How can you block it, if the browser itself is doing the communication, over https no-less?
DoH was made to stop censorship, which includes blocking; if you could just block it, then whats the point of DoH?
440 karma · joined March 28, 2017
DoH was made to stop censorship, which includes blocking; if you could just block it, then whats the point of DoH?
Everyone on this article saying it's FUD is either a framework junky, isn't seeing the bigger picture, or just focus on one wrong thing in the article.
For a business to really give a positive, something needs to change, otherwise they stay negative.
Edit:
> and we expect we will continue to incur net losses for the foreseeable future
That is not a common statement.
I never got this... Why go public if you literally say you won't make money?
Who would buy stock in something that will not return a positive?
Are they starving for money and hope some public trading gets them a boost?
Edit: It seems to be following the same pattern as the other tech IPOs recently, just to cash out the early investors.
No amount of reading online would get her to change her mind.
She was worth it though.
You have Mechanical DERs, Electrical DERs, Software DERs, and others.
A good example for the HN crowd, the Software DER. Per regulations, the software standard is the DO-178B. The DER isn't actually spinning up the dev environment, or building the piece of software used; just checking to make sure the process was followed. (the dev environment was documented, what dependancies...) These people are a step up from code reviewers and just check paperwork more than software.
The FAA itself isn't concerned with safety; it is just there to make sure there is a papertrail to follow in the event of a safety issue.
Huh? I get if you 'lose' a database backup, but hashing on the server side has always been the wrong way to do things. If you hash it in JS before the request is sent, there is no possible way for you, or any attacker to get the raw user password; only if they literally change production code to send a new request to another endpoint.
> users we confirmed to be affected.
So everyone who logged in during the event?
> resetting passwords for all accounts that were active at the time of the 2015 incident
That's what should have happened the first time. Once you have attacker modified code, you cannot trust what you have on file is accurate or not already taken.
Is that unreasonable?
I mean, I cannot possibly expect myself to go through my backups and delete a folder from everything, down to the multi-year incremental.
Once you start tampering with a backup, it stops being a backup.
I'm more inclined to say they don't know who it was, but pointing fingers, and Black Friday to maximize the potential damages reward.
The legal case also says "unknown individual"; so they could be a run-of-the-mill reporter or something.
A lot of what Torguard is saying in the case is pretty benign. An email from header can be faked, trade secrets, if left on the open web... aren't really secret anymore.
Nord isnt in a clean place either. Their response is making claims that the legal case doesnt even touch.
I ask because I keep reading about how Google is bad because of their business, but I haven't seen an actual pcap, or any reporting for that matter, on what Google actually sends back home.
If you have, or know of a place that has done that, I'd be interested to read about it.
Until then, Chrome, and Firefox are just more tools in my arsenal; and people trying to get me to ditch one, just because they dont like it, is just outright dumb.
You target people who want to go away from Google, yet you have even worse transparency on what you're running.
Edit: As a fact... it is mail-in-a-box... This is worse than I thought. (Proof: https://box.normail.co/admin)
Who in their right mind would give $50/year to someone they've never met, that has no real worth, and is peddling a free software suite as the real deal to get away from Google.
What good is that is the browser uses their own list? Literally that's what the article is saying. Firefox will force users to use ones that break the top-down approach on how software works. If I set a DHCP option for DoH, and setup my own DoH resolver, Firefox wont care, they will jsut use their list.
This also opens up possibilities for selling positions on the trusted list, because we've seen that happen before (adblock, or the firefox Mr Robot extension.)
Firefox itself, with plays like this are trying to make a decision about the whole, when they are completely forgetting the corporate side.
Think a corporate network. If I as a sysadmin set our DHCP options to give out our own resolvers, I expect that every machine on the domain to use ours.
DoH breaks that completely; and hence the network operator should have the final say.
As a sysadmin myself, if browsers are overriding the basic model of top down, and it hurts me, because when something is wrong, I cant just look on my machine, I have to check which browser they use... that is the antithesis of the problem, because when DoH doesn't work but normal DNS does, then I'm flat out of options.
This is why I choose not to use Firefox or any of the DoH mainline providers (Cloudflare,) and I go out of my way to make sure users cant do it.
Honestly asking, why is Wikimedia joining W3C a good thing? If anything, I think, it forces Wikimedia's hand to cave when the DRM pressure hits again.
They already do, and it's supposed to be limited per law, it's called the leverage ratio.
Most people who have those smart devices aren't really in the technical field. They won't have VLANs segmenting their network, or sniffers watching, let alone a proper firewall.
Look at Mirai; took over smart devices and instead of gaining footholds into everyones network; just used all the outbound traffic.
I wouldn't dismiss the claim just because an AV company said it.
If companies such as Facebook, or Google itself, had to wait until the EAP, then Anon (Unrelated to company) could have the Facebook.dev, or Google.dev domain; leading to confusion, and ultimately lawsuits for the domain.
I'm 90% sure there is a rule with IANA to allow companies to claim their brand before it goes public.
Speaking of public; the EAP is nothing but a price gouging scheme. Since anyone could join the 'EAP' it is public, but they are structuring the fees such only those who have enough to throw away can use it... The fact is, the .dev TLD is GA...
If you're using recover, it's probably time to rewrite the func.
I say this because Go forces you (minus just ignoring with _) to error check; so panic's shouldn't happen to start with.
DNS over HTTPs isn't just a Chrome issue; firefox are the ones who are actually shoving it down your throat.
I know most users here on HN are firefox users, but come on... It's an issue with all browsers, not individual.
I have a few modular power supplies around from different vendors, and I made the mistake of using one cable in a different vendors supply.
The supply side had the same connections; so I thought that I could just mix-and-match.
Turns out, that even though the connections are standardized, I ended up putting ground on a 5v pin, 12v on the 5v, 3.3v on the 3.3v (magically) and 5v on the 12v pin on a standard SATA connector.
As a result, I fried several hard drives, because the output of the supplies wasn't standardized for the connector type. I can't even imagine an end-user using a volt-meter to check which are compatible with which vendor.
This was a problem before USB-C.
TL;DL: Check your modular supply cables, and don't use other vendors cables.
Why on earth would you rather something that takes up 100-200 MB over something that uses less than 5 MB (my biggest memory hog putty on Windows)
With that mindset, your 16 GB of RAM will go away after a few programs, because the devs weren't worried about memory usage. That is just the wrong mindset to have as a developer.
Apps like this are making things needlessly complicated, just for the sake of complicating.
Seriously, why?
Not only is it electron based, so my memory usage for a terminal is stupid high, but what sets this apart from your standard terminals, because maybe plugins?
I'd trust the standards over this any day, just because of handling of edge-cases, unicode comes to mind.
> Incentives from Texas include as much as $25 million in taxpayer-funded grants, and a 15-year property tax abatement possibly worth tens of millions of dollars
That's literally what Amazon was forcing cities to do to each-other.
People don't understand that corporations, and to a larger extent, governments, are Medusa. You can cut a snake off, but there are more, who were trained by {executive}. (And it doesn't actually stop the {bad_practice} from happening; the head wasn't cut off.) (And for those who really want the myth, the head still turned people to stone, IE 'we've always done it this way.')
Don't get me wrong; as a net-isizen, I want Pai to rot in hell for everything he's done, but what is the rational behind putting people in jail?
USA already has enough people incarcerated from tiny drug charges; what makes this any better? Throwing people in jail won't solve anything, so why is that the biggest reaction to stuff like this?
I haven't actually seen anything 'new' come out of DigitalOcean in years.