HNHacker News
TopNewBestAskShowJobs

BehindTheMath

27 karma · joined October 7, 2022

submissionscomments
BehindTheMath··on The internet is no longer a safe haven
You don't need mTLS for that. Just block all IPs beside for Cloudflare's ranges.
BehindTheMath··on A story about bypassing air Canada's in-flight network restrictions
I haven't used iodine, but this seems simpler. Iodine wraps requests with actual DNS requests. In this case that wasn't needed, because port 53 wasn't filtered at all. So all they needed was a simple proxy on port 53.
BehindTheMath··on Scammed out of $130K via fake Google call, spoofed Google email and auth sync
https://xkcd.com/538/
BehindTheMath··on OpenIPC: Open IP Camera Firmware
What's wrong with Amcrest IP cameras?
BehindTheMath··on I use zip bombs to protect my server
aria-hidden="true" should take care of that.
BehindTheMath··on I use zip bombs to protect my server
Check out Modsecurity WAF and CoreRuleSet.
BehindTheMath··on Show HN: XPipe, a shell connection hub for SSH, Docker, K8s, VMs, and more
Doesn't that mean that you're charging extra from those that don't care about updates to subsidize them for those that do?
BehindTheMath··on Ask HN: Why buy domains and 301 redirect them to me?
Can't you check the Referer?
BehindTheMath··on 1 bug, $50k in bounties, a Zendesk backdoor
It's linked in the post.
BehindTheMath··on It is hard to recommend Google Cloud
Why not Cloud Domains?
BehindTheMath··on The Origins of Yiddish (2014)
Nearly all Israeli Haredi Jews speak Hebrew. For most, it's their primary language. Most do not speak Yiddish.
BehindTheMath··on British Library has been offline for three weeks
Isn't the point of salting to prevent dictionary attacks? That's still auth 101.
BehindTheMath··on Ask HN: Looking for an Alternative to Stripe
The BIN is not covered by PCI. There's no reason they can't provide the BIN for every card.
BehindTheMath··on Alphabet selling Google Domains assets to Squarespace
GCP has Cloud Domains. It's unclear to me what the future of that is.
BehindTheMath··on I gave commit rights to someone I didn't know (2016)
I maintained the pjax library at one point. This is what the author posted at the time:

https://twitter.com/MoOx/status/955903710617620482?t=BvPIWQ-...

BehindTheMath··on Nginx 1.25.0: experimental HTTP/3 support
https://www.nginx.com/about/the-nginx-name/