HN user

Chickenosaurus

158 karma

[ my public key: https://keybase.io/nicktr; my proof: https://keybase.io/nicktr/sigs/aWe5NsodFv1YkKuw33f6Wh95HCX7eTzPIWScVNFbamE ]

Posts5
Comments67
View on HN

Netcup was founded in my hometown in Germany. They have a very good reputation. However, they were aquired a while ago by Anexia. I am not sure if that changed anything.

You can use the kubectl debug command to add ephemeral containers to a running Pod. It's an alpha feature introduced in v1.18.

The ephemeral debug container can contain htop while the application container doesn't. This way minimal application containers aren't complicating debugging when something goes wrong :)

This theory doesn't make sense to me. Banks could simply buy foreign currency to achieve the same without the additional risk of defaulting lenders.

It seems to me this bot could be disabled.

Every bot has a list of peers and their SSH credentials. This way, peers can reinfect machines that were restarted, thus allowing the bot to be volatile on the infected machine.

The article says the researchers can join the peer-to-peer network. The researchers should be able to get a list of all infected machines including SSH credentials. These credentials could be used to remove the backdoor SSH key, kill the bot & netcat processes and maybe change the SSH password on all infected machines at the same time.

Am I missing something?

If a cryptographic hash function is used, the security of this scheme doesn't rely on keeping the algorithm secret, though. Therefore, it's not security through obscurity. Of course, weaknesses could still exist (e. g. a too small input space because the ID that is hashed has too little entropy).

Yes, the laws don't care about who you bank with. If your "center of life" is in Germany, you are required to pay income taxes. Although "center of life" is not defined in detail in german tax law, there are a number of known indicators that are considered. For example, if you reside in Germany for 183 days per year or more, you are required to pay income tax on all of your income.

That might work nicely for plain TCP traffic, but it's not very useful for TLS encrypted connections by itself.

An attacker wants to decrypt the packets passed on as the man in the middle without alerting the victim. A big red "insecure connection" browser warning due to an untrusted certificate used by the MITM can easily thwart the attack.

To make this work, the attacker needs access to a CA the victim trusts to sign certificates on the fly. If the attack is limited to a single target page, stealing the associated private key from the legitimate website operator is an option, too.

There are some downsides to that approach. The <form> element has semantic meaning which is lost if it's missing. Screen readers for blind people, browser features such as form auto-fill etc. might not work as expected without this semantic information.

Most web applications I have seen opt to use the form element. The default form browser behaviour can be suppressed easily.

I completely agree. Having used Manjaro (xfce and i3 variants) as main OS for half a year, it has been a good experience.

To be fair, I can't compare with other distros as this was the first time I used Linux as main OS.

It's great WhatsApp took steps to prevent the spread of false information but that isn't the root of the problem. The root of the problem is of a cultural nature.

At present there is no law that criminalises mob killings. For that reason, the perpetrators are often not prosecuted by the police. A law that makes clear mob killings are unacceptable would go a long way in changing the cultural stance towards such acts.

Thankfully, the Manav Suraksha Kanoon (law to protect humans) could close this legal gap soon.

Partition tolerance isn't about a system's behavior when some part of the system is down. Partition tolerance is about preventing diverging state in multiple sets of nodes that can't reach the nodes in another set, usually because of networking problems.

I do not see how a person making 50k € in Germany would have a gross/net difference of 50 %.

According to [1], the gross/net difference would be about 34 % in the worst case (highest tax class, no children, not married etc.), which includes social security, health insurance and so on. The calculator gives realistic results for my own income.

[1] https://www.brutto-netto-rechner.info/

The major advantage IoC provides is decoupling of components. Components do not instantiate their dependencies and therefore are not coupled to specific dependency implementations. Any dependency that satisfies the interface the component expects can be injected.

This is especially useful when implementing tests because it is easy to inject mock implementations of dependencies.