thegeekbin

What this really says that they opened a hole which got them into a questionable legal area by removing them, and they regret not just remaining neutral.

It comes down to content moderation. If a company begins to moderate content that travels through its network, it can be held liable and forced to remove things that any entity or governmental body could disagree with.

For example that means if the Republican Party was hosting on Cloudflare and the Democrat Party disagreed with the Republican Party, they could force Cloudflare to remove the Republican Party's websites from transiting their network.

Another example is if the Washington Post and Fox news both went through Cloudflare, and Fox disagreed with the Washington Post they could force Cloudflare to remove the Washington Post.

The moment you set the precedence it becomes an expectation -- by Cloudflare remaining neutral they can't be forced into that position.

I’m glad Cloudflare is taking a neutral stance to this. I’ve long said if a service provider, in any capacity, starts moderating content without a court order then it’s a slippery slope. I’m not saying the sites are good, but, why does Cloudflare need to be the internet police here? They can’t and shouldn’t be.

Neutrality is key, how would you feel if your content was suddenly pulled because someone on the internet disagreed?

Packet Rabbit Inc | Multiple Roles | Remote | Contract

We're a young, energetic company hiring for multiple roles on contract. We help companies build everything from custom-designed software to entire networks to power hundreds of gigabits a second of traffic.

We're hiring for the following positions:

- Jr Systems Administrator (EST timezone preferred) - Jr Network Engineer (EST timezone preferred) - Jr Systems Administrator (GMT to GMT+2 timezone preferred)

A brief:

- Our choice of Linux OS on managed systems and machines is Ubuntu (mixture of 20.04 LTS, 21.04 currently), with some various Alma/CentOS thrown in the mix - We work with various industries (ecommerce, networking/security, IoT, etc) and take security very seriously - Our clients span multiple countries and timezones, from LA to AU

Here's what we're looking for:

- You know Linux pretty good - You know Ansible, you've used it (we do it a lot!) - You have a good understanding of Python (we use Python to automate a lot of system monitoring alongside ansible for automating deployments/updates/tasks) - You're comfortable with some PHP (Symfony/Laravel/Wordpress) - You're comfortable with some Go (we're just trying some new things here, so more the better!) - You understand security in environments (eg, PCI compliance, SOC2, etc) - You're good at communicating and are able to self-prioritize tasks - You maintain a good work life balance

If this sounds like fun to you, drop your resume to: team[@]packetrabbitinc[.]com along with a brief cover letter and we'll be in touch!

As a network operator, you would be surprised how many AS operators are hostile or simply don’t respond. It’s unfortunately very common, even Tier-1’s are hostile.

Out of the last month, I sent out 191 abuse reports, of which 10 got replied to, 2 were resolved 6 were “no f** off” style, and 2 were told “can’t fix / won’t fix / don’t know how to fix”.

I’m not just referring to Chinese ASNs either, some US Telco’s, German, Australia even.

Why punish a group for one bad actor?

I mean, why not? What Uber and the other companies who are doing this is entirely legal -- but, probably pretty costly at 500k dutch.

Uber probably are doing something dodgy, with all these shell companies, but this opening remark just shouts "Don't trust this source - they don't know what they are talking about".

Uber, like all massive companies, are always doing dodgy tax avoidance things. But, even if they're doing tax avoidance, it's still legal as long as it's not blatant fraud.

Like all media companies, Business Insider has manipulated the content to cause outrage with their target markets for readers.

Though, on the topic of wording data, it's always interesting to see how media organizations & companies as a whole swing things, for example:

"Uber claimed $4.5 billion in global operating losses ... in reality, it brought in $5.8 billion in operating revenue" could've been written as:

"Uber brought in $5.8 billion in operating revenue, however, declared a loss of $4.5 billion"

or

"In a 2019 filing, Uber declared a $4.5 billion loss, despite earning $5.8 billion in operating revenue."

If you want to do anything, build it on-top of Matrix (the protocol).

You're late to the party. Matrix & Element do a fine job at this, and can be easily customized.

Frankly, it's been long suggested by the government to do that. I would not be surprised if they did as well.

In Canada, our freedom of expression is limited by whatever the Government deems appropriate:

Freedom of expression in Canada is protected as a "fundamental freedom" by Section 2 of the Canadian Charter of Rights and Freedoms. The Charter also permits the government to enforce "reasonable" limits.

