• 0 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle


  • If you use HTTPS, the attacker can still see what websites you connect to, they just can’t see what you are sending or receiving. So basically they can steal your browsing history, which defeats the purpose of a commercial VPN for many users.

    This is blatantly false. They can see IP addresses and ports of you connect to from IP packets, and hostnames from TLS negotiation phase (and DNS requests if you don’t use custom DNS settings). HTTP data is fully encrypted when using HTTPS.

    If exposing hostnames and IP addresses is dangerous, chances are that establishing a VPN connection is as dangerous.


  • Control of the DHCP server in the victim’s network is required for the attack to work.

    This is not a VPN vulnerability, but a lower level networking setup manipulation that negates naive VPN setups by instructing your OS to send traffic outside of VPN tunnel.

    In conclusion, if your VPN setup doesn’t include routing guards or an indirection layer, ISP controlled routers and public WiFis will make you drop out of the tunnel now that there’s a simple video instruction out there.




  • Please correct me if I’m wrong, but doesn’t this allow one to represent virtually any resource as a mail inbox/outbox with access through a generic mail app?

    I’m working with a specialized healthcare company right now, and this looks like a way to represent patient treatments data as an intuitive timeline of messages. With a local offline cache in case of outages. Security of local workstations is a weak point of course, but when is it not…






  • Sorry, but you don’t get to claim groupthink while ignoring state of Apache when Nginx got released.

    Apache was a mess of modules with confusing documentation, an arsenal of foot guns, and generally a PITA to deal with. Nginx was simpler, more performant, and didn’t have the extra complexity that Apache was failing to manage.

    My personal first encounter was about hosting PHP applications in a multiuser environment, and god damn was nginx a better tool.

    Apache caught up in a few years, but by then people were already solving different problems. Would nginx arrive merely a year later, it would get lost to history, but it arrived exactly when everyone was fed up with Apache just the right amount.

    Nowadays, when people choose a web server, they choose one they are comfortable with. With both httpds being mature, that’s the strongest objective factor to influence the choice. It’s not groupthink, it’s a consequence of concrete events.



  • Atheist is a non-believer. Prefix “a-“ means absence. Every human is an atheist unless they believe in every god. The word was first used in relation to Christians.

    Anti-theist is someone opposed to religion or belief in supernatural. “Anti” means “opposed / opposite to”.

    Agnostic is a bullshit cop-out term that at some point in a Christian discourse briefly meant “someone who considers supernatural to not be knowable”, but doesn’t have a proper meaning nowadays. It has a transactional role in conversation - it most often relays unwillingness to continue the conversation on religion.

    A “definite belief that there is no god” would be “gnostic atheist” in proper terms. I.e. “god is knowable and he’s absent”. But those proper terms were barely ever alive. Instead, people dance around topic of religion as if it didn’t enjoy enough fucking dances for millennia past.





  • Seems to me, you’re dealing with a micromanager.

    Personal recommendation - put things into writing. When you get your assignment verbally, write it down with assumptions you have to make to fill the gaps, and send it to the person who gave you the assignment, with the person responsible for your teams’ results in CC. Basically an “I heard you, and I’m starting the work as described below”.

    Communication is one of the most important skills in software engineering, and this way you get to practise it while probing the social waters of dealing with management.

    Try it, see how it goes, adjust accordingly.


  • “We decide that it exists so it exists” is a terrible argument.

    Consequently, there’s no “trap” in attributing it to neurochemical signals. Emergence is a known phenomenon, and it’s present everywhere. Asking “which signal is qualia” is as nonsensical as asking “which atom is a star” or “which transistor is the video on my phone”. It’s a deflection and misdirection.

    I get it, people want to feel magical. But there’s a name to magic that works - science. Neurochemical processes are no less magical than some untestable source of experiences, with one big difference - they demonstrably exist.


  • You just replace that anxiety with a different fear.

    I don’t fear oblivion, I fear it will keep me waiting. Not existing is a silent matter, living past your due as a broken, diseased husk or a person is a torture to you and those you cherish.

    Death is a promise of rest, there’s no need to fear it. I’m a bit sad that I won’t get to witness most of the things I want to witness, but so be it.