HNHacker News
TopNewBestAskShowJobs

wielebny

983 karma · joined March 21, 2013

submissionscomments
wielebny··on AWS Nuke – delete all resources associated with AWS account
Last time I've checked it was a lengthy process involving attaching a credit card, leaving the organization and then deleting the account. Has it been changed?
wielebny··on My own phone number is now spam texting me
> They speculated that it is because in India the person making the call or sending the text is the one who pays for it.

Wait, what, do people in US pay for receiving texts or calls?

wielebny··on Microsoft suspends product sales and services in Russia
Direct source: https://blogs.microsoft.com/on-the-issues/2022/03/04/microso...

Discussed at https://news.ycombinator.com/item?id=30554947

wielebny··on Should you use Let's Encrypt for internal hostnames?
That's not true. You can validate domains using dns-01, without exposing hosts.
wielebny··on Coding error at Santander Bank put millions into random accounts on Christmas
Forged check is more or less a bank error.
wielebny··on Show HN: Voiceliner – Capture structured braindumps on the go
Is it possible to change transcription language on iOS?
wielebny··on Log4j RCE Found
Worth noting: possible only because log line was malformed and logstash complained about it through log4j.
wielebny··on Log4j RCE Found
This is exploitable in applications that use Elastic Stack with logstash as a log processor. I've just been able to reproduce it in an Magento ecommerce with payload inserted into payments details.
wielebny··on Spamcop.net – This Domain Name Has Expired
"Old" www.spamcop.net was a CNAME to spamcop.net.edgekey.net.

Current www.spamcop.net resolves to 91.195.240.87 - a sedo parking host.

wielebny··on Brexit VAT rules: shipping notice on a Dutch ecommerce store
Are these services legal?
wielebny··on Linode launches free DDoS protection
I've been using OVH services to host game servers for several years now, and their "VAC" is a godsend. Other providers would prefer to terminate my account or offer some kind of protection for thousand of dollars.
wielebny··on Using GoAccess for self-hosted web analytics
goaccess does not deal with this either.

Also, Google Analytics (and other analytical solutions) give much more information about the visitors than can be inferred from access logs.

Not that I recommend using GA - I've dropped all analytical tools from my sites long time ago.

wielebny··on If You Can't Buy the Keyboard You Want, Build It Instead
I use ms natural keyboard 4000 just because of that - extra row of keys that can be programmed to the liking. It's a shame that it does not have a USB hub (previous version had it) and that newer versions lack this row.
wielebny··on HSTS from Top to Bottom
Not only it is stressful to configure, it can be used to hold your domain at ransom.
wielebny··on Don't bury or cremate – soon you may compost your corpse
In Poland municipality provides a place in ground, but for at most 20 years. After that the place is recycled for another burial. You're free to buy it though to prolong that term and in my opinion it's quite common among the elder ones.
wielebny··on How we send 22k emails every hour
Did you use anything else than stock rules?
wielebny··on Grafana v6.2
We have JMeter to pump the data to InfluxDB and then visualise them in Grafana.

Additionaly, you can see results while JMeter is still running.

wielebny··on Cloudflare's new DNS attracting 'gigabits per second' of rubbish
So, the traffic is being sniffed and analyzed, and that service was advertised as privacy-oriented?
wielebny··on AWS announces per-second billing for EC2 instances
Probably from some online brand monitoring service. I've used https://brand24.com/ and it was quite powerful.
wielebny··on Optionsbleed – HTTP OPTIONS method can leak Apache's server memory
After many repeated tests with multiple LIMIT sections in .htaccess (and without restarting apache2) i've managed to get a leak of part of config file:

  Allow: �E2�~,HEAD,,ex.html/,OPTIONS,POST,,HEAD,,HEAD,Pek�~,HEAD,,,ex.html/,GET,HEAD
wielebny··on Optionsbleed – HTTP OPTIONS method can leak Apache's server memory
Most certainly something is leaking:

  l-lbiegaj ~ -> curl -sI -X OPTIONS http://mysite/ | grep ^Allow
  Allow: allow,HEAD,GET,HEAD,POST,OPTIONS
Value returned in 'Allow' changes with every apache2 restart, but I haven't yet seen any parts of the config or something other than extraneous commans or 'allow' string.
wielebny··on Optionsbleed – HTTP OPTIONS method can leak Apache's server memory
I was able to reproduce this issue on Apache 2.2.22 with a legitimate method:

  <LIMIT GET>
  Allow from x.y.z.v
  Deny from all
  </LIMIT>

  for I in `seq 1 100`; do curl -sI -X OPTIONS http://myhost/ | grep ^Allow; done | uniq
  Allow: ,GET,HEAD,POST,OPTIONS
  Allow: GET,HEAD,POST,OPTIONS
  Allow: ,GET,HEAD,POST,OPTIONS
  Allow: GET,HEAD,POST,OPTIONS
wielebny··on Let’s Encrypt in the spotlight
Not true, it means that the certificate is not EV.

I see 'Secure' on my Chromium running under Debian, without any antivirus software.

wielebny··on The 10x developer is not a myth (2013)
Referenced study: Exploratory experimental studies comparing online and offline programming performance (Sackman, Erikson, and Grant) - http://dl.acm.org/citation.cfm?id=362858
wielebny··on Like Tweeting, but You Can't Use the Letter E
At the same page they describe themselves as:

'A Dcntralizd and Fdratd Social Ntwork'.

wielebny··on Gmvault: Backup and restore your Gmail account
I've been using gmvault for only one feature: ability to fetch e-mails that match a certain filter.
wielebny··on The Minecraft Generation
If you'll boy or girl is interested in Minecraft, and you want to teach them programming, then I strongly suggest ScriptCraft - a Minecraft server mod that allows scripting in JavaScript.

https://github.com/walterhiggins/ScriptCraft/blob/master/doc...

wielebny··on Leaving Beta, New Sponsors
It it also possible to perform DNS validation, which is my preferred method as I can automate certificate generation/replacement from Ansible.
wielebny··on Tesla autopilot stops a collision [video]
Maybe the driver should focus more on braking than honking?
wielebny··on Complete LiDAR Scan of England Publicly Available
LIDAR scans of Poland are available publicly from some time: http://geoportal.gov.pl/dane/numeryczne-modele-wysokosciowe
← PreviousPage 2 of 3Next →