Unfortunately, there is not much guidelines these days on what "reasonable" is considered. I like to hope it would not be abused...

I was personally affected by it, it appears they kept the announcement of the prefixes live in those datacenters but it was similar to being blackholed in those POPs. It caused 8 hour of outages for me and many people I know who go through these POPs.

All the free CF sites I've got were down for those 8 hours via those POPs, and, I had many customers calling to ask why their site was doing and had to explain "sorry, Cloudflare broke just these two POPs..."

I'm not going to rely on Cloudflare Pages personally... It's concerning to see they let free traffic in regions be broken for over 8 hours _without_ redirecting traffic to another working PoP as well[0].

0: https://www.cloudflarestatus.com/incidents/qjwxv73chh5b

ProtonMail Calendar works fine now... give it a shot?

In my opinion, the right decision is to release your research and have the vulnerabilities patched. I'm not a fan of the argument "only we know the bug" "it's for counterterrorism, seriously"... because I'm doubtful. If you found the bug, odds are someone else given the effort could.

Secondly, I think it's fair to say governments absolutely abuse any vulnerability they can at any point in time.

I miss the ascii art... it's rare to see these days.

Have any bridge to Matrix? It would be pretty awesome to join.

In relaxed terms, NFT is a special type of token that is universally unique. There is no two identical tokens, and by holding this "token", it's like holding a certified purchase receipt. It's the "proof of ownership" for this item.

Think of it like a freshly printed 10 dollar bill - it's all unique because of the serial number, and there's no two bills with the identical serial number (in theory on bills... in practice on crypto it is truly unique)

It ends up becoming an instant droplist for me. If I can't navigate how I want, then I won't visit the site until it's resolved.

Not on topic for the actual product... but please remove that terrible scrolling behaviour. I hate when websites do this, it makes the user experience (imo) much worse to just "jump" sections if I try to scroll a tiny bit.

I expect the iPhone edition has the same trackers in it. It's quite disgusting, frankly. I don't see a logical need for these trackers.

Your ssh key should never leave a host.

If you need an ssh key for whatever reason from a host (for example, git pulls on a staging machine), you should generate one on that box and narrow it's scope in the machine that will receive it (eg, Gitlab Deployment Keys -- locked in read-only mode, single purpose).

The reason rotation isn't recommended is because it leads to bad practices (people just add a '1' to their password)

To some degree. I personally rotate my keys whenever I change my personal/work device (perm. change), or, around every year or so. It's not a hard requirement, but just a personal preference.

it's a hassle

ssh-keygen -b 4096 isn't a hassle... and if you do deployment properly it shouldn't be an issue to sync these keys (eg, an AD system holding public key, cloud directories like JumpCloud, etc can all sync the moment it's updated -- even Salt/Ansible/Chef/etc can do it easily, with modules pre-written to sync keys already).

In any event, MFA is always a good idea. But, my biggest concern is that someone would leave ssh open to the public... the time it takes to setup an ACL or VPN to connect to the machine is hardly anything these days with the amount of automated tooling to do it... so why aren't people?

It looks like it's probably generated with Hugo

IBM Formula For Pricing:

Initial Price = Estimated_Cost / 1000

"Oops, we need more money" = (Estimated_Exec_Bonus + Estimated_Corp_Greed) + Worker_Cost + Extra_Corp_Greed

That's how outsourcing works -- who cares if management made promises they could never keep up with, right?

That is a nightmare. I'm not as concerned with "vaccination status" (though, I disagree) -- but, at least 50% of my concern is IBM.

Everything IBM touches turns into a hot pile of garbage that needs billions to rewrite and it never gets better. We'd get a better job if we outsourced to another country -- OR -- gave contracts to companies that aren't IBM (& know what they're doing, of course).

Like all IBM projects, it'll go from a small amount to hundreds of millions, and result in still a fancy powerpoint and broken system.

IBM? Well, I'll never be using that app. To my knowledge, Phoenix Pay System is still in the shambles...

I feel the same way, growing up there was an era of excitement and pure passion -- it's like that's lost today. That's why I've been trying to build up a list of people who feel the same and making a tiny channel for it.

I definitely miss the "old web"....

Matrix & Signal is the best I've found so far. The new Matrix (Element) client is good & people have a much easier time signing up and connecting. Overall pleased.