing wit
6.
by cremp 6y ago
For the overflow, Jagex with RuneScape did it in Java. They also did stupid Object arrays 7 or so levels deep, doing casts on casts in between. The bytecode itself made the actual runtime slow to a crawl (anywhere from 5 to 10x slowdown.) T
7.
by cremp 6y ago
Spit-balling; when will they put GSM chips in them? The cost of a data-plan could easily be reached with estimated figures for ads and selling usage data.
8.
by cremp 6y ago
For maven, to push artifacts via the correct mvn deploy:deploy-file requires a S3 wagon (transport layer) software to actually make the S3 calls. For bigger orgs, having everyone use a wagon is a non-starter. All I'm seeing this does i
9.
by cremp 6y ago
Samesite won't break it if you set it none. Eg samesite=none Google failed to set it before the official rollout. Reason is that sso effectively uses an iframe or popup to a 3rd party auth provider (Google, Microsoft, Auth0...) Provide
10.
by cremp 6y ago
It should be noted that SameSite was broken with Google Sign-in because Google themselves never set the None attribute before they reverted the rollout in April. [0] This is a killer for all federated login systems. [0] https://g
11.
by cremp 6y ago
Corrected; Thanks. Didn't realize the US was that bad.
12.
by cremp 6y ago
Going full tinfoil hat... We've seen the GDP number manipulated during this crisis, Gov propping the economy up with lots of self-debt that we cant pay back. We've seen that other developed counties in the world bawk at us. Exampl
13.
by cremp 7y ago
Maybe I'm just skeptical and a cynic, but... > VPN with an in-app purchase Lets pay for a product, and they have the ability to sell that data. I get, acting like a pi-hole and what-not but, a VPN for that task seems overkill.
14.
by cremp 7y ago
I'm not saying that the product doesn't have it's use, but it is not how DoH should work. I'm trying to bolster the point that they are promoting logs and more importantly, blocking DNS queries. How can I trust the DoH e
15.
by cremp 7y ago
I never heard of NextDNS. I am appalled. From their site: https://nextdns.io > See what's happening on your devices with in-depth Analytics and real-time Logs. > Protect your kids and control what they can access onli
16.
by cremp 7y ago
Proxmox is good with the large exception of high speed interconnects. If I have Mellanox IB cards in my servers, proxmox fails to handle ipoib without a lot of legwork. Compare that to something like oVirt; that supports it out of the box
17.
by cremp 7y ago
> crusading against DoH favor a different centralized DNS standard, DoT I think that there are 2 camps against DoH. 1. Default centralization to specific points. EG firefox using cloudflare first and foremost, nobody else. 2. DoH adding
18.
by cremp 7y ago
Discovered this Fun fact last night; the systemd resolver since V242, used cloudflare as a fallback DNS. [0] The fallback has been Google and quad9. In theory (haven't tested it,) this means that even if I give 0 DNS servers on a DHCP
19.
by cremp 7y ago
All ISPs have privacy policies. 99% of all privacy policies are either copy/pasted from elsewhere or written in legalese so that company can do whatever they want. 'Internal business use' is a nice fodder for 'Selling da
20.
by cremp 7y ago
Except for the shadow profiles that they make of the 'non-users.' Whether you like it or not, Facebook et al are tracking you regardless if you have an account.
21.
by cremp 7y ago
How is that relevant with telemetry? If anything, that would make it harder to block their analytic domains and stop it.
22.
by cremp 7y ago
I think what he means is why not use ++ in the click handler. We don't need a function to increment something. Standard HTML, onclick="var++"
23.
by cremp 7y ago
Exactly. They very clearly allow it to be changed in a config; and I'm willing to bet my socks that Azure is not giving Hashicorp 'deployment structure' information based on a partner id.
24.
by cremp 7y ago
well, first thing on my list if I can't boot; good 'ol USB live boot to read dmesg and syslog. Which a live boot, you can install packages such as microcode updates.
25.
by cremp 7y ago
Which is just gravy, because the whole DoH crowd is against ISP monitoring and selling it. Goes to show that the only thing Doh/DoT/et al. did was to make things more complicated and harder to work with.
26.
by cremp 7y ago
That's non-targeted attacks. Nothing stops the targeted attacks. Sure, they might not be able to listen in on those https connections, but if they wanted to attack/listen to this Joe Smith over here, they are more than capable, an
27.
by cremp 7y ago
Yes, however the difference here is that Chrome is looking at the OS resolver itself first; not just disregarding it, or looking for a magic domain. Chrome is being opt-in, Firefox is being opt-out. Chrome DoH use cases: For the average hom
28.
by cremp 7y ago
They can, it just takes extra steps. Firefox tries DoH via Cloudflare, for an internal domain that returns NXDOMAIN (Cloudflare can't answer for your internal resolver,) then they fall back to local resolvers, which is OS based (DHCP o
29.
by cremp 7y ago
I hardly see how the OP is FUD. What the article states is true; just because you can opt-out doesn't mean it's wrong. Where you are drawing the line is the opt-out to disable it, as opposed to the convention of opt-in. Think abou
30.
by cremp 7y ago
How can you block it, if the browser itself is doing the communication, over https no-less? DoH was made to stop censorship, which includes blocking; if you could just block it, then whats the point of DoH?

More ›