throwamay1241

Consider it a 'cost of doing business'. Everyone gets DDoSed, I'm pretty sure that's one of CloudFronts primary service-based solutions

You'll also have to prove the IOT device DDoSing from my IP isn't a rogue device. I swear it's not mine.

Can't wait to tell Gran she's legally liable for a DDoS because her unsecured IOT washing machine best buy sold her caused the internet to cave in ;)

- Advertising for potential DDoS service buyers

- Bragging rights

- Experimentation

Edit: Also potentially political or personal. Eg Posting something that offends 8chan||nation states etc.

There's quite often blackmail involved (Pay us $x BTC and we go away).

Cloudfront or similar should offer DDoS protection for free as a gesture of goodwill, it's good bragging rights for CF so everyone wins.

I found that really informal comments cut less deep 'hey man this needs double checking, read up on $x and then reconsider this block' (gender aside) is far better received than 'This is missing fundamental concepts around $x read up on them then rewrite this block'

'Commit to master, that way merging is somebody elses problem'

I see you're new to Australian media reporting standards, or lack thereof =)

I still don't understand why services don't attempt to bundle more. All my media is pirated, which conveniently ends up in a single app.

I'd probably consider a $10-15/AUD streaming service if it included all the music, movies and party-music-video playlists I need /in one app/. It'd be a pretty tactical move to bundle that all into a decent internet plan, too.

But judging by the TV shows my sickchill server and automatically nabs and pushes to my plex server my tastes would require 4-5 separate services and be in the range of $40-60/month, so I guess I'll keep doing what I currently do.

Yes, but is the content the same content that Janet keeps raving about (and plot-spoiling) by the water cooler?

I'll also point out that defending against buffer overflows which are considered vulnerabilities is a far saner boundary than a blacklist of files which grows infinitely.

Or we could, you know, just stop using Microsoft Office and Adobe products which are a huge, if not the biggest culprit of that kind of crazy behaviour.

There's lots of 'Do we need Kaspersky' type questions in here already. The more pertinent question is whether AV is actually effective, or if stronger countermeasures like application whitelisting are needed?

https://www.youtube.com/watch?v=gvcgHkeZ1i4&list=PLqz80p7f6d...

I really like mac keybindings.

However, I really dislike how if I click what is traditionally the maximize button, it doesn't maximize both horizontally and vertically. I also really dislike how if I use the fullscreen mode and then use alt tab to switch windows it takes like 400ms to transition with some animation, and I can't disable it. I also really dislike how alt tab behaves, I want it to switch all windows not window classes. I also really dislike that I can't alt-click+drag to resize or move windows like I can in linux.

But most of all, I really dislike that there's no easy way to modify these behaviors without installing third party applications which at best can be described as dirty hacks.

They're the major reasons I use GNU/Linux over MacOS. Or would choose Windows over MacOS if Linux wasn't available.

As soon as people stop treating the physical layer as a security control, the better.

Encrypt your damn comms.

And if you do manage, it's granting the ability to intercept/modify traffic, right?

If so, this won't lead to RCE on a host mobile unless other exploits are used. There's probably some interesting stuff that can be done against shitty IOT-type devices, but they should be assumed vulnerable anyway...

That's for unencrypted credentials captured going across the wire by the ops team. That's to highlight insecure comms not hack people.

There was an instance where someone used a wifi pineapple 0day to brick pineapples, which are considered script kiddie tools in many circles.

Generally nobody will waste a valuable 0day at defcon to attack a personal device. If you get popped it's probably because you're running known vulnerable software.

This isn't even a service request, it's a bug report.

Are you able to name a reputable email provider which isn't >$60/year or self-managed? My 65 year old mother probably wouldn't be interested in either of those two, but would be willing to pay for per-use support lines for the one time in 13 years which rendered her account inaccessible.

And lets not forget my father, who couldn't access his _paid_ Telstra/O365 standard-user work email. When I called the Telstra support line they gave me administrative access to the entire instance, no proof of ID necessary (I literally said I'm not associated with the company and calling on behalf of my father).

To be honest, I'm not sure which is worse now that I think about it.

> I wouldn't expect any free service that involves a paid employee from any service I don't pay for (with money, not privacy).

