micro-ram

ZFS has open my eyes to /dev/disk/by-id/. It's the only way when you have many of the exact same make/model/size drives per machine. You will learn by fire the first time you need to determine which drive you need to replace.

ShellExView from Nirsoft

Agreed. I get the intended result of 7 5 7 on macOS 10.13.6 LLVM.

  Mac:tmp $ clang -O3 mem1d.c ; ./a.out
  diff = -96
  x = 0x7f9f4fc00300, *x = 7
  y = 0x7f9f4fc00360, *y = 5
  p = 0x7f9f4fc00300, *p = 7

  Mac:tmp $ diff mem1d.c mem2d.c 
  13c13
  <   int *p = (int *)(yi + diff);
  ---
  >   int *p = (int *)(yi - 96);

  Mac:tmp $ clang -O3 mem2d.c ; ./a.out
  diff = -96
  x = 0x7fc2b5c00300, *x = 7
  y = 0x7fc2b5c00360, *y = 5
  p = 0x7fc2b5c00300, *p = 7

  Mac:tmp$ clang --version
  Apple LLVM version 10.0.0 (clang-1000.11.45.2)
  Target: x86_64-apple-darwin17.7.0
  Thread model: posix

What about the requirement to run signed code from power on?

For anyone interested, there is a video on Amazon Prime called The Science of Fasting 2016.

and lost a lot of trust as a result.

GRC still has a utility for click of death.

https://www.grc.com/tip/clickdeath.htm

Install IPvFoo in Chrome and watch how many servers have embraced IPv6.

^ This. Print your QR codes and put them in the safe.

What happened to the other 16 threads?

18(core) * 4(cpus) * 2(+ht) = 144

KB SSL Enforcer allows you to automatically build your own enforced HTTPS list.

https://chrome.google.com/webstore/detail/kb-ssl-enforcer/fl...

Just as a test I decided today (Feb 13, 2016) to download WinSCP. Fully surrounding the actual download link[1] are no less than 3 ads with the word "Download" prominently displayed. The project page[2] was even worse with 4 "Download" ads. This is still unacceptable.

[1] http://imgur.com/XGkkPag

[2] http://imgur.com/822v7CN

Here is a one line Linux/OSX script that builds the sub-resource integrity hash string of js & css files.

https://gist.github.com/anonymous/e05e0ff71993d6a6d757

Amazon should simply treat users with active 2FA accounts as high security accounts. High security accounts must go through a much more rigorous validation when speaking with support.

Unless you have a short life 90 day cert from LetsEncrypt.org then your pinning doesn't last very long.

> Do you have a cite for this claim?

Use Little Snitch firewall and you will see it.

VIP Tag/Folder http://www.howtogeek.com/208904/how-to-only-get-notification...

I use ScriptSafe (formerly ScriptNo) in Chrome similar to NoScript on Firefox. Also check out uMatrix.

https://code.google.com/p/scriptno/

I always hoped CAcert.org would have gotten us there sooner, but that never happened. Agreed letsencrypt.org will radically change the cert market. I have already stopped renewing some personal certs and am using CloudFlare free SSL with a self-signed cert on the origin.

Agreed. It's time to move on. Uninstall Flash & chrome://plugins Disable.

http://occupyflash.org/

Blocking third party JS does not help me offload the libraries to a CDN (ex. cdnjs.com) to save server bandwidth.

Is Openvpn even necessary? Open 3389 to only your IP address in the security group.

Agreed. Only use the provided AMI for testing and learning how to create your own.

Interesting approach comparing 2 DNS lookups. What about port mirroring the upstream router connection from a smart switch? Would it overload the Pi? Then it would be a simple plug and play device you could connect to any lan (with mirroring) for a check-up.

I think Apple just needs to review their policy and add another entitlement "Entire Current User Folder ~/" to allow apps that traditionally cannot be sandboxed. I am sure they want us to re-imagine a way for FTP apps to work, but I don't want to change my workflow. I want to be able to browse any folder on my Mac on the left pane. So I won't buy the Mac App Store version. I fully agree with Panic and why they bailed out.

+1 for CyberDuck

It might have been low last year. This year with the deprecation of Windows XP, pagerank boost for HTTPS[1] and free certs and caching from CloudFlare[2] all of my sites are now SNI. Some are even HSTS.

[1] http://googleonlinesecurity.blogspot.co.uk/2014/08/https-as-...

[2] https://www.cloudflare.com/ssl

Use no-script (FF) or script-safe (chrome). It never reloaded on me.

2.5Gbps = NBASE-T. http://www.nbaset.org/

5Gbps = MGBASE-T. http://www.mgbasetalliance.org/

My real world testing of 1.3Gbps 802.11ac only yields about 250Mbps of real throughput. Wifi is half duplex and has more overhead than Ethernet.

Good interview with Matthew Gast on 802.11ac

http://twit.tv/show/this-week-in-enterprise-tech/135

DesqView had DVANSI.COM IIRC