r1ch

16 ms·

1.
by r1ch 2mo ago
Alongside this release I seem to have lost all thinking traces from all models - now it only generates a one-line summary similar to Gemini. I'm guessing this is an anti distillation measure? I'm surprised to see no one else compl
2.
by r1ch 2mo ago
Does Sol allow this kind of research by default or is this a "look at me I'm on the cyber research allowlist" post?
3.
by r1ch 2mo ago
Even that isn't sufficient - I've been using this for years and every so often AWCC still manages to get through. The only 100% protection from it is to use Image File Execution Options to match on the installer name to prevent it
4.
by r1ch 2mo ago
Great for merchants, not so much for consumers. Once the merchant has your money it's very difficult to get it back if things go wrong.
5.
by r1ch 4mo ago
Meta had(has?) a similar bug with one of their business manager features, the attacker has complete control of the initial body text which makes it highly convincing. Trying to report this was an exercise in futility, I guess they get so mu
6.
by r1ch 4mo ago
I've started to assume that any non-chain hotel is compromised after losing $2k to hackers that completely owned the hotel's email system. Thankfully DMARC made it irrefutable that it was their system at fault and they assumed lia
7.
by r1ch 5mo ago
The timeline is off too if the Trend Micro report is to be believed. It makes for a catchy headline, but a source is definitely warranted here.
8.
by r1ch 6mo ago
I recently had to go through the recovery flow for an admin account and it was wild. Despite Google manually unlocking the account and giving me a reset link, every login was forced to authenticate via SMS using the (removed) phone number.
9.
by r1ch 7mo ago
Anyone can request a CVE, this is sadly the most likely path towards getting it fixed.
10.
by r1ch 8mo ago
Every shared hosting provider has this risk. Critical projects should be using dedicated or VPS hosting, preferably with encrypted filesystems too as even datacenter techs can fall victim to social engineering. I'm pretty surprised tha
11.
by r1ch 8mo ago
Please do not take 5000mg/day of Vitamin D. The author confuses IU and mg which is very dangerous.
12.
by r1ch 9mo ago
Yes, that's standardized but is only rated for up to 30 meters at the higher speeds you get from it, so it's not very useful outside of server room / data center applications and you probably want to be using fiber at that po
13.
by r1ch 9mo ago
The bottleneck with SFTP / SCP / SSH is usually the server software - SSH can multiplex streams, so it implements its own TCP-style sliding windows for channel data. Unfortunately OpenSSH and similar server implementations suffer
14.
by r1ch 9mo ago
OP mentions using "Cat 7" cables - please don't buy these. Cat 7 isn't something that exists in TIA/EIA standards, only in ISO/IEC and it requires GG45 or TERA connectors. Cat 7 with RJ45 connectors isn't
15.
by r1ch 10mo ago
The modern way to do this is with the Content-Security-Policy: frame-ancestors directive: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/...
16.
by r1ch 11mo ago
Cloudflare will actually slow down TTFB for small, less popular sites since they don't maintain a keepalive connection to the origin. This means you pay an additional TCP/TLS setup cost from the Cloudflare POP to the origin which
17.
by r1ch 1y ago
Ironically the AI crawlers I do want to block - the million-IP-strong residential botnets that fake their user agents - Cloudflare doesn't detect at all.
18.
by r1ch 1y ago
At first they were easily detectable using HTTP header analysis - e.g. pretending to be Chrome but not sending the headers that Chrome always sends. Now it's a combination of TLS / HTTP protocol level analysis and application laye
19.
by r1ch 1y ago
Residential proxy botnets have exploded since LLMs became a thing. The amount of DDoS-level scraping we receive from residential IPs has exploded over the last year, one of our sites that typically sees around 10k unique IPs per day jumped
20.
by r1ch 1y ago
This is the same direction that Microsoft is taking Windows. Smart App Control is already rolling out to some regions - no .exe will run without a code signing certificate. https://learn.microsoft.com/en-us/windows&#x2F
21.
by r1ch 1y ago
Loss-based TCP congestion control and especially slow start are a relic from the 80s when the internet was a few dialup links and collapsed due to retransmissions. If an ISP's links can't handle a 50 KB burst of traffic then they
22.
by r1ch 2y ago
Thanks, somehow I missed that entry.
23.
by r1ch 2y ago
How did you deal with the length of the USB and display cables? I thought after 5m or so things would start falling apart. Are there active extenders and can they can handle 240+ Hz?
24.
by r1ch 2y ago
This can also happen with IP addresses. We recently moved one of our sites to a new IP and got a trickle of complaints about it being inaccessible from various authoritarian countries. After some digging, the new IP was used as a Tor bridge
25.
by r1ch 2y ago
The end user typically has their device compromised by using free apps where the developers were bribed $$$ to add the proxy "SDK". The botnet operator then rents out the bandwidth at exorbitant rates to anyone who will pay for it
26.
by r1ch 2y ago
The re-encrypted part isn't necessarily true though and you have no way of knowing. Users are misled because they see a nice secure lock icon in the browser, but that only protects the connection to the local Cloudflare POP, the rest o
27.
by r1ch 2y ago
I believe that's an Enterprise feature.
28.
by r1ch 2y ago
Search for "stress tester" and almost every ddos-for-hire site you find will be protected by Cloudflare.
29.
by r1ch 2y ago
That's why port preservation is the usual behavior.
30.
by r1ch 2y ago
Windows doesn't overcommit memory so without a pagefile the available virtual memory is greatly reduced, you can "run out" of memory quite easily with certain applications that allocate but don't use the memory.

More ›