tgragnato

5 ms·

1.
by tgragnato 5y ago
> a giant golden cage where debt-laden poor people look at exagerated external events and told that at least in America they can starve while speaking out Making the Chinese population believe that by enduring the deprivation of their fr
2.
by tgragnato 5y ago
Classifying IP sets is a fantastic idea, I’ve seen mail bounce for the ASN. That parameter is unchanged between IPv4 and IPv6. Certainly, you can do it only when the provider is a classic spam heaven.
3.
by tgragnato 5y ago
It is the most practical solution to make sure there are no leaks to G. The most annoying thing is that reCAPTCHA stop working: more website administrator should consider migrating to hCaptcha.
4.
by tgragnato 5y ago
Funny thing is that they used zcombinator[.]co for one of their C2
5.
by tgragnato 5y ago
The real difference is in latency: I tend to use the same operator on the fixed and mobile line, with Wireguard. SSH, SMB and Matrix respond almost as if you were in LAN. If I add the cost for bandwidth and storage of a data center, then th
6.
by tgragnato 5y ago
iAd is still alive in Apple products, but it’s not an ad network anymore. https://developer.apple.com/support/iad/ Did I miss some other product?
7.
by tgragnato 5y ago
> How do both parties determine the keys used during a conversation? They don’t: public key cryptography is not initially used. The sender generates a random AES-256 key, applies it in CTR mode and uploads the encrypted blob to GCS. Ever
8.
by tgragnato 5y ago
No? https://cloud.google.com/storage/docs/access-control It just means Google may provide access to metadata outside of Apple’s control. Those metadata could be useful to do classification of anomalies on the basi
9.
by tgragnato 5y ago
On one occasion the traffic to google cloud is systematically not proxied: every time one sends an attachment in iMessage, the file (or the media) is encrypted on device and sent to gcs-{eu,us,asia}-00002(?).content-storage-upload.googleapi
10.
by tgragnato 5y ago
I think that in this context the meaning of the term trust is different. Any code executing in privileged mode can bypass security, and is therefore inherently part of a system's trusted computing base (TCB). (Linux is a monolithic ker
11.
CCP 100: Xi warns China will not be 'oppressed' in anniversary speech(bbc.com)
1 points by tgragnato 5y ago|0 comments
12.
by tgragnato 5y ago
Dating at work is especially a bad idea. Things could be perfect, but (with high probability) a relationship will abruptly end and managing every social aspect can be difficult.
13.
Orphaned by Windows 11? I’m mad as hell and I’m not gonna take it anymore(zdnet.com)
3 points by tgragnato 5y ago|0 comments
14.
by tgragnato 5y ago
Or the botnet was DDoSing, and someone decided they had enough. (it would not be the first time)
15.
by tgragnato 5y ago
> Speculative, and likely contains errors, misconceptions, and omissions; thoughtful, informed comments are welcome. Intended for a general scientifically curious audience, not requiring much detailed specialist background. I enjoyed the
16.
by tgragnato 5y ago
The situation is a little better compared to Windows, but it's not perfect. I always disable telemetry, but iphonesubmissions.apple.com:443, radarsubmissions.apple.com:443 and securemetrics.apple.com:443 are still contacted. People mes
17.
by tgragnato 5y ago
> safety of its HTTPS filtering feature Please don't terminate your TLS, they have extensions for every major browser. With the extension + AdGuard DNS your coverage should be pretty good. > relaying to an IP block in Russia In R
18.
by tgragnato 5y ago
Exactly Bittorrent protocol encryption is only useful to protest against the use of DPI for bandwidth shaping, it has no influence on privacy. Even with (the weak) encryption, connections to trackers and DHT nodes are easily identified
19.
High-Level Chinese Defection Rumored(spytalk.co)
5 points by tgragnato 5y ago|0 comments
20.
by tgragnato 5y ago
The linked publication https://www.scottaaronson.com/papers/giqtm3.pdf speculates that the universe and our brain are "quantum Turing machines". Given the assumptions, we need to count in the fundamental limi
21.
by tgragnato 5y ago
Many care that macOS is Unix-like, I doubt anyone cares about the certification.
22.
by tgragnato 5y ago
I think Apple would need to ship a different OS in China. Cloud services offered there must store data in the country and be operated by Chinese companies. (Apple is complying with this) But Chinese companies HAVE TO assist the authorities
23.
by tgragnato 5y ago
I'd like to access their data and know which percentage of people can be targeted this way. Maybe it had a higher success rate back then, today you can find sex with with an app, no money involved. My suspicion is that they needed to t
24.
by tgragnato 5y ago
I’m pretty sure EDRs play a role in the professional protection of 100k+ IP. At home, OS and software updates combined with network monitoring should be sufficient for the more common threat models. One needs to draw a line somewhere. EDRs
25.
by tgragnato 5y ago
A good starting point is to set up a network tap and analyze the logs, manually. Obviously, it's one of those things that is rarely done by the people who use fancy security products. .. because it’s hard E.g.: Botnet traffic is often
26.
by tgragnato 5y ago
It's not public because of licensing. But it's a simple reimplementation of https://www.wsusoffline.net . Source code here: https://gitlab.com/wsusoffline/wsusoffline
27.
by tgragnato 5y ago
There are big differences. Private relay is secure as long as Apple and the third party do not cooperate, but end to end flow correlation is much easier because streams are not isolated. Onion routing is much more sophisticated than private
28.
What the NSA provides to its foreign partners, and vice versa(electrospaces.net)
3 points by tgragnato 5y ago|0 comments
29.
by tgragnato 5y ago
"The main contribution in rationalism and empiricism are not French" does not equal "French speakers did not contribute relevant knowledge in rationalism or empiricism" https://en.wikipedia.org/wiki/
30.
by tgragnato 5y ago
Please do not attribute to me things I did not write. I did not mention positivism, which is not necessarily embedded in the political environment we have today. The main contributions in rationalism and empiricism are not French. German ph

More ›