benkillin

I think this, too.

not fiscal year

Zig

invoke-webrequest

Heh...

  > ... I use a heavily-modified Gentoo ...

The Free Market does not exist. It has been shown that the big banks can do whatever they want and if they make bad decisions and take risks that end up costing them billions the government will come and bail them out.

This looks like exactly what I was looking for.

I was looking for turnkey AuthN/AuthZ using OIDC for closed networks and self hosting, turnkey as in being able to drop a configured container in place and hit the ground running, and not being dex with keycloak.

you can also use your home router to do this if you run something like OPNSense (there is also pfsense but that uses a much older freebsd kernel that does not support newer NICs)

I think anything with iodine in it in a non dietary form should be avoided because your thyroid really likes grabbing onto iodine things and there is no telling if that could, for instance, cause hypothyroidism.

lets get on with it and get mini nuclear reactors in the form factor of connex containers going already! Or just more full sized nuclear power plants all around. It's the cleanest power that is useful at full scale loads that we have.

except every single manufacture is going down this road pretty much, they want to monetize all that data because more money equals more better, privacy be damned.

Why invent your own scripting language instead of using one of the infinity other existing languages?

I have not read the featured article, but based solely on the headline I have this to contribute: check out Veilid. [Veilid](https://veilid.com) was featured at DEFCON 31, and has this to say on their index page:

" Veilid allows anyone to build a distributed, private app. Veilid gives users the privacy to opt out of data collection and online tracking. Veilid is being built with user experience, privacy, and safety as our top priorities. It is open source and available to everyone to use and build upon.

Veilid goes above and beyond existing privacy technologies and has the potential to completely change the way people use the Internet. Veilid has no profit motive, which puts us in a unique position to promote ideals without the compromise of capitalism."

I just had to login to upvote this. I am a little ashamed to admit it took me a second to get it. Then, I chuckled :)

As for now, we haven’t found a way yet to include a logrotate configuration in the memory of the child before the coredump. Therefore, execution of commands is not possible without these strings in the memory.

Couldn't they just supply the logrotate config as the password (for su) which will be passed down for checking?

personally I use a script I developed a while ago for doing iptables directly, using awk to parse some txt files to apply the firewall config and then adding a script to execute the iptables script on boot:

https://github.com/benkillin/linux-firewall

the ip6 section needs some further development though - I have no need for it in my scenario at the moment.

Thank you for telling this story, I really needed to read it. I mean this sincerely.

0.0.0.0 is the address programs will listen on to be able to respond to any IP address assigned to the system.

When you are setting up a socket to listen for connections on a particular port you would specify 0.0.0.0 so then things can connect from anywhere like localhost or on any of the many possible IP addresses assigned to the machine, or you can specify a particular IP address and only be able to get traffic from that. For example if you wanted a program only reachable from the same machine you could listen on localhost (127.0.0.1) and then nothing external could directly connect to that particular service.

According to the change log, the guest to host escape vulnerability with the e1000 networking driver was not fixed, or at least it is not listed as being fixed. Is this correct that it is not fixed?

https://github.com/MorteNoir1/virtualbox_e1000_0day

How does this differ from scapy other than lua vs python?

What changes in the exchange if mutual tls authentication is being performed (aka client cert authentication)?

Would a mitm attack be necessary since DNS is UDP? Couldn't you just forge packets from likely dns hosts that the victims might use and just constantly send responses hoping that the victim makes a request for one of the hosts you are forging responses for, and maybe one of the packets beats the real response and gets parsed? Is there a sequence number or unique request ID that gets used in UDP dns requests that is required in the response to be accepted as a response?

You can get that with weechat + screen + glowingbear.

This exact suggestion is referenced in the article.

"To prevent the spoofed reflection attacks, all network operators should implement anti-spoof address filtering [RFC2827]. This prevents the trigger of the DRDoS."

http://tools.ietf.org/html/rfc2827

"This paper discusses a simple, effective, and straightforward method for using ingress traffic filtering to prohibit DoS attacks which use forged IP addresses to be propagated from 'behind' an Internet Service Provider's (ISP) aggregation point."

http://xkcd.com/903/

"Wikipedia trivia: if you take any article, click on the first link in the article text not in parentheses or italics, and then repeat, you will eventually end up at 'Philosophy'."

I have the same issue... not sure how to get them back either. I'm on windows 7 x64.

dropping the buffer makes it perform substantially slower - there are some benchmarks listed elsewhere on this thread

Why is this a story? Did they do anything other than plugging a device with hdmi output into a device with hdmi input? I expected to see some sort of special UI configuration to make the pi more ideal for being operated in a car at the very least.

just for the lolz, here is another way to do it without a buffer and using some java 8 features (lambdas) to avoid having to wrap the code in a try catch (technically you still are but it looks prettier IMHO):

    public class SimpleJavaTest 
    {
        public interface RunnableEx
        {
            // can't use Callable<Void> because that run method needs to return a value
            public abstract void run() throws Exception;
        }

        public static void main(String[] args) 
        {
            // write standard in to standard out:
            uncheck( () -> {
                int c;
                while( (c = System.in.read()) > -1)
                {
                    System.out.write(c);
                }
            } ).run();
        }

        public static Runnable uncheck(RunnableEx r)
        {
            return () -> {
                try
                {
                    r.run();
                }
                catch(Exception e)
                {
                    throw new RuntimeException(e.getMessage(), e);
                }
            };
        }
    }

That quote is referring to the outer layer of the suit only. This vote appears only to be voting on the outer protective layer of the suit while testing is being conducted on earth, and the outer layer will be replaced for actual space use.