I expected at least one response suggesting this. I, and many others would consider email access my absolute most critical asset, it's also extremely difficult to switch providers. It's not like your real estate goes 'nope sorry you can't prove yourself, we can't replace your lost keys without validation, sorry, go buy new stuff and live somewhere else' - I imagine that would be illegal in many countries even if the place was rent free.

I understand that Google support, if it existed, would be inundated with bad tickets. However, I don't imagine having a skeleton set of support staff and a support workflow that requires users to climb mountains to communicate with a human would really impact on googles bottom line. It would have stopped me venting in various places about the issue, and might end up losing potential sales when I/others push our employers to use $not_google because their support sucks.

- Unit/Integration test X11 tools inside docker Xephyr sessions during CI

- Transplant magnet links from ThePirateBay into a bittorrent client

- Type stuff into virtual machines rather than install guest additions

- Import data into remote desktop sessions for otherwise internet-isolated+Copypaste disabled remote hosts, complete with integrity checking powershell scripts which were also imported into the environment that were used to self-integrity check prior to integrity checking other files.

The use of xdotool is probably an antipattern in a perfect world, but that doesn't mean that it's not damn handy from time to time.

> Problem is, that you might want Wayland support, as X is on the way out.

I vaguely remember someone saying something similar about IPv6 once.

For those looking for obscure-but-useful, checkout xdotool. `sleep 2; xdotool type "foo"` is super handy for typing passwords into virtual machines which don't support guest additions. I'd rather not elaborate on the filthy things I've made it do, but rest assured you can use it to do some quick and dirty automation tasks if you really need to :)

I helped my mother reformat her computer remotely. We successfully ported her mail client but managed to lose her gmail password - meaning we had enough access to send/receive emails but not create new sessions. The account was created some time in 2006. A week prior to the reformat she had changed jobs, and lost the mobile phone number associated with her account.

The second factor email was associated with my account, I could see reset codes come through which were relayed to her but would result in an 'oops, something went wrong'. My guess is a bug due to account age / whatever.

I figured we had enough evidence to obtain a password reset, so I googled for gmail support contact details. There are none.

I then tried repeatedly to contact Google via twitter, all my tweets were ignored - probably because I only have like 20 followers.

In the end, my mother ended up porting her old mobile number to a prepaid sim, as $previouscompany had disconnected the number entirely, and used that as the second factor to reset the account.

Pretty damn frustrating that Google doesn't have any unpaid inbound support _AT ALL_.

Next time I'll consider paying a twitter influencer to impersonate me (or my mother), or paying for adspace, or using a mail service that exposes at least some form of support.

Pokerstars who suspect accounts are bots actually require the player to film 360 degrees around themselves, then play for an hour with a camera focusing on input devices and the screen, they check for differences between current behavior and historic behavior

At the nosebleeds, poker hasn't been around those things in a long time.

Poker is about exploitative play against people who base their play off emotions, and unperfect game theory optimal against players who don't base their play off emotions. The more perfect the GTO play is, the higher the winrate against the latter group, but higher stakes games are built around one or more bad players - pros will literally stop playing as soon as the fish busts.

No, it's to mask actions. If you bet big with monsters and check with air 100% of the time, you opponent knows when to fold and bet.

iirc, the frequency of bets in that spot is roughly equivalent to the frequency of times you're definitely in front of your opponent in that particular spot, but not always with the hands that are beating your opponent.

The concept is called Game Theory Optimal (GTO) and it's pretty popular in higher stakes games.

Who were the pros? Are they credible endbosses? Seth Davies works at RIO which deserves respect but I've never heard of the others except Chris Ferguson who I doubt is a very good player by todays standards (or human being, for that matter), but I've never heard of the others when I do know the likes of LLinusLove (iirc, the king of 6max), Polk and Phil Ganford.

Is 10,000 hands really considered a good enough sample? Most people consider 100k hands w/ a 4bb winrate to be an acceptable other math aside. However, as your opponent and yourself play with equal skill, variance increases to the point where regs refuse to sit each other.

I don't think the act of sending the POST is blocked by CORS, receiving the POSTed response data is though.

Browsers have weird behaviors on localhost, such as allowing webcam and microphone on HTTP and iirc, permit cross-origin resource access which is blocked on less trusted domains.

What if the owner and rentee were in kahootz? Or the owner just decides to report the the rentee has stolen the item?

Maybe the latter is covered by business logic, maybe not.

I wish there were more modifiers. One for navigation, one for wm control, one for app control, one for input manipulation...