tiberious726

I'm not saying they're great, especially recently, but as another anecdotal point, I've been using nothing but ASUS boards in my personal systems since 2003 and have never had an issue with their hardware

They absolutely sold long lasting lightbulbs. There were horrible and no one bought them except for specialty scenarios.

The standards were set around what could be sold as a standard lightbulb.

Sounds like their competitors need to advertise better

From what I've seen, it's usually skimping on the heatsink over the rectifier.

The candle that burns twice as bright lasts half as long. The converse is just as true of tungsten filaments as it is of candles.

I know this is a common pop-history thing to cite on the Internet, but I would think hackernews would understand the benefits of standardization.

If every brand's lightbulb has different luminousities how on earth would architects decide how to space fixtures?

This "cartel" is how we avoided a dimness war, like the loudness war we had in digital music a decade or so back

"If they found a zero day in these application whole Internet will go up in flames."

Don't move the goalposts. I'm certainly not saying that nginx is insecure. I'm saying that if you think any piece of software written after the 80s has reached the point where it won't have 0 days anymore you just haven't been paying attention

I mean... 10 years of not being able to compete with companies subsided with a world powers national treasury isn't really saying much of anything

As I recall, there wasn't a single thing in the leaks that wasn't already widely known in security circles. Hell, a few months before them I had IBM in my offices proudly telling me that they were the suppliers for the Utah datacenters.

I'm still pretty convinced the whole thing was a US operation, to shut up the people who would insist everyone who knew about these things was a crackpot. Could the current push for NIST 800-171/CMMC have really happened without Snowden, or something much worse?

And how would they tell anyone not right next to them what they thought? Word of mouth certainly isn't an answer, ever played telephone?

The illiterate weren't able to communicate outside of their immediate vicinity. They simply weren't part of the conversation

What planet are you on? Nginx had a 0 day as recently as April 2022 https://www.accuknox.com/blog/nginxday-2022-nginx-ldap-zero-...

This happens _all_ _the_ _time_

It's not defeatist, it's called defense in depth

This is very much so sticking your head in the sand. Some attacks are sold to highest bidder, others are deployed wide and fast. Some of us are responsible for securing high-sensitivity systems where such a shoot from the hip and trust everything will be okay attitude isn't acceptable.

Don't most isps check the source address before relaying traffic nowadays? I know at least one of mine started a few years ago (and we had no idea we were asymmetrically routing our traffic till then...)

But the SIM card would need to from the particular ISP you are trying to block, otherwise you would be coming out of a different isps cgnat range, no?

Yeah exactly, try running an esp VPN on a different port and see how well that works.

Your country is a bad global citizen. If they started taking action against the groups trying to break into my systems every minute of every day then I wouldn't need to block the entire jurisdiction.

Geoblocking all sanctioned countries was the best thing I ever did

Don't be ridiculous. The string is 'thisisunsafe' just type it when the hsts whining page has focus, no text box.

The primary value I can see in it is extending something similar to w|x protection to JITs and interpretors. The article does say that it was originally for Chrome

Oh wow... That's pretty nuts. I guess the reason is to make it harder for people to lock themselves out of all their servers if OSCP or whatever is being used to distribute the CRL is down.

Why is this worse? Voltage step downs are cheap and not too hot in this day and age. I'm all for simplifying power distribution in my systems

Eh, it's not just home/small office. Their proliant servers took a pretty big nosedive around Gen 9 or so.

I'm sure they still have some nice specialized industrial equipment, but their general purpose computers, even on the high end, just aren't what they used to be

I think they just wanted the fan replaced....

There are like three operating systems in common use. An attacker being familiar with the one you use certainly isn't a "Hollywood level threat scenarios".

Buying the same model laptop and swapping it with your targets is an elementary level targeted attack

So I get my hands on your laptop for a few minutes, there should be nothing you can do to impede me from doing whatever I want to it?

TPMs are awesome of you use them correctly, it's like having a yubikey built into your computer

Moneysphere lets you do this with tsigs on gpg keys. I find the web of trust marginally less painful than X509

Setting up regular publishing of CRLs is just part of setting up a CA. Is there some extra complexity with ssh here, or are you (rightfully) just complaining about what a mess CRLs are?

Fun fact: it was just a few months ago that Heimdall Kerberos started respecting CRLs at all, that was a crazy bug to discover

No. It's just not safe to try to skirt international sanctions.

Note that these are sanctioned countries