throwfaraway398

4 ms·

1.
by throwfaraway398 1y ago
I saw there's an option to match on a cgroup among nft meta expressions (but I've never tried it). It could be enough if you just want to add per-process firewall rules, but not configure an additional namespace with it's ass
2.
by throwfaraway398 2y ago
It's funny because one thing I like about ansible is how easy it is to get the reference doc for any module with `ansible-doc -t module`. I do sometimes struggle to find the right doc when I'm searching for something about ansible
3.
by throwfaraway398 2y ago
It's possible but the way the connection is blocked is surprising. If you're blocking based on an IP you'd just drop the first syn and the client would never receive the syn-ack. If you're blocking based on the SNI you w
4.
by throwfaraway398 2y ago
Besides that, the author points out that the final handshake ACK never reaches the server and that packet is small, not going to go over the mtu.
5.
by throwfaraway398 3y ago
I would go for a 1u with redundant PSUs on each sides and with 4 hard drives in the front (the spinning kind, not those fancy nmve thingy) to counterbalance the PSUs.It should be pretty well balanced without being too heavy or big to handle
6.
by throwfaraway398 3y ago
optical fiber ? it may cost a bit more than copper for the transceivers (is that still true nowadays?) but given the price of the hardware i doubt it's really an issue.
7.
by throwfaraway398 3y ago
It seems to me that in all these trolley problems, the real villain of the story is the philosopher that created the situation in the first place. Just something to consider before you switch careers...
8.
by throwfaraway398 3y ago
Something like the JVM security manager ? https://docs.oracle.com/javase/8/docs/api/java/lang/Security... I wonder if anyone tried to use it to limit dependency risk in that way.
9.
by throwfaraway398 3y ago
I wouldn't even call it a solution . If you have a trustworthy dependency that uses, say, net and fs APIs, and that dependency suddenly becomes malicious, the malicious update will still be able to wreak havoc without increasing its A
10.
by throwfaraway398 3y ago
all packets in and out Are you sure about that ? According to man tc, it only works on egress.
11.
by throwfaraway398 3y ago
With these specs, I wonder if some countries military wouldn't be willing to offer them more money than they could ever make with deliveries... (At least on a per-drone basis)
12.
by throwfaraway398 3y ago
Original source from march 2022 : https://pure.tue.nl/ws/portalfiles/portal/197416841/20220325... page 71, thanks to wikipedia
13.
by throwfaraway398 3y ago
I don't get the lag. They first started measure in 2021 for the iphone 12. Did it take 2 years to check the result ? Is it from a new test ? https://data.anfr.fr/anfr/visualisation/table/?id=ad8014ec-f...