letters90 · HackerTrans

السنة الماضيةdiscuss

It's simple to setup a resolver, really. Basically just "apt install unbound" and you have a resolver ready.

the only thing you might have to adjust is the access control

https://www.linuxbabe.com/ubuntu/set-up-unbound-dns-resolver...

      access-control: 10.0.0.0/8 allow
      access-control: 127.0.0.1/24 allow
      access-control: 2001:DB8::/64 allow

letters90

السنة الماضيةdiscuss

That'd be a really good idea

https://en.wikipedia.org/wiki/Root_name_server

To be honest, setting up a DNS4EU replica would just be a simple unbound

letters90

السنة الماضيةdiscuss

If denmark was to successfully adopt libreoffice they would probably invest in its upkeep aswell

Preventing another migration is a cost reduction in itself

letters90

السنة الماضيةdiscuss

Not in other countries besides the US. Haven't seen a printout since I started doing taxes.

letters90

السنة الماضيةdiscuss

With DBeaver I was able to use tnsnames.ora to use a few tricks to connect to an oracle db

It required certain host/user/cid combination to pass the whitelist.

letters90

السنة الماضيةdiscuss

The minecraft demo is quite impressive

https://browsercraft.cheerpj.com/

letters90

السنة الماضيةdiscuss

the update is gold, original message: "They are reproduceable" updated message "lol actually not"

letters90

السنة الماضيةdiscuss

I'm not the type to write a blog. I just don't want to invest that much.

What I do though is documenting for myself, everything.

It has helped me greatly in the last few years

letters90

السنة الماضيةdiscuss

I was asking myself the same question, looking for something noteworthy.

No there's nothing here to find. The way to go is in the linked discourse, god it's ugly, use iperf.

letters90

السنة الماضيةdiscuss

I used nspawn to get a system running in the most ridiculous way.

A debian aarch64 vm on kvm starting a systemd-nspawn for an unpacked raspberry pi 3 iso.

It works way too well judging by how ridiculous it was.

Still saved me a few days instead of setting things up myself.

I actually liked how easy it is to spin up nspawn as a systemd service

  [Unit]
  Description=Raspberry Image Machine
  After=multi-user.target

  [Service]
  Type=simple
  User=root

  ExecStart=/usr/bin/systemd-nspawn -D /mnt/ /sbin/init

  [Install]
  WantedBy=multi-user.target

letters90

السنة الماضيةdiscuss

> All you need to use is a mac.

Might as well require you to pay 1000$ up front to use.

letters90

قبل سنتينdiscuss

If you wanted to view this from a darker side it could also be titled:

How to generate a hit list to hurt a global economy

letters90

قبل سنتينdiscuss

it's nothing new for cars to be susceptible to replay attacks, yet it's always a proof of incapacity of the involved developers.

to even implement such a design is audacious

letters90

قبل سنتينdiscuss

or just a portable mingw coming with an openssh and a dynamic proxy

there you go with an easy socks5 proxy.

letters90

قبل سنتينdiscuss

So much work just because someone is using advertised dns from pppoe

letters90

قبل سنتينdiscuss

I don't really see where you are getting that

https://github.com/hcengineering/huly-selfhost

letters90

قبل سنتينdiscuss

I didn't consider embedded, probably the biggest target for this.

letters90

قبل سنتينdiscuss

> In our experiments, it takes ~10,000 tries on average to win this race condition, so ~3-4 hours with 100 connections (MaxStartups) accepted per 120 seconds (LoginGraceTime). Ultimately, it takes ~6-8 hours on average to obtain a remote root shell, because we can only guess the glibc's address correctly half of the time (because of ASLR).

Mitigate by using fail2ban?

Nice to see that Ubuntu isn't affected at all

letters90

قبل 3 سنواتdiscuss

Scan Created? Scan Created where? ...

Usage Instructions seem lacking.

letters90

قبل 4 سنواتdiscuss

No mentioning of abcde ?

Would like to know how it's seen in the ripping community https://wiki.ubuntuusers.de/abcde/

comments