Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)IR
i_am_not_a_robot @discuss.tchncs.de
Posts 0
Comments 147
Krasnoyarsk students to receive 100,000 rubles for early childbirth.
  • You need to factor in other economic factors. How much is this in terms of median salary? How much is this in terms of child care costs? Currency conversion is based on how much the currency is worth in the other country.

  • Brazil top judge accuses X of ‘willful’ circumvention of court-ordered block
  • We can all hate Elon and Twitter, but we're really arguing in favor of internet censorship and extraditions for foreign citizens living in their home country that, knowingly or unknowngly, assisted or has employees that assisted people in circumventing that censorship.

  • Brazil top judge accuses X of ‘willful’ circumvention of court-ordered block
  • Elon is not in Brazil, and making the service available via CloudFlare was not an action taken in Brazil. Brazil should be able to seize assets in Brazil and change how they block access to prevent Twitter from doing business in Brazil, but arresting people in other countries for something like this is extreme.

  • Paid SSL vs Letsencrypt
  • Having a non-garbage domain provider can be a luxury. I used to work at a place where we were paying boatloads of money for certificates from Sectigo for internal services, and they were charging us extra per additional name and even more if we wanted a wildcard, even though it didn't cost them anything to include those options. Getting IT to set up the DNS records for Let's Encrypt DNS verification was never going to happen.

  • How can I keep my forwarded port secure?
  • A large percentage of those hosts with SSH enabled are cloud machines because it's standard for cloud machines to be only accessible by SSH by default. I've never seen a serious security guide that says to set up a VPN and move SSH behind the VPN, although some cloud instances are inherently like this because they're on a virtual private network managed by the hosting provider for other reasons.

    SSH is much simpler and more universal than a VPN. You can often use SSH port forwarding to access services without configuring a VPN. Recommending everyone to set up a VPN for everything makes networking and remote access much more complicated for new users.

  • How can I keep my forwarded port secure?
  • Shodan reports that 35,780,216 hosts have SSH exposed to the internet.

    Moving SSH to ports other than 22 is not security. The bots trying port 22 on random addresses with random passwords don't have a chance of getting in unless you're using password authentication with weak passwords or your SSH is very old.

    SSH security updates are very infrequent and it takes practically no effort to keep SSH up to date. If you're using a stable distribution, just enable automatic security updates.

  • Intel confirms no recall for Raptor Lake CPUs, microcode won’t fix affected units
  • They can most likely prevent further breakdown through software. If the meters and controls are functioning correctly, they can undervolt the CPU. But it's not really a fix if that comes with a performance penalty. If it's a bug where the CPU maxes out the voltage when idle so it can do nothing faster, that could be fixed with no performance penalty, but that seems unlikely.

  • Intel confirms no recall for Raptor Lake CPUs, microcode won’t fix affected units
  • I've heard speculation that this is exasperated by a feature where the CPU increases the voltage to boost clocks when running single core workloads at low temperatures. If that's true, having less load or better cooling may be detrimental to the life of the processor.

  • Cloudflare's recent blog regarding polyfill shows that Cloudflare never authorized Polyfill to use their name in their product
  • Built bundles are not affected. The service is supposed to figure out which polyfills are required by a particular browser and serve different scripts. Because it's serving different scripts, the scripts cannot be bundled or secured using SRI. That would defeat the purpose of the service.

  • Cloudflare's recent blog regarding polyfill shows that Cloudflare never authorized Polyfill to use their name in their product
  • Code pulled from GitHub or NPM can be audited and it behaves consistently after it has been copied. If the code has a high reputation and gets incorporated into bundles, the code in the bundles doesn't change. If the project becomes malicious, only recently created bundles are affected. This code is pulled from polyfill.io every time somebody visits the page and recently polyfill.io has been hijacked to sometimes send malicious code instead. Websites that have been up for years can be affected by